Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa
File:                     ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa (raw, json)
Hash identifier:          sT2TzrZfnC40egEJmjfH9EeKlLISwwQ26bCOvkLWxZU=
Subject key identifier:   4C:F5:ED:16:CC:07:10:C2:1A:45:61:5A:3C:0B:85:14:62:3A:FB:C6
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584EB57C61920905F081BCEDFE00
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     4473
IP address blocks:        2607:9bc0:1020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:61:92:09:05:f0:81:bc:ed:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=428916ce-5803-4627-9fb3-d8f490366c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:a4:ff:5f:25:58:aa:c0:a1:0f:5e:9f:f0:
                    3b:85:f2:35:c2:b3:7e:a1:92:6b:3d:e0:30:67:00:
                    9d:42:ab:59:12:3c:51:8f:70:c1:41:78:0d:4f:69:
                    29:00:4f:e6:0d:88:07:a5:a6:b7:35:ee:90:50:54:
                    7b:ac:3b:46:18:c2:71:ce:6b:31:8c:a7:91:9e:40:
                    1a:75:ca:87:20:41:5d:88:64:19:38:b7:a4:7c:f0:
                    67:d6:d7:2b:5c:b0:5f:28:b4:8b:f0:9f:52:27:26:
                    2a:c1:70:0f:af:75:fc:a5:b6:5e:51:f8:f6:0a:eb:
                    cb:9d:12:22:ad:38:ce:a5:58:3b:4c:d2:e5:35:57:
                    94:b3:0a:82:05:2c:56:59:de:ea:7d:8c:3d:aa:37:
                    33:1e:d0:b6:0a:eb:f8:04:c9:7c:b9:7a:10:1c:00:
                    c6:a6:0a:b7:b7:ee:ac:26:76:48:42:e8:ae:1d:8e:
                    71:b9:a1:a7:dd:da:31:6d:63:38:1d:e9:46:04:ea:
                    b8:41:0d:e9:29:16:4c:a8:5d:44:d4:6a:12:87:8a:
                    3a:98:8c:89:c7:68:fb:8a:e7:e9:00:57:30:d8:27:
                    aa:82:23:cf:82:69:51:92:66:e3:cc:a9:ed:40:78:
                    70:9d:89:7e:12:76:b7:e7:b8:91:f5:72:4d:fe:74:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F5:ED:16:CC:07:10:C2:1A:45:61:5A:3C:0B:85:14:62:3A:FB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:68:46:19:75:b0:dd:86:98:1b:09:0e:9b:42:32:50:ce:51:
         bb:f1:a1:17:ff:23:c2:b5:7e:5e:2e:a7:cb:f1:e6:e6:84:2a:
         dc:79:8b:49:a9:54:c2:1a:d5:2a:47:b1:2d:9b:c4:44:bc:ba:
         8d:4c:5c:9d:36:7a:a9:a1:14:17:29:14:ba:91:d9:ec:56:43:
         a6:4c:7c:ce:67:ba:37:f5:63:0c:3e:04:34:0c:72:1f:ac:ac:
         80:a2:15:b1:be:3a:5a:de:1e:23:b8:30:b5:08:81:5d:12:ae:
         43:e7:ae:18:66:61:dd:46:0a:60:61:94:15:cb:11:89:4e:c7:
         24:5d:b6:92:28:c6:46:9e:1b:98:99:9a:cd:03:10:88:de:f8:
         7f:a6:1b:b7:2f:46:8d:d3:70:63:2f:da:6a:92:8e:9b:a1:c6:
         09:42:97:7e:f6:05:dc:62:18:6d:98:e3:fc:5a:e1:be:30:8a:
         53:dc:38:1d:fa:c5:d2:11:0e:6f:39:4b:94:1a:7b:8d:d7:d1:
         0f:f4:bb:7f:ac:a2:28:e9:17:56:70:01:2e:89:53:11:3b:fb:
         a4:b5:89:ae:f7:b4:5f:5f:4f:d2:1e:0b:4f:f9:33:9a:f7:35:
         0d:9d:8b:60:34:a0:b5:c6:68:82:b3:96:58:71:3b:85:b5:62:
         19:6e:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:33 2026 by rpki-client