Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
File:                     f52b129b-55ba-354b-9c3a-00936112d94e.roa (raw, json)
Hash identifier:          2lnDriwY50YWpFzcWSaMWDibkFlj+jxZER0vYna+5Gs=
Subject key identifier:   E2:FC:D3:26:35:C7:0D:43:CE:54:F3:69:4D:98:44:53:0E:E0:AE:F4
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584ED9C7525ECB2141B9BCAD7B4C
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     32482
IP address blocks:        2605:7840:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:52:5e:cb:21:41:b9:bc:ad:7b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=a1db15ef-0a12-4d51-8956-9ec5f26fc566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:4d:ca:1c:f4:3f:82:ff:e4:6f:b5:77:57:
                    7a:64:7b:cb:87:36:d3:f5:73:f3:4a:a0:1c:48:cb:
                    17:26:9d:93:42:7c:c4:7f:2e:89:64:e9:e5:7e:a5:
                    2f:a7:84:79:42:e7:01:98:9b:f5:0d:f8:f8:58:27:
                    0c:9b:5b:61:61:ce:63:d1:9d:ca:52:17:99:92:8f:
                    af:dd:78:e9:0f:b3:46:c9:64:3c:5d:15:4f:d9:15:
                    29:dc:41:08:6e:d7:10:e5:3b:ea:c7:3e:17:c5:f1:
                    88:d8:d7:e6:9c:83:e6:ce:8c:2a:b9:6a:5c:d0:19:
                    41:fd:d0:04:99:ee:76:a9:c7:06:a7:27:35:7e:cb:
                    04:29:5c:02:c3:39:f2:51:7e:84:5f:8a:94:f3:3b:
                    8c:1d:88:15:10:a3:db:d8:19:4c:52:3f:b8:9d:86:
                    b3:92:7c:d4:ef:e1:3d:ae:38:ca:2d:75:5e:e3:52:
                    e1:40:6e:e0:6f:0b:2d:f3:41:aa:73:f6:88:8e:49:
                    ec:8d:34:43:27:27:ca:74:be:a0:d7:e4:ec:c2:a6:
                    8e:3b:05:99:bc:46:9d:5b:b4:c5:d2:c8:d0:fc:b2:
                    6b:c8:b0:90:bf:6a:97:dd:64:29:4d:92:a8:79:fa:
                    e2:7a:8a:c2:2e:5e:bd:22:a5:ec:75:d0:81:66:e6:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:D3:26:35:C7:0D:43:CE:54:F3:69:4D:98:44:53:0E:E0:AE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7840:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:10:6d:12:18:21:2d:63:7f:c9:bd:cb:24:a4:5e:52:ff:9f:
         57:00:a3:ea:e0:ab:51:d9:05:a3:8e:ae:eb:74:53:7e:26:89:
         91:fd:e7:1e:0c:52:57:68:00:2e:cd:7d:b4:5d:4d:dc:e2:3b:
         b2:9a:0e:ae:17:65:d8:33:ab:28:cc:eb:79:1b:1b:ab:b7:69:
         3b:36:f2:ed:74:69:b3:92:cd:40:c8:62:ed:be:28:80:3a:92:
         88:99:5b:59:3e:6b:c1:13:28:b4:fc:9b:1f:27:4c:3e:04:3d:
         cc:bf:1a:e8:ae:00:de:69:70:a6:8d:20:73:79:27:bd:da:34:
         c3:71:6c:93:91:32:b0:6f:98:4c:b4:bb:7d:6c:5d:e5:8e:75:
         f3:64:57:ca:8a:92:14:dc:b1:f8:de:42:ee:42:67:c8:86:b9:
         91:ac:74:23:7c:73:f7:99:61:2d:54:84:5e:50:99:e1:2b:a0:
         f1:c9:d4:fa:56:8d:96:17:07:0c:35:0b:3e:3a:00:3b:e1:1e:
         05:bf:1b:f7:46:35:64:ba:17:07:76:12:b6:dd:07:13:e6:3b:
         1d:21:f3:29:21:c8:8d:e5:57:0f:f9:f9:3e:9f:5b:a3:cd:5b:
         2e:a1:ea:38:4e:b5:97:80:fb:15:70:11:e3:e7:bb:2d:48:2e:
         e6:30:f5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:36 2026 by rpki-client