Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502/8aa290da-4982-3488-b946-0e02ec15cd4f.roa
File:                     8aa290da-4982-3488-b946-0e02ec15cd4f.roa (raw, json)
Hash identifier:          EVs1lVMFILOrHsPPd4ETw6n5Xs9CFTGQ14KaKuADt8Q=
Subject key identifier:   73:7B:A5:10:B0:48:A8:89:2D:BB:DF:F3:85:6B:CD:18:C2:C7:E5:14
Certificate issuer:       /CN=7448eb7d-b6a4-431c-94a7-7d007fce2502
Certificate serial:       010D0C9F4328584F03A7751A911103F1DCD3A780
Authority key identifier: 37:70:DA:E0:7C:E2:C5:21:E9:8D:53:76:39:0A:60:E3:AB:94:01:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502/8aa290da-4982-3488-b946-0e02ec15cd4f.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     395914
IP address blocks:        2607:8ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502/7448eb7d-b6a4-431c-94a7-7d007fce2502.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502/7448eb7d-b6a4-431c-94a7-7d007fce2502.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:75:1a:91:11:03:f1:dc:d3:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7448eb7d-b6a4-431c-94a7-7d007fce2502
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=6593786f-a9d1-421b-8a6a-134bfd8eef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:29:cd:78:59:59:ff:72:32:2a:a5:7f:3d:
                    6e:78:b0:13:56:de:a5:c1:6c:e9:3b:80:d2:98:3b:
                    e0:2c:52:bf:7d:6a:ce:f2:c6:54:a0:f3:9d:d7:06:
                    99:56:61:0c:b3:2e:fe:47:45:4b:92:80:4a:f7:24:
                    e7:49:2a:43:cd:b9:a9:4f:82:e0:2f:30:6a:28:47:
                    e9:24:8a:c8:f6:69:99:d1:61:c6:5b:8c:59:39:99:
                    cb:da:5b:c9:06:c0:c8:44:2c:b5:f2:c5:06:2f:77:
                    31:1b:9c:1a:f1:84:4c:68:7b:90:87:1c:e9:a3:8c:
                    9f:0f:78:c4:cc:75:a1:62:bd:f4:82:88:c6:1d:9d:
                    54:f2:bc:da:51:38:c9:3b:d4:03:ec:5d:70:9b:63:
                    d2:13:d5:31:70:78:4c:79:be:40:23:01:70:e4:ea:
                    0a:c1:7f:6a:d2:b5:48:e7:9e:56:75:0f:65:83:b5:
                    3b:7e:33:fc:ec:ad:71:93:e2:71:65:45:4e:8f:03:
                    31:b4:7b:34:dc:2c:2e:95:e8:d2:f7:b4:b1:78:8e:
                    8c:22:82:05:2a:9a:2e:43:b2:9a:ff:49:b3:3d:7e:
                    7a:84:93:ee:a6:7b:cf:9c:68:9b:49:7a:d5:27:ae:
                    71:af:57:47:94:c0:d9:02:ed:ff:fc:ad:07:18:4f:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7B:A5:10:B0:48:A8:89:2D:BB:DF:F3:85:6B:CD:18:C2:C7:E5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502/8aa290da-4982-3488-b946-0e02ec15cd4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502/7448eb7d-b6a4-431c-94a7-7d007fce2502.crl

            X509v3 Authority Key Identifier:
                keyid:37:70:DA:E0:7C:E2:C5:21:E9:8D:53:76:39:0A:60:E3:AB:94:01:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7448eb7d-b6a4-431c-94a7-7d007fce2502.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:42:f6:63:64:30:aa:a2:27:82:13:d5:90:54:71:d1:5d:
         e2:2c:41:11:7a:d7:66:9a:26:58:68:91:cb:7c:4a:5c:ef:f9:
         ba:86:25:7f:fc:25:c5:9d:2c:32:9c:60:f7:da:9d:c0:05:c2:
         ce:bb:a4:67:db:f7:6b:eb:77:91:ff:6b:19:07:4c:f5:51:50:
         00:8b:69:f6:59:e8:7b:1d:38:f8:02:d8:4a:2e:76:93:9e:05:
         09:77:69:6e:35:a2:0e:0f:06:a1:c0:60:ab:cb:8f:53:cc:3b:
         ab:da:16:76:2e:4b:a6:d2:09:6d:c9:ea:f5:d0:a3:00:71:a3:
         e3:25:d3:ce:b2:6a:c5:e4:cd:7d:d4:c8:03:fe:56:c7:09:78:
         e3:f2:27:1b:6d:69:36:b6:94:c8:0f:0b:b6:5e:5c:95:b7:9e:
         1c:55:04:55:63:5a:91:84:10:8f:f5:65:39:96:ca:2f:dc:c2:
         2b:3b:c8:41:94:5a:82:cc:4a:69:da:32:b7:5b:d4:9a:d4:3f:
         03:f6:14:ff:77:16:46:2c:b2:71:70:6e:2f:0a:3b:b1:65:12:
         45:ee:89:db:11:d3:88:02:dc:f7:3d:ff:58:6a:ef:8c:db:23:
         e3:17:bc:c3:be:f3:02:81:c7:19:e3:20:82:2d:cb:c6:f0:4b:
         e5:08:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:51:14 2026 by rpki-client