Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/9c295ced-a827-3429-b417-2e10b7de7283.roa
File:                     9c295ced-a827-3429-b417-2e10b7de7283.roa (raw, json)
Hash identifier:          dcc6aU37TG58fLTPSabmTyVGck7se/jf65l2/7voXQg=
Subject key identifier:   87:0F:56:BF:54:BF:12:DC:E2:09:DE:E3:11:A7:58:10:EE:6E:CD:FC
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584F093CF1374D82E95FF3CF8B00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/9c295ced-a827-3429-b417-2e10b7de7283.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     21928
IP address blocks:        2607:f880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f1:37:4d:82:e9:5f:f3:cf:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=71be8b82-66e6-42db-81af-6544a1a8ef3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:55:30:fd:05:ab:62:a1:03:42:78:2c:5d:
                    d5:b2:9b:33:08:cb:34:da:41:81:d3:e4:d1:c9:2c:
                    50:d2:ad:c8:da:09:b2:83:cc:2a:84:f9:3f:83:35:
                    12:22:ea:e0:8c:aa:a3:e8:d2:d8:78:74:df:09:ff:
                    0e:76:e8:5b:78:77:d6:43:c4:93:9c:5b:31:fe:fb:
                    ae:09:7a:65:59:30:40:0d:81:43:56:75:e6:d8:f2:
                    3d:eb:57:f5:0a:c8:f2:64:65:aa:8b:bc:9e:fe:4e:
                    a3:df:0c:3a:76:f8:ae:8d:3a:44:5f:55:20:38:5e:
                    65:0f:96:23:57:e1:ff:e7:4f:e1:f9:3f:5c:24:33:
                    8a:f8:30:08:09:56:26:31:fa:84:c3:aa:ae:95:60:
                    32:ec:53:d4:51:31:f3:f5:2f:da:d3:ee:dc:02:6c:
                    73:09:67:17:5b:84:7a:40:38:f4:e6:6b:c8:f6:78:
                    fa:0e:88:9a:63:fc:10:c6:25:5c:34:02:97:3e:37:
                    c0:3a:b5:b2:f2:16:9b:cb:60:34:f5:9d:50:4b:04:
                    c5:c6:0a:a9:fe:ee:d6:1b:44:83:e3:a4:63:1e:13:
                    78:4a:23:79:e4:e0:ea:99:c3:62:11:b4:d6:2d:98:
                    69:d4:29:0b:f7:2a:43:92:cd:ac:45:ee:10:e3:ba:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:56:BF:54:BF:12:DC:E2:09:DE:E3:11:A7:58:10:EE:6E:CD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/9c295ced-a827-3429-b417-2e10b7de7283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:d3:e4:65:ff:09:a4:a5:d8:ca:0c:c7:ea:51:75:fb:0c:
         e0:c9:b3:08:76:73:13:89:1a:b0:94:d5:38:9d:bf:03:fc:5a:
         65:9d:de:8b:55:9f:67:f0:d5:0f:81:f7:00:95:72:0f:14:3f:
         1c:04:df:d3:b1:ae:c0:c4:16:57:b9:84:ce:dc:0c:92:1a:d1:
         a9:ea:63:cc:ab:38:fc:16:8d:e8:c5:b4:d4:f6:2b:7e:de:e4:
         e3:2c:61:b6:f7:b1:3e:b2:49:6a:35:8a:eb:e1:b3:0e:45:10:
         9f:f9:5e:c8:c5:34:7a:89:21:e5:34:ec:e9:04:b3:81:44:19:
         ec:33:07:b9:6a:2f:50:07:78:84:74:44:8f:ca:fe:41:1f:6e:
         66:0c:8a:e4:4c:fc:fb:ac:18:2a:26:43:cb:57:da:fc:28:4e:
         1a:a2:83:61:ad:73:a1:a9:32:80:b9:56:5e:4f:c7:35:8f:2f:
         a4:24:dd:ee:4d:72:43:86:dd:15:92:d0:b5:44:be:35:d5:4c:
         43:e1:62:3d:dd:1c:57:56:ba:2a:0a:35:9f:2a:de:6b:4e:4f:
         90:68:03:c6:83:d3:9e:4d:31:4a:d5:05:69:62:52:af:24:29:
         c4:49:9b:78:42:54:15:e2:d6:62:95:0c:98:90:34:47:15:ac:
         ce:b9:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:57:40 2026 by rpki-client