Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa
File:                     89ff1085-ba92-36eb-a445-62bd838995f5.roa (raw, json)
Hash identifier:          XEIR53HNZP2Sn2w8kQSp+G2u6CRzQGliLbmTU112asY=
Subject key identifier:   08:D3:DC:09:03:77:28:DD:7C:3F:0D:59:9E:A6:F1:F6:3B:5C:FC:D9
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584EA798E5E7C3FBA73492E7C42D
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400097
IP address blocks:        2606:3d40:5d03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e5:e7:c3:fb:a7:34:92:e7:c4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8a4b1869-28c3-49f7-a87e-a21e99d40ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:8c:f2:cf:62:f8:52:95:20:5c:b3:2b:05:
                    5a:0a:fa:58:a4:d4:69:a9:a2:7b:2d:58:bf:62:9c:
                    10:ef:31:e4:ee:c6:c2:23:a4:de:55:8d:ac:58:b7:
                    81:63:55:39:9b:c0:37:32:4a:a2:e6:cc:30:bd:bb:
                    71:30:f5:4a:ae:62:1f:78:03:d8:25:46:be:db:5c:
                    9c:ad:f9:20:fe:76:1b:28:90:64:e0:2b:76:47:cf:
                    99:f9:1b:a0:07:58:03:7b:3a:a2:46:17:3d:5d:83:
                    a4:10:72:ae:d1:a1:22:57:b7:90:cc:47:71:6b:31:
                    45:f7:36:c6:77:56:c7:d6:c1:43:29:d1:f8:29:62:
                    8a:28:0d:17:bb:fa:8e:1e:36:58:ab:ac:3b:7e:eb:
                    0c:7b:38:0c:c4:42:1d:dc:78:09:5a:b0:de:de:a7:
                    b1:74:8f:76:14:2d:37:7f:43:ca:93:a0:c1:b1:13:
                    31:8a:07:56:42:4b:78:dc:d2:d1:9d:ac:be:a0:d1:
                    8e:c6:f4:90:38:ab:8d:12:05:69:4f:e4:d0:4d:61:
                    c9:b2:34:f7:89:85:e9:1b:f1:7d:4c:2b:36:5f:e6:
                    42:79:bf:48:0a:aa:62:db:6f:03:17:c9:4b:2b:7e:
                    75:ad:54:5d:dc:ec:a1:26:8a:80:1a:0b:cd:52:9e:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D3:DC:09:03:77:28:DD:7C:3F:0D:59:9E:A6:F1:F6:3B:5C:FC:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/89ff1085-ba92-36eb-a445-62bd838995f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:5d03::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:41:df:0e:fa:e8:3d:4d:55:3f:6a:5e:fb:25:57:3a:75:e8:
         48:80:49:cf:59:e8:2e:01:02:ed:d6:54:63:a9:57:82:60:14:
         83:34:5e:27:0e:8b:76:97:9a:6c:f2:16:c0:91:01:92:01:35:
         a9:7a:35:84:51:96:91:3e:ee:32:09:0c:9c:76:67:b7:08:a9:
         8b:0d:8f:8b:d8:00:6a:36:83:c5:7e:bb:a9:6f:5b:24:ea:31:
         83:9c:9b:51:68:14:ab:8f:7a:d3:0f:c1:14:da:db:ba:e2:34:
         11:be:c0:7e:7d:9c:4a:d1:6f:9b:a4:c4:52:dc:e9:88:e5:9d:
         f8:b7:d5:b3:eb:e7:13:de:62:be:0d:45:18:62:99:f0:a7:59:
         a6:9d:18:df:ba:3e:bb:f6:25:4b:20:09:e5:f3:a2:c5:01:0d:
         f6:62:cf:ab:c0:0f:73:aa:62:a1:bb:52:ae:35:fb:89:64:a7:
         57:ca:4f:ed:97:ec:ce:fe:d9:31:e6:76:48:96:d3:9f:32:c4:
         24:3a:b5:47:58:e2:d7:d7:18:5e:9e:b6:c9:56:fd:52:19:e7:
         8a:93:b9:04:dd:f0:e7:e9:95:d2:aa:56:43:9f:75:5e:a6:90:
         c7:0f:7e:7f:80:e5:fc:ba:05:93:33:d0:8b:93:ed:c8:cd:f8:
         6c:6a:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:53:04 2026 by rpki-client