Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
File:                     82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (raw, json)
Hash identifier:          2CqCB3gAtyu5K4jLJyTMzzK/TiTNPuEwcj/YwitCTkw=
Subject key identifier:   DE:D5:8E:6B:7B:9C:91:42:8D:7B:AA:ED:BE:25:19:D3:38:8E:BF:2C
Certificate issuer:       /CN=b824dfb2-be33-4946-af95-2296acd823af
Certificate serial:       010D0C9F4328584EED522054ACD2F49037D78900
Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     10737
IP address blocks:        2607:4940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:20:54:ac:d2:f4:90:37:d7:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=58aea36a-3dd5-4e78-ac53-c6a4330cd345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:00:c8:3c:be:b5:94:17:a9:43:d9:6c:f1:
                    96:fa:bc:64:bc:1e:36:da:5a:4c:a9:2c:74:1e:80:
                    c5:fe:1d:f7:84:e8:05:b1:cc:c6:da:a2:e1:09:56:
                    58:08:28:9a:e9:a1:5d:ac:24:01:72:6e:e3:d4:5b:
                    60:d2:42:cb:3f:51:dc:ef:22:86:cb:03:27:98:54:
                    df:f7:13:53:e4:32:f7:8f:ab:c2:ac:d6:5c:09:ca:
                    bb:c3:33:5a:ce:c5:89:68:1f:33:63:78:57:82:65:
                    f4:8b:72:d8:dc:26:3c:b1:d8:65:12:3c:ab:a2:32:
                    0e:c7:d4:74:33:c0:a2:14:a3:ad:88:77:ad:9b:52:
                    92:72:a5:91:b5:64:0d:d4:55:6c:4f:3b:57:8c:be:
                    f8:34:4c:82:47:00:85:db:be:70:bc:01:a5:e8:6a:
                    4b:60:6e:7b:0b:5b:9b:fc:0c:bf:10:40:65:ee:69:
                    80:f6:32:25:af:fb:87:c6:9a:80:70:e3:dc:e5:0b:
                    7b:10:46:74:97:06:ac:73:b9:49:a4:94:95:00:07:
                    48:a5:b6:52:48:d6:ae:b8:aa:bd:e0:a1:b3:80:3d:
                    e4:b4:2b:b4:a4:5f:99:9c:41:a7:07:91:be:ca:04:
                    3a:1d:22:3f:aa:d2:ba:18:a6:83:d4:8e:3a:6d:90:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D5:8E:6B:7B:9C:91:42:8D:7B:AA:ED:BE:25:19:D3:38:8E:BF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl

            X509v3 Authority Key Identifier:
                keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:f7:a9:79:b3:8a:bc:0c:61:a2:74:a1:15:01:60:ed:e4:
         a6:4c:5b:7a:52:48:5f:51:2e:a9:81:25:10:25:8a:8f:c9:28:
         ea:a4:6a:40:03:9d:25:fb:7c:3f:12:e8:7d:ce:d3:bd:22:80:
         9d:65:45:e1:32:06:84:e1:36:5a:1a:e0:ed:47:3e:e6:68:9d:
         a4:1f:6d:9c:7a:32:48:99:5b:02:ef:8a:1d:11:cd:f6:d9:c3:
         35:f8:50:14:e0:77:24:37:75:22:f3:38:33:e9:21:87:2a:a1:
         bd:9e:ec:92:00:c5:59:50:e5:31:d9:da:b2:d2:bc:8f:e0:ff:
         e9:a2:84:9b:7d:55:1c:3d:21:55:fb:fe:14:58:b4:ab:76:12:
         d8:99:3d:87:9c:65:a4:cd:bc:f7:46:0a:5c:ab:bd:97:df:69:
         bb:ba:f6:4b:2a:3c:2d:84:9f:50:db:04:4d:35:f0:0a:d1:ed:
         b4:fa:5f:44:be:03:b6:db:42:4e:d0:48:cf:54:62:81:7b:41:
         41:da:ab:6d:5a:b3:58:52:fb:1d:f5:c6:07:4c:42:72:a4:e2:
         20:d6:df:4d:3d:b3:1f:cd:79:13:d4:bf:0b:c9:a0:18:7b:bb:
         b8:fc:23:e1:1c:60:ef:2c:3f:93:b9:be:d2:4b:06:38:b3:e6:
         1c:b5:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:21:53 2026 by rpki-client