Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa
File:                     c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (raw, json)
Hash identifier:          l2ykEJC2hIEp9ee5glz9uLbCrcsXuZUaUaFnabEk3Es=
Subject key identifier:   8E:48:B3:F5:07:99:4E:A6:41:02:C0:2D:53:1F:D9:21:E9:0E:15:88
Certificate issuer:       /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c
Certificate serial:       010D0C9F4328584F03A792F48D3EA3A80E8CA500
Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     398803
IP address blocks:        136.175.44.0/22 maxlen: 24
                          2602:fd08::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:92:f4:8d:3e:a3:a8:0e:8c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=fdfc69d3-6295-4552-bffb-7aae66418676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:68:8e:04:3f:54:2f:9a:bd:26:c1:31:fb:
                    bd:28:21:c2:df:9e:4c:b5:f4:6d:fb:03:84:64:09:
                    4f:e5:cb:a1:0e:7e:a4:3b:c2:f9:92:a7:ab:d8:76:
                    46:40:58:19:f9:66:2e:39:49:32:7c:84:17:fc:c9:
                    f7:da:9d:a6:42:af:66:9b:6c:05:78:53:fc:75:ad:
                    00:6c:9c:d8:98:d2:b4:e5:4b:fb:a3:83:0c:ba:f0:
                    5d:b3:74:7e:1e:5f:b3:78:c2:f6:16:f8:ba:3a:a4:
                    f1:6d:be:59:a4:fe:83:02:8a:e9:4c:a3:cc:d3:70:
                    7f:8d:9b:65:2e:3b:35:63:19:2e:cb:07:81:00:b8:
                    9e:fb:58:9b:97:c8:c2:21:b9:57:66:c5:fb:6e:15:
                    97:c6:cd:df:7b:a6:9a:bc:2a:29:79:b9:0e:04:ba:
                    f1:73:31:87:52:b9:56:2c:f8:95:15:0b:06:a3:99:
                    65:b0:35:c4:a4:fc:2b:5e:73:0c:28:ea:28:95:ea:
                    99:3e:44:d1:4e:46:72:67:34:29:be:19:92:c4:30:
                    2e:9d:92:31:a6:38:70:8e:e6:7e:71:19:f7:77:3c:
                    47:0c:5a:38:74:f1:cf:7d:af:e0:4e:2d:f9:58:18:
                    f3:12:d6:30:9d:a6:ee:c3:ff:2b:a6:dc:20:fc:cc:
                    79:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:48:B3:F5:07:99:4E:A6:41:02:C0:2D:53:1F:D9:21:E9:0E:15:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.44.0/22
                IPv6:
                  2602:fd08::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:54:6c:e1:84:a5:f6:c5:da:9c:7d:0a:23:8e:36:ac:26:5d:
         42:2a:c6:8a:2f:93:46:3c:d7:59:7a:ae:43:79:66:51:fb:51:
         b8:99:9d:e4:93:f6:e6:5a:df:5c:a5:f4:e0:68:bc:c3:db:c8:
         a9:8d:88:d2:6b:18:9d:03:48:f3:71:5a:7f:3b:bc:11:2c:d2:
         2c:36:b0:f8:33:3e:41:c5:8e:58:bc:3b:f8:ba:08:eb:95:69:
         0d:f6:a4:1d:9a:1f:6b:bc:fc:f1:1e:d8:92:2a:8b:07:be:a7:
         21:cb:0b:fa:42:83:b9:48:66:bf:92:b0:ee:48:e9:31:0d:11:
         6f:a2:31:07:70:53:82:8c:57:bd:d7:45:3a:e4:2f:ea:fa:4d:
         79:9b:44:97:00:8c:ec:e9:27:d2:5c:89:7c:7d:07:d0:97:46:
         7d:c5:f5:8d:d3:73:24:e1:15:bf:75:36:30:eb:80:3c:f9:2d:
         91:00:6a:b4:2a:91:c5:8b:7f:c4:ad:f0:92:8c:f1:bd:98:1b:
         de:ca:6f:69:2e:a7:2e:5d:8d:76:b3:14:03:c9:92:be:18:a0:
         18:49:e7:f8:09:3b:9e:62:fd:40:6f:8b:64:1b:4b:1b:20:6b:
         63:8e:b6:3d:6e:76:48:f0:c5:4c:06:14:31:0b:d4:e0:e1:b6:
         34:59:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:51:57 2026 by rpki-client