Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3f30ffb2-fffd-3777-8146-b412737fd80e.roa
File:                     3f30ffb2-fffd-3777-8146-b412737fd80e.roa (raw, json)
Hash identifier:          +Y5ReA16/xnmUN4iejicxXDFrCtsnzqDIPOKGSsHlzs=
Subject key identifier:   10:05:7C:CD:5E:81:AC:89:91:32:D8:82:F3:25:07:89:49:C5:FC:DE
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F189799FA0060E3AD182C7E80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3f30ffb2-fffd-3777-8146-b412737fd80e.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1090::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:99:fa:00:60:e3:ad:18:2c:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=73ba7788-ac15-4489-9058-6ca931a46b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:ee:73:3f:12:c2:2b:38:8e:0b:b4:75:ac:
                    89:be:ae:f4:50:f9:d8:82:32:20:7d:69:34:40:bd:
                    df:a9:79:b2:d2:00:7f:a0:98:a0:79:95:29:a3:84:
                    1c:37:22:be:1e:e6:46:c3:9c:62:87:84:56:8e:42:
                    97:4e:04:aa:00:9b:4a:df:b1:24:d2:34:9e:55:1a:
                    91:3b:b8:f7:73:df:2c:c0:58:0a:dd:31:1c:6d:ed:
                    b4:09:e2:71:44:9a:51:11:b8:3b:41:86:73:e8:f5:
                    ff:81:77:10:6d:c3:21:1c:96:cf:9a:9f:f4:11:80:
                    df:7b:93:b1:b2:d8:2b:a4:53:0a:54:7a:ca:2a:9e:
                    d4:f0:6e:83:fc:d2:73:a0:61:8e:50:30:c2:78:20:
                    9c:14:c8:6c:79:77:87:4f:2a:bd:5a:77:fd:f8:bd:
                    e8:af:bd:b9:6c:18:ae:c7:96:b2:f3:7d:af:e0:32:
                    bf:74:f5:b0:3c:eb:eb:db:a8:48:17:e9:6e:65:40:
                    61:37:a3:e9:d2:2b:6a:8e:19:27:90:45:92:c1:e1:
                    b9:df:29:f7:5c:7b:cc:f1:2e:d7:4c:89:f7:63:15:
                    57:76:74:39:2d:bb:e7:8b:a2:3f:4b:7f:ef:9a:e3:
                    17:00:c4:56:71:cd:22:85:4e:c6:8e:09:b9:a6:bb:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:05:7C:CD:5E:81:AC:89:91:32:D8:82:F3:25:07:89:49:C5:FC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3f30ffb2-fffd-3777-8146-b412737fd80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:e8:41:be:3e:c8:67:99:79:37:67:f7:36:c5:44:bf:4e:
         fc:6f:e9:3d:ac:87:8c:8e:70:25:d6:33:18:99:72:00:bb:ba:
         3d:44:ad:77:13:51:42:b8:df:57:3d:51:00:63:aa:3f:9a:fa:
         f9:a6:7d:57:c4:2e:0e:b6:ea:7c:6a:95:88:11:c6:d4:3f:e7:
         07:23:c3:e6:0d:d2:bf:59:ac:f1:c5:94:a4:39:36:44:a6:23:
         e9:08:17:66:49:e2:ba:c3:5a:20:d8:71:47:67:24:f7:94:65:
         77:42:d3:7f:c2:58:e8:84:22:a0:3d:fb:28:40:f8:5d:12:3d:
         81:af:83:02:95:a1:3a:6f:c2:85:aa:a8:45:5d:27:94:6c:e4:
         b4:f7:c7:09:ff:96:ba:1d:55:29:b6:20:70:ec:31:d2:33:d1:
         d9:43:ed:a8:ed:2c:c7:40:cd:c0:02:e4:d3:c0:c9:de:40:e4:
         51:fd:ea:3e:db:24:32:e9:20:91:2f:93:4b:64:8d:8a:a2:2b:
         99:e8:05:fd:53:65:5b:7a:44:05:2d:95:f4:ee:fe:64:ad:20:
         b3:fa:79:a3:9e:da:60:64:f2:c8:04:45:58:3c:ea:95:16:a7:
         98:4f:b8:a0:5b:6b:f3:3d:49:2a:2d:c9:f0:70:a8:28:a8:86:
         8c:a7:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:12:46 2026 by rpki-client