Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
File:                     c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa (raw, json)
Hash identifier:          UfV689phpDIkd/FvRxJehwJKUKwh4xmJSrLq3+y6/mo=
Subject key identifier:   14:31:D0:04:03:EB:10:8F:1F:22:03:48:BE:CA:E2:2D:8D:80:9D:39
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584F119CFE6A66EFFCD0CB7D5A80
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2607:8d40:f20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:fe:6a:66:ef:fc:d0:cb:7d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=26348668-f576-4dfb-a560-906bec6f5455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:d1:67:7a:9e:6a:02:55:59:6a:b0:e8:8b:
                    34:51:46:6a:3d:34:56:0f:dd:62:23:4d:dd:53:3b:
                    70:ba:6b:b6:34:77:a8:c6:15:fe:5c:5e:c5:2a:1e:
                    fb:99:83:f2:f9:28:d3:92:cc:81:f5:f9:c8:73:fa:
                    70:f6:7a:68:62:aa:f2:4b:3e:41:0d:8c:af:1e:bd:
                    44:59:eb:17:fc:ea:5b:ff:1a:2c:05:e3:8e:ea:95:
                    d6:98:8a:25:7f:61:d0:fe:23:0d:76:85:2e:cd:f5:
                    5c:53:b4:74:27:88:8c:40:ed:bb:0c:34:f0:d5:cf:
                    b6:43:f3:1c:4d:66:dd:90:44:10:18:d3:5b:1b:fd:
                    21:b5:41:8f:a5:34:c6:ff:9f:79:52:d7:2a:da:a1:
                    cb:b4:86:e1:ce:50:82:6a:02:86:a3:3f:a0:b0:45:
                    cc:bc:d5:1e:b6:57:37:ad:44:ee:be:ce:84:e3:77:
                    b9:22:39:e7:a2:67:6d:36:f3:45:1d:1a:82:8c:64:
                    8d:d4:29:c6:fd:96:6f:b5:ca:52:57:22:73:63:b7:
                    96:3e:cd:51:77:5f:f5:7b:62:61:3d:3c:ac:ad:76:
                    ec:38:ee:ef:49:d0:06:ea:8c:ec:38:d6:0e:c2:bb:
                    08:58:26:23:69:f3:64:62:ad:b6:6a:8b:c3:b2:62:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:31:D0:04:03:EB:10:8F:1F:22:03:48:BE:CA:E2:2D:8D:80:9D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:21:a2:14:93:4c:d4:2d:81:f8:10:7e:7c:ad:63:c0:f2:
         9c:6f:77:79:a7:aa:5e:36:45:de:88:44:98:1f:8c:3f:36:a0:
         cc:26:06:91:3c:4e:ab:94:b6:f8:0f:9a:d5:50:36:92:88:af:
         b3:48:c7:ef:6e:76:4f:5e:f8:62:51:79:b7:61:4f:8e:3e:ad:
         bd:dc:e8:d3:91:d4:23:bb:06:c5:56:61:ac:c8:03:d2:59:27:
         92:a6:2b:b3:f6:19:df:2c:94:90:96:07:5e:ca:77:4b:9e:5a:
         eb:1c:95:c6:b2:9f:6a:fc:ee:c3:89:10:60:83:ab:2e:2a:cf:
         06:de:ae:b9:8e:6b:d0:24:8c:aa:f0:44:ae:24:4f:e8:66:fe:
         d1:1d:5b:b7:56:6d:94:df:af:5e:a0:f8:38:fe:7b:e8:a7:0e:
         37:a8:64:70:ea:97:fb:b7:5f:69:a7:25:f3:5b:36:bb:e1:2f:
         9f:a7:7d:e4:e9:71:c8:68:56:67:dd:a5:b7:e3:fa:62:18:92:
         df:76:ef:c3:48:e9:26:3c:f2:8d:63:06:8d:9b:47:63:aa:ef:
         b7:cb:b9:8f:c0:5e:c1:b0:06:89:48:55:a7:cc:c7:d9:0a:de:
         b7:74:ea:37:3b:4f:6f:5c:0b:3e:73:3b:50:39:49:84:10:d3:
         83:44:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:47:35 2026 by rpki-client