Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa
File:                     d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa (raw, json)
Hash identifier:          PyKHNeVpSpojw87Kun3xvVGrxO7eta87u8dfnjGE46Q=
Subject key identifier:   24:D5:FB:B4:5C:88:86:FF:8A:A8:49:5D:1B:00:58:0D:0F:D6:EA:54
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584F480D3A5E38CECB84747B0FC0
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     397016
IP address blocks:        2606:aa40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3a:5e:38:ce:cb:84:74:7b:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=85778a0b-572a-4ab1-aec9-7dafad939303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:44:a4:74:58:ee:13:cc:0a:47:b7:6c:83:
                    43:81:60:27:5f:05:95:27:74:0d:2c:49:6e:d7:f4:
                    80:28:71:e9:7f:45:aa:09:d3:d5:fa:a5:5f:e4:07:
                    80:1c:98:90:5f:37:34:75:c9:b9:da:0e:74:33:73:
                    d4:08:b1:f3:8e:7b:9b:e8:9b:53:86:54:ce:cd:0a:
                    4d:52:8f:d9:c4:66:58:35:33:2b:be:71:dc:16:9a:
                    5a:8c:ab:7a:f0:0f:98:84:d6:f4:a0:17:6c:57:54:
                    c6:e4:f2:f7:37:cb:66:66:97:87:1d:1a:5d:a3:94:
                    b6:bc:a6:83:2b:23:01:26:3f:80:71:4b:3a:7e:7a:
                    f5:16:ca:fc:56:d2:eb:f7:91:48:f4:24:35:55:16:
                    5b:3a:91:a8:d9:00:76:70:9d:c2:5f:71:14:f2:71:
                    a3:01:a6:b0:02:22:cd:ba:44:7f:1f:ac:ff:0e:17:
                    91:5d:17:e0:13:04:65:b2:56:f8:1d:b0:2a:81:ed:
                    a5:2d:f3:22:6f:f5:cb:96:60:a9:04:14:d8:01:0f:
                    8a:27:f9:81:c9:5d:88:c9:c9:27:93:6e:e0:4d:f6:
                    24:09:32:46:55:26:92:ba:bb:e3:39:c7:96:b6:8b:
                    f6:9b:f8:75:47:dc:b8:2a:77:90:61:b9:c5:81:3d:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D5:FB:B4:5C:88:86:FF:8A:A8:49:5D:1B:00:58:0D:0F:D6:EA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:74:8a:d0:15:e4:e8:67:7c:1d:92:f2:8e:36:66:9b:c9:
         b0:d7:d5:91:73:24:cd:85:9b:01:9d:a1:c7:14:30:5c:50:10:
         1d:3e:cf:6e:e3:78:e0:2b:8e:87:fe:7d:73:31:1d:17:ab:51:
         4e:fd:68:32:0e:c3:83:9d:54:71:8c:64:d1:a6:f7:2c:b3:de:
         98:50:cf:92:72:ba:cb:c6:c9:2a:98:e9:bc:0d:87:4a:74:d1:
         d7:0d:96:6a:67:c7:eb:df:be:b2:67:b2:5d:f5:a1:a8:41:93:
         ac:d3:c0:ee:62:b2:50:5a:53:36:da:d2:b7:ac:ad:c3:5c:fc:
         d6:a4:77:8f:4a:2a:ed:0f:ac:32:b6:02:ba:d1:71:a6:02:aa:
         11:86:e6:10:6c:8b:08:49:1b:42:ca:fb:29:9a:8b:1a:ea:a3:
         c0:f5:5a:a7:64:cc:c6:13:ad:70:41:dc:ef:69:38:27:6f:58:
         2e:c0:6d:5b:28:a3:48:71:2d:36:3c:77:b3:f7:8a:75:62:69:
         31:eb:0f:24:d7:1d:fc:c5:1a:07:9e:c9:5e:b4:0c:63:23:f6:
         ed:16:e3:5e:01:df:b9:64:4c:36:c5:77:a6:37:20:3d:96:65:
         de:41:eb:8c:a2:cc:c0:49:1c:0b:10:70:35:d2:d1:29:a7:b0:
         15:bd:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:23:31 2026 by rpki-client