Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
File:                     8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa (raw, json)
Hash identifier:          xTn5VafLBXErLh+X3NCi+jshNM8DcnWBN5fNvB5GWkY=
Subject key identifier:   F9:42:4B:24:A5:9A:93:13:B8:58:96:4E:C2:22:25:55:8B:CD:25:4B
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328584F4973DC98EF04D24E25F2EB40
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2381
IP address blocks:        2001:4e0:1010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:dc:98:ef:04:d2:4e:25:f2:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dec87e9e-beaa-46e2-9440-7bdb8b25138d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5d:ca:d4:54:02:7a:7d:0d:b9:d9:10:71:c7:
                    00:2f:18:da:d5:18:d4:db:ab:31:06:c2:e2:00:00:
                    d8:8b:34:dc:3c:46:e2:dc:9e:c2:0a:62:d6:7f:9f:
                    a0:38:71:98:80:f5:33:18:d5:08:f7:b2:66:31:d2:
                    b3:83:3b:9c:f3:79:ca:4a:14:74:bd:d2:e6:b4:d5:
                    79:ec:73:c7:2b:40:e8:78:db:0c:4c:42:71:44:68:
                    00:08:21:14:a8:d8:d4:8f:ea:aa:bf:d4:81:24:ab:
                    02:e9:3b:d7:76:98:86:8b:7b:5f:94:3d:71:a0:7c:
                    e9:a6:ca:19:6a:88:54:c0:5b:fa:47:ad:52:7b:d5:
                    6e:bb:f9:4c:b9:6e:42:8f:2c:bc:6e:62:44:54:09:
                    2b:cc:ef:b1:b9:e2:6f:02:5e:a0:7e:ff:d6:b5:ea:
                    20:5a:b5:0c:82:4e:7e:54:56:46:06:97:bb:58:19:
                    9b:e6:fd:26:8c:80:69:51:75:54:39:22:c3:44:75:
                    2e:fb:0f:82:d3:17:a7:92:7b:f3:22:dc:08:9d:f1:
                    60:9e:63:fd:f8:ee:61:52:22:77:7f:9c:0c:59:95:
                    bd:8f:a1:22:7e:e1:80:1c:6c:98:d4:4f:ef:43:34:
                    4f:9e:f7:9e:84:7f:2e:8f:7a:98:4f:98:b2:af:6c:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:42:4B:24:A5:9A:93:13:B8:58:96:4E:C2:22:25:55:8B:CD:25:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:98:8c:4d:9f:90:26:59:58:cd:9b:d3:2b:de:19:07:2a:
         4f:86:34:78:9e:8b:38:c0:48:a5:e4:05:2c:16:fb:de:79:80:
         07:27:95:66:7a:10:24:b6:46:88:5d:45:d0:74:be:e2:68:e1:
         ed:de:10:a4:11:1b:91:aa:4d:63:0f:43:70:e1:c7:2f:09:58:
         91:04:0f:e9:95:76:36:db:8f:3c:2a:8b:ac:f0:46:3a:ee:dd:
         a0:60:4a:62:b9:1c:97:36:b3:5c:47:5e:f2:7c:fc:de:2d:8b:
         22:ca:cb:73:25:3e:4d:08:fc:80:94:b6:ee:94:1d:ca:c3:91:
         09:42:d2:4a:a3:b4:58:fd:8e:f3:ff:67:3b:8e:64:dd:fa:28:
         16:24:bd:b8:35:a4:36:1d:22:1b:94:02:d3:3f:5c:7f:ba:66:
         1d:89:08:c9:aa:75:0b:88:46:93:15:fa:44:02:a4:10:cc:28:
         15:5c:4f:c5:e0:8d:27:dc:0a:33:a2:76:9c:47:68:11:cc:22:
         20:a9:e6:80:d2:2c:0a:14:20:43:5c:d1:31:a3:e3:f4:61:d0:
         1d:44:d2:ba:13:15:dd:a7:31:48:94:f6:29:b2:fd:72:3f:fb:
         99:96:a7:44:8f:5a:7d:19:51:47:09:4f:18:4e:b0:2e:2f:dd:
         41:50:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:47:22 2026 by rpki-client