Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa
File:                     21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa (raw, json)
Hash identifier:          wkIbjjPXlYMCDJoiO99CxOT4gDG9YsjXoCGq4ogVofY=
Subject key identifier:   E2:C1:31:8C:CB:3D:47:E5:02:F2:5D:F5:D3:48:BD:53:DC:BA:4D:10
Certificate issuer:       /CN=93efedd2-1e8b-4d2a-b834-4cc0388fe9a7
Certificate serial:       010D0C9F4328584EA787104E83BA173C02017234
Authority key identifier: BA:1E:C3:C3:4A:E1:45:8F:CE:6A:CA:C5:1C:2C:21:80:95:84:99:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13576
IP address blocks:        2605:4900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:10:4e:83:ba:17:3c:02:01:72:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93efedd2-1e8b-4d2a-b834-4cc0388fe9a7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fffe92ca-d1c4-41f6-ad2d-82c6a7316796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6d:ab:20:39:b2:8c:7b:e9:7f:2b:84:fb:1f:
                    93:1b:a3:de:52:66:3c:e6:fe:70:af:6a:b1:f8:72:
                    3f:af:88:91:e4:fc:90:93:d8:ff:41:8f:44:41:3e:
                    4c:b6:38:fc:e6:37:e8:fa:01:60:5c:42:ec:aa:15:
                    9f:29:05:92:a6:bf:2e:39:ed:02:06:c8:5e:ba:0b:
                    63:d5:78:49:cc:11:84:04:9d:8d:9d:ca:d7:a0:a2:
                    70:39:35:08:bf:77:57:ae:3e:f5:a6:68:b2:ba:ec:
                    c0:d3:96:64:d0:fa:55:98:07:b3:92:21:fd:ca:bc:
                    c5:75:d9:ff:68:1b:7c:e3:95:4e:7f:9f:f6:75:2b:
                    88:5a:cf:12:87:f9:12:e9:f9:4c:cf:79:be:b4:94:
                    db:b7:95:4d:12:c4:68:97:89:a8:f6:5a:ec:c6:55:
                    6b:a3:72:69:17:7d:b0:e4:b3:1e:97:0e:46:14:ea:
                    36:0b:a7:10:f9:97:ad:e6:58:3c:fa:82:73:fe:de:
                    5a:99:2b:e1:84:eb:9c:16:3a:6f:7b:f5:3b:61:7d:
                    ec:aa:31:b5:06:be:81:59:ae:4c:62:5e:11:9e:0c:
                    5d:5f:20:ab:ac:f8:9c:18:36:3b:d1:e1:d9:5c:f8:
                    b1:cb:67:5c:ad:45:15:b9:4d:09:a5:08:8f:e6:81:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C1:31:8C:CB:3D:47:E5:02:F2:5D:F5:D3:48:BD:53:DC:BA:4D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/21c39b56-e45a-336b-8cd3-9e3eff45daf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.crl

            X509v3 Authority Key Identifier:
                keyid:BA:1E:C3:C3:4A:E1:45:8F:CE:6A:CA:C5:1C:2C:21:80:95:84:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:f8:54:95:9e:3a:e6:19:b1:55:f8:39:32:34:b9:39:37:
         bd:cc:0a:e9:dd:5f:71:c1:fe:d2:40:f9:6d:b1:1a:51:c9:f6:
         77:e4:6c:43:2b:50:bd:2f:d4:2a:74:7a:6a:4a:41:9a:23:2b:
         b0:1f:b5:a5:72:c1:3c:1a:42:60:59:39:f2:ed:45:c3:9c:7a:
         c2:2c:89:f3:2f:f9:01:d1:68:73:8e:38:e4:5a:10:d5:07:ba:
         a4:a9:ca:d5:3f:08:88:49:51:3a:b1:f7:e9:d5:b4:4b:cc:59:
         ce:91:05:a0:1d:b7:20:01:41:25:75:d8:7d:a5:7f:43:10:ee:
         85:0d:68:37:72:66:46:9c:a5:55:76:87:e5:e9:29:22:0c:8e:
         86:b4:f1:56:69:e7:5f:03:e2:78:5e:45:ee:06:68:cc:ca:fc:
         fc:5c:ec:46:17:4b:09:c3:bf:9e:de:50:e0:4b:28:b4:9b:20:
         d1:0f:ed:9f:a8:ba:6d:29:50:15:ef:53:13:ba:25:ba:b6:52:
         c1:5c:e4:3e:3c:f4:26:50:a4:0e:80:cd:7b:10:49:3d:a9:da:
         b6:ab:cf:b5:f0:81:29:22:2a:0a:25:c6:1b:5e:7c:3c:48:87:
         d2:e1:6d:97:ff:30:e5:17:d7:7c:f5:e6:5a:46:f9:c8:85:03:
         a9:16:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:56:21 2026 by rpki-client