Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/18c84879-1514-3c3c-9761-815d68b99dc9.roa
File:                     18c84879-1514-3c3c-9761-815d68b99dc9.roa (raw, json)
Hash identifier:          WQafafZIyt4yLEL4kaWoDpXh44XICDba2rJFnUgOP1I=
Subject key identifier:   55:46:25:AD:C0:4E:39:1B:62:E6:B7:0D:2D:76:1A:85:34:0F:53:C3
Certificate issuer:       /CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
Certificate serial:       010D0C9F4328584F6C582057C6BD8E1CF1AC5B78
Authority key identifier: BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/18c84879-1514-3c3c-9761-815d68b99dc9.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     36332
IP address blocks:        2620:ae:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:20:57:c6:bd:8e:1c:f1:ac:5b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7863c09-ccd2-4add-8ef3-7337f98763d7
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=0a046804-d66c-41b4-a520-4a87f9d77193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:31:0e:6b:ce:31:9d:87:b9:95:ca:75:e3:
                    dd:82:29:4e:a1:a8:92:2c:e2:9f:71:1e:0b:a6:d8:
                    b1:c0:54:76:33:2a:92:57:98:61:cf:25:09:bb:8f:
                    0f:2b:5b:08:5d:1d:39:e0:26:4c:0a:44:8c:9d:51:
                    e0:c7:b2:9b:db:48:ee:c9:15:e0:8e:2b:cd:45:be:
                    41:1c:73:ab:c8:e2:8b:dc:50:6f:2c:06:b6:cb:a1:
                    2f:a3:69:99:d3:a8:db:06:d3:23:07:50:f8:7c:b3:
                    c3:f9:0f:7b:8c:b7:1d:a5:4a:01:c1:2b:17:86:76:
                    b1:ae:3e:3f:7e:8b:25:b8:d2:5f:ea:d7:e9:3c:45:
                    73:43:86:8d:55:48:3c:a3:63:de:06:55:33:44:31:
                    37:01:24:e1:02:8c:32:9f:74:83:05:fc:11:2a:25:
                    fe:30:c4:39:65:9e:d4:8f:12:56:db:61:39:a6:3f:
                    ea:c0:2e:6e:83:44:cb:8a:76:7f:28:00:3f:9b:60:
                    15:d9:d9:18:e2:8d:d9:ba:be:9e:12:79:fa:23:99:
                    59:fb:3f:bf:d6:68:36:87:ed:2a:ef:b3:6b:e7:3b:
                    1c:39:1c:dd:f5:0a:06:26:c9:82:ed:d9:34:c8:0d:
                    b7:67:c9:44:72:7c:86:14:5c:a9:26:f7:d6:56:65:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:46:25:AD:C0:4E:39:1B:62:E6:B7:0D:2D:76:1A:85:34:0F:53:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/18c84879-1514-3c3c-9761-815d68b99dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7/a7863c09-ccd2-4add-8ef3-7337f98763d7.crl

            X509v3 Authority Key Identifier:
                keyid:BF:45:11:17:58:15:BC:BB:72:2E:70:79:FB:BF:5E:74:A3:27:B7:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7863c09-ccd2-4add-8ef3-7337f98763d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ae:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:27:d1:0c:ff:08:4b:fc:40:9d:db:70:d8:37:d1:80:2e:
         9d:3d:51:79:ba:94:cb:60:36:20:8a:24:6c:0a:2f:67:ee:58:
         49:33:16:d7:ff:b0:02:b6:d5:63:10:88:6e:93:91:55:7c:44:
         5e:c1:cd:b1:99:9e:8b:a0:97:c1:21:41:9c:26:7e:ee:f1:ee:
         5f:95:27:33:da:26:5a:e0:bf:8e:f2:f6:b3:cd:8b:1b:5c:30:
         c5:13:b3:68:bb:e6:4b:89:bf:33:b0:bf:9b:c3:8e:89:53:6f:
         a9:27:c4:56:8f:bb:7c:b3:f5:71:33:0e:88:79:1b:34:f1:00:
         6f:1f:93:22:af:6c:17:e2:ca:a1:4b:15:8e:33:cd:0b:b2:12:
         c2:90:6e:55:c5:1d:ab:3d:57:8b:cf:60:aa:d0:37:21:12:6c:
         fb:c8:18:aa:f8:7e:a0:53:7d:19:f2:df:b8:bd:df:cc:cf:2b:
         af:a4:4f:46:83:33:a6:07:9a:a2:ab:56:6a:1e:ac:7e:52:99:
         a9:88:67:f4:6d:95:af:52:0b:0f:b7:77:2e:32:b2:5f:ec:15:
         a0:35:30:e3:62:76:12:22:36:53:c8:2d:73:cc:10:67:0d:b6:
         f1:9c:d0:29:c0:34:f0:9e:6a:02:7e:74:aa:0f:bd:53:0d:25:
         f4:69:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:49:34 2026 by rpki-client