Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/11a84558-2701-3ca2-aa55-25004f14db36.roa
File:                     11a84558-2701-3ca2-aa55-25004f14db36.roa (raw, json)
Hash identifier:          YtFfKdr1y5aIwd/fXSNgtsoan6HP/uwr8Y4dqjisBNs=
Subject key identifier:   82:CD:8F:92:9D:50:93:C7:59:61:BA:5E:3D:02:79:A0:C2:63:37:AF
Certificate issuer:       /CN=72ef9c16-2d45-4e8c-b035-49d30318c10f
Certificate serial:       010D0C9F4328584F02423FAD3C2141EB24D6D980
Authority key identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/11a84558-2701-3ca2-aa55-25004f14db36.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     10352
IP address blocks:        2605:7240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:3f:ad:3c:21:41:eb:24:d6:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef9c16-2d45-4e8c-b035-49d30318c10f
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=ae9a4629-85e8-4a95-8e88-acd96bd188b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8e:67:0b:4f:e3:62:23:88:b3:77:47:16:5d:
                    35:7a:fb:1d:29:60:06:3b:72:c7:1c:2c:a3:76:8f:
                    54:cc:a0:8a:7e:a4:bc:45:98:5f:e1:ab:87:d2:65:
                    55:99:0f:37:c5:a7:3d:6a:fe:27:a1:06:c1:15:5b:
                    a1:4d:29:6c:32:10:d7:96:58:6f:f7:0c:87:f8:01:
                    5b:36:73:ef:7f:7e:9f:fa:a7:88:25:ea:94:ca:60:
                    a5:f9:20:42:b8:f1:47:6a:8d:dd:a1:c7:a1:0f:f7:
                    c9:e6:1b:20:80:ef:a2:ce:ca:ba:a9:03:e2:32:31:
                    a9:be:5c:75:e4:e8:7e:9c:ef:3e:af:de:36:3e:98:
                    24:61:55:5d:36:8c:d5:c9:66:80:53:ad:08:4e:c8:
                    40:e7:1c:f8:f8:06:82:26:ae:de:d4:36:25:cf:07:
                    b5:66:c5:f6:76:b0:c7:95:4f:f3:35:1e:25:5c:83:
                    2b:25:ee:f2:a8:44:04:e5:74:8c:ff:02:fe:0e:2e:
                    db:c9:62:09:47:1e:0b:57:6d:1d:cb:8e:33:a0:b0:
                    78:59:b9:1d:e9:17:2d:09:1d:ce:41:6f:04:d3:d1:
                    e6:f9:ff:72:c7:a8:5f:10:11:61:e0:ee:0d:31:19:
                    1e:43:a6:3a:ed:57:38:7d:3c:85:c0:6f:e7:fb:52:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:8F:92:9D:50:93:C7:59:61:BA:5E:3D:02:79:A0:C2:63:37:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/11a84558-2701-3ca2-aa55-25004f14db36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl

            X509v3 Authority Key Identifier:
                keyid:C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:6e:ec:20:fc:51:24:e1:30:df:82:b3:d2:70:09:1f:03:
         43:09:7c:5d:ef:e6:ae:e4:53:8d:77:ca:d2:6f:bf:bd:cd:41:
         e3:c8:d3:8c:3d:d6:da:06:b1:38:d5:e7:11:f3:01:09:ed:33:
         0f:cf:40:b0:b5:8e:bc:bf:23:1b:21:10:49:c0:4a:cc:3d:7c:
         13:48:70:bd:8d:66:95:7b:90:a3:ed:2d:20:97:e4:4c:bf:c7:
         55:1c:36:46:5c:be:d4:c7:68:c3:95:27:c4:a7:e0:ec:df:ca:
         d9:15:6a:7f:f4:b5:c9:07:60:c9:65:a7:dc:b9:d8:fe:f4:e5:
         f0:09:f1:48:f5:8d:cc:11:93:15:aa:b5:d6:bb:a0:84:02:b8:
         6f:54:8a:e8:39:ce:cc:4b:11:af:8f:ad:07:5b:0c:c6:9f:0d:
         66:5b:1d:c0:78:b9:27:27:b2:b4:2c:13:ff:e7:81:56:a7:2b:
         ab:ff:75:84:6d:19:9c:ab:7a:95:f3:e7:e1:3b:f7:5e:91:3e:
         9e:1b:42:bc:02:10:f0:ff:64:81:49:af:d3:50:4a:58:55:8b:
         9a:98:8c:05:6b:98:4a:f3:32:fc:a1:f9:8f:9c:48:c5:06:9e:
         a3:99:7d:fb:8e:14:39:d2:5b:da:6a:c6:19:e4:52:d8:84:86:
         87:09:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:43:34 2026 by rpki-client