Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/d90b9aab-bfa4-317c-bfa8-f39c7c3ebe85.roa
File:                     d90b9aab-bfa4-317c-bfa8-f39c7c3ebe85.roa (raw, json)
Hash identifier:          bjclt2yiBF2qjYylw6Sw5kfVcZeCNXpvlZ9Dv463sIQ=
Subject key identifier:   9B:B2:3C:85:ED:F2:A1:13:6A:64:F5:46:6B:FA:C1:4E:4B:BA:D3:6A
Certificate issuer:       /CN=0a445fc9-d70d-4b9e-8d68-26857b19ae7a
Certificate serial:       010D0C9F4328584EFCACC534970A188A9E905C60
Authority key identifier: 56:D2:2B:6F:E8:9F:0A:CB:84:1B:26:B1:19:E3:FD:80:03:AE:E0:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/d90b9aab-bfa4-317c-bfa8-f39c7c3ebe85.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     4922
IP address blocks:        2606:7c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c5:34:97:0a:18:8a:9e:90:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a445fc9-d70d-4b9e-8d68-26857b19ae7a
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=5264d701-a82f-4b74-87fd-bc57add2964a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:24:31:2c:97:45:4d:8f:87:08:6c:51:08:
                    56:50:ac:6b:aa:e0:35:d1:de:b2:e8:41:47:d3:25:
                    76:2e:81:f1:95:02:bd:a2:5f:fa:11:ba:ef:c6:c3:
                    7e:00:13:8d:37:91:52:cd:88:7f:8c:3d:d2:cd:ee:
                    05:ec:ea:55:8f:9e:2b:73:f2:0b:07:0e:79:f5:51:
                    70:94:a1:4b:13:ec:d3:fc:5b:2d:2e:89:aa:78:51:
                    a3:7f:ae:76:53:0f:71:b8:33:25:14:b4:85:12:91:
                    31:a3:b9:f3:64:8b:88:21:25:13:cf:f9:bd:c9:0a:
                    52:ef:66:51:cd:87:74:88:7c:52:11:37:e7:ef:aa:
                    08:17:31:c6:c5:fc:21:c3:b4:d6:ca:50:01:c6:6b:
                    31:10:30:ee:91:22:cd:83:95:5f:f6:55:4a:59:38:
                    29:83:92:19:6b:8a:7c:6c:38:87:e3:fa:13:07:41:
                    e8:c7:ec:50:d9:85:55:d7:e7:cb:d9:cf:01:6c:35:
                    66:32:83:dd:ad:aa:03:f2:e2:a7:55:fc:74:d6:20:
                    0a:06:24:2a:9f:2a:8e:5e:6f:46:79:31:8d:60:34:
                    bb:3f:5d:00:2c:d7:2d:02:fd:2e:5b:e5:ad:fd:c5:
                    2b:24:ae:6f:3a:9b:7f:47:51:0a:e8:d0:1a:77:ee:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B2:3C:85:ED:F2:A1:13:6A:64:F5:46:6B:FA:C1:4E:4B:BA:D3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/d90b9aab-bfa4-317c-bfa8-f39c7c3ebe85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.crl

            X509v3 Authority Key Identifier:
                keyid:56:D2:2B:6F:E8:9F:0A:CB:84:1B:26:B1:19:E3:FD:80:03:AE:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a445fc9-d70d-4b9e-8d68-26857b19ae7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:5e:90:1a:ae:52:d9:54:66:e1:13:b4:18:1b:09:ac:77:
         17:9d:0d:84:a7:5f:23:10:63:b5:c3:61:ce:0f:81:b6:ba:c1:
         38:11:d0:a4:cc:2c:b8:d7:ae:12:2f:1e:05:75:09:9a:e5:7e:
         3e:a8:33:6d:64:62:05:21:24:42:b9:7a:fd:70:4f:4d:70:42:
         99:ac:6c:30:33:1b:ec:63:76:ee:17:b2:05:d9:f4:7a:ba:91:
         0e:aa:fe:25:f4:5c:db:6c:3e:de:62:11:58:6a:e5:01:5d:5c:
         83:61:9c:41:7b:e4:23:48:ec:6c:e6:a7:a5:59:e6:39:f4:5b:
         aa:f8:c1:80:f7:bd:8a:b1:e9:a9:8a:de:81:e1:f0:9f:e6:3e:
         3a:3c:5e:93:df:ec:f2:e3:3d:21:3c:8b:af:60:3c:cc:5e:51:
         df:95:02:a7:4d:ce:52:8e:bd:ea:d1:96:47:59:ff:a6:28:4a:
         39:19:a7:b0:a8:94:a1:e8:e7:d8:fa:dc:67:82:ec:a0:c2:74:
         87:be:6c:af:b7:82:fd:98:78:99:79:33:9d:57:09:31:72:cf:
         e6:f8:f9:85:64:b4:8a:d9:a4:ca:32:98:d5:c3:dc:99:00:5b:
         86:88:ef:69:51:0d:cc:52:e1:dc:45:b8:46:f0:af:0e:ee:cd:
         f3:e3:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 09:30:23 2026 by rpki-client