Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7889686a-4853-3f4f-bee0-824b2d894e16.roa
File:                     7889686a-4853-3f4f-bee0-824b2d894e16.roa (raw, json)
Hash identifier:          1wA42gwqo0ZMWwCQMOF0uBbrhzJ/w42pJkLUiDcj5CU=
Subject key identifier:   B9:45:4A:9D:90:0A:0D:9B:17:DB:62:A1:38:9D:45:84:0E:1D:4A:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8578684C4B2D6ED307107840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7889686a-4853-3f4f-bee0-824b2d894e16.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:8204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:68:4c:4b:2d:6e:d3:07:10:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=2e8924c9-dcf6-431d-9bc0-8cec714c66cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:c0:66:ee:6c:98:bf:e5:74:02:39:df:cf:
                    ef:0a:46:3d:fe:8b:6e:4e:e4:d4:4f:28:a8:51:9e:
                    c2:92:5b:9b:5d:54:80:76:7c:42:dc:0c:aa:17:4c:
                    a5:71:7a:63:87:93:04:36:3e:aa:9e:56:f8:31:99:
                    c2:19:e0:cb:18:5b:d8:66:22:49:f3:2b:89:ac:da:
                    48:32:8a:6b:2a:0c:77:7c:fc:91:da:6e:79:8b:74:
                    00:ac:a7:cf:08:d7:a3:9e:4c:e3:2f:07:34:36:69:
                    fd:0d:95:a1:7d:7e:43:41:c9:0a:4b:7e:a0:9d:64:
                    ff:ad:24:41:64:90:14:2a:6b:f7:32:e8:d3:e5:17:
                    6c:02:f4:bc:1e:81:3e:17:19:f7:df:7f:6e:25:2e:
                    8e:5b:e5:e2:bd:c1:ff:a3:35:11:51:08:6c:5e:4c:
                    4a:64:b9:17:f2:18:aa:26:ef:fc:df:32:d6:b4:34:
                    df:63:a8:75:74:5f:a9:f8:41:76:35:8d:06:68:25:
                    d2:fa:9c:f3:e1:07:e8:de:8d:6b:ba:bd:2d:ae:fc:
                    9e:13:7e:d3:d5:ed:08:94:fe:a9:94:ad:fc:96:3e:
                    30:1b:af:a1:a5:a1:40:58:59:3c:2d:a3:8f:71:08:
                    0d:07:8f:2b:8d:81:b1:ef:db:a7:af:7d:7a:85:94:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:45:4A:9D:90:0A:0D:9B:17:DB:62:A1:38:9D:45:84:0E:1D:4A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7889686a-4853-3f4f-bee0-824b2d894e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:55:fb:5e:b3:b3:c4:dc:0b:e8:69:0a:43:ba:62:ce:b6:3f:
         3d:75:8c:55:6a:d8:e4:d2:0a:80:c9:35:24:69:40:a9:a9:d6:
         38:89:a8:9a:2c:13:ea:e4:16:ca:47:39:d9:80:0b:02:6a:e2:
         eb:25:9b:70:d9:be:0c:27:58:6c:f0:2a:27:57:7c:d0:c9:9d:
         fb:5a:f1:e4:db:64:4c:82:42:5b:8b:a4:ca:d2:38:0a:30:93:
         e7:e8:78:cd:68:20:07:55:a4:d6:22:57:26:93:a0:fa:46:6b:
         6d:d9:d9:ca:49:55:ce:fc:e4:b4:0c:90:af:90:21:d1:af:3a:
         48:45:c6:3e:e7:3d:a9:9a:c7:83:50:a3:ad:0b:a3:a4:bc:39:
         eb:6b:d0:24:02:9b:4f:1a:69:44:55:e3:26:bf:c3:40:64:40:
         de:f1:fa:65:b8:5c:53:9a:11:28:b9:39:ab:f7:96:a8:e5:db:
         bd:f6:83:97:c1:d2:a3:ee:44:b3:d5:1f:23:e1:c9:1e:b0:9d:
         65:c3:0c:ee:f2:92:e1:89:6f:e7:24:4f:fe:79:c1:e0:c6:57:
         7e:f7:c6:db:26:d7:c7:01:ce:fe:16:19:7e:51:30:01:c7:e8:
         f9:f8:93:e6:be:cf:20:57:f0:09:e1:0e:b3:2a:89:d3:86:11:
         b7:da:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:33:10 2026 by rpki-client