Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/efdfd760-234b-359f-ba5f-8935d32d31bb.roa
File:                     efdfd760-234b-359f-ba5f-8935d32d31bb.roa (raw, json)
Hash identifier:          h6NxDHdQgwOtknd9bSzfe07cKFZNbXC9jC8IsAhUWWM=
Subject key identifier:   8C:D8:A8:DA:07:B7:6E:67:B7:10:33:6D:E0:3A:2E:C3:DF:8F:E5:05
Certificate issuer:       /CN=9546315b-1bef-4238-9dad-ebda966a76b5
Certificate serial:       010D0C9F4328584EA79B53B7FE153A695BC01280
Authority key identifier: F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/efdfd760-234b-359f-ba5f-8935d32d31bb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     42198
IP address blocks:        2607:cb40::/40 maxlen: 48
                          2607:cb40:100::/40 maxlen: 48
                          2607:cb40:200::/40 maxlen: 48
                          2607:cb40:300::/40 maxlen: 48
                          2607:cb40:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:53:b7:fe:15:3a:69:5b:c0:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546315b-1bef-4238-9dad-ebda966a76b5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1501b4a2-ff01-47c6-8baa-e83ff81cde26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:76:ba:8c:b0:31:d4:23:5e:65:3f:a3:bb:
                    45:44:c1:8b:d7:ac:2f:d4:f3:f1:a0:a2:30:ea:ea:
                    f9:46:d6:6d:1e:19:4a:3e:67:1c:19:30:7c:aa:b2:
                    31:92:08:6e:31:4c:7e:0b:e1:f5:12:d0:23:17:4a:
                    ec:d2:bd:60:49:e7:81:b1:e5:ef:77:9c:88:96:eb:
                    59:7f:7a:68:4f:71:8f:11:30:11:02:88:a9:7e:75:
                    7c:48:72:d5:39:37:55:e4:c4:4e:26:d0:bc:2d:4d:
                    6d:6a:01:82:15:9e:6d:d9:66:7e:7f:27:eb:33:24:
                    f6:65:22:37:b7:34:97:cf:ef:b7:94:95:15:ff:59:
                    6a:89:7f:1a:e0:12:3c:88:b7:78:93:a7:d8:19:dd:
                    29:d3:b6:6f:51:1d:de:17:bd:69:cf:1b:42:0e:1c:
                    31:73:39:36:ab:fe:6f:d8:c1:c4:61:a5:0d:c4:d9:
                    3b:d2:cc:14:79:41:dd:f1:8d:fc:ab:56:7a:df:24:
                    c5:a9:5f:73:92:b6:bf:db:de:9c:19:9a:74:be:4e:
                    86:d0:7c:fc:34:b9:ae:54:96:7b:3c:1a:07:36:fe:
                    fe:ca:61:7b:0e:cf:2d:01:82:55:6a:46:af:05:46:
                    ac:0e:89:7e:74:73:d6:76:50:bf:3c:c3:ff:ac:4b:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:A8:DA:07:B7:6E:67:B7:10:33:6D:E0:3A:2E:C3:DF:8F:E5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/efdfd760-234b-359f-ba5f-8935d32d31bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5/9546315b-1bef-4238-9dad-ebda966a76b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:AA:E7:07:1E:DA:38:36:45:A2:C2:0C:60:F0:CD:C0:D8:CC:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9546315b-1bef-4238-9dad-ebda966a76b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cb40::-2607:cb40:4ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:8f:7f:34:bf:7c:1b:39:64:a8:b9:1f:5a:ee:8c:17:82:
         64:00:04:22:89:7c:d8:46:09:81:16:09:01:2c:4e:76:6c:d3:
         f7:cb:ee:8f:a4:3d:ba:44:21:31:6d:6d:35:15:ae:4d:49:ff:
         40:ee:e5:8a:cf:2d:93:d5:4d:cc:1f:38:4a:c3:01:85:f4:cf:
         31:5c:3c:37:30:43:83:28:02:6e:65:6e:d4:a1:fa:4f:0a:f2:
         98:86:a5:e8:9b:72:6f:70:d1:c3:8d:52:45:32:87:6f:b9:63:
         ef:03:37:fa:3f:14:c8:6e:81:f8:72:cf:4c:fc:02:94:9b:eb:
         ed:88:29:84:0c:1f:a7:56:2d:36:8b:51:14:6e:40:c4:d5:68:
         f6:47:cd:88:f0:0a:22:b6:bc:2b:21:1e:d6:11:3e:80:22:de:
         26:2a:53:d7:7b:09:66:cd:ed:20:0a:c8:3e:1e:f9:dd:51:80:
         7f:39:d3:68:83:62:d0:2e:8d:30:35:99:94:34:a9:b2:9e:26:
         65:d1:a5:61:5c:1f:df:e2:98:85:83:28:0f:6c:b8:e6:94:02:
         c0:7d:30:15:dd:dc:6e:af:1b:7d:e9:3b:2a:d5:4f:e9:e9:19:
         ce:14:79:f6:8a:51:a7:a6:aa:84:29:89:56:a2:b7:c1:80:cd:
         9b:59:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:06:36 2026 by rpki-client