Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa
File:                     dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa (raw, json)
Hash identifier:          meh1K76CeMPv6RrhXU7mCJnVkoVx4fRb0Mpibo4izyA=
Subject key identifier:   0B:E0:86:BE:32:71:BC:50:83:C9:CB:7B:57:0F:71:4D:52:05:EE:06
Certificate issuer:       /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Certificate serial:       010D0C9F4328584EFCACBF8143B95E8E0D7CB0C0
Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     397142
IP address blocks:        2605:b40:f0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:bf:81:43:b9:5e:8e:0d:7c:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=850aeeb3-141d-4e71-8c7e-ca6d370d98bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:ae:a5:fd:c4:d2:38:b4:75:2c:e0:d8:29:
                    23:94:47:a2:d4:19:1b:04:8f:d1:53:fb:80:15:2a:
                    e1:66:01:ec:c9:88:1e:ec:6b:10:b8:ae:f0:b8:ba:
                    7d:bf:44:0e:16:75:b4:f5:c6:69:d6:73:99:1d:87:
                    ce:48:45:e6:2f:d4:8a:c8:77:29:14:27:35:60:58:
                    e3:9a:66:52:ef:17:26:97:36:4f:ab:9d:15:06:80:
                    e2:73:1f:e6:96:ef:4f:3f:35:19:36:4f:0b:e8:72:
                    e5:c6:ef:dc:9d:1d:e6:4e:18:cc:e1:b5:76:45:4f:
                    76:fd:eb:61:31:80:9b:b4:ae:95:22:9f:15:91:81:
                    8b:53:7a:09:ec:3f:33:16:e3:e1:d6:6f:d1:56:00:
                    18:72:b4:d5:bc:a8:2f:f2:65:ad:aa:6c:3a:02:49:
                    89:80:b1:f0:92:08:82:f8:d1:04:6f:e6:19:15:04:
                    62:21:bb:fe:69:45:4d:fe:15:85:3e:90:f6:d7:b5:
                    e1:fa:f0:47:d8:72:0f:ba:30:84:95:1c:e5:95:28:
                    fb:d4:58:8c:73:1a:75:63:c2:ee:de:93:06:b8:03:
                    f7:f5:45:01:2d:f3:7a:ef:16:8c:ff:9f:f4:9f:85:
                    98:2a:bb:92:0c:c2:03:7c:ad:e4:81:63:2c:69:99:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E0:86:BE:32:71:BC:50:83:C9:CB:7B:57:0F:71:4D:52:05:EE:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl

            X509v3 Authority Key Identifier:
                keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b40:f0c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:64:db:eb:08:84:59:c8:26:f2:54:96:bf:65:9d:21:2f:6b:
         6e:bd:92:3b:8e:88:67:36:3e:cf:b3:1e:43:b6:a9:cd:f7:7c:
         22:eb:e5:ee:5a:30:c6:c1:21:b9:38:3b:f4:6f:ba:2e:3e:78:
         e6:4c:89:f2:dd:07:01:7d:a9:dd:dc:d8:14:e9:c1:c7:39:5a:
         a3:8c:e5:17:fb:e2:10:be:24:54:87:29:cc:3c:d4:0d:da:4f:
         83:9e:f6:e7:3e:0e:46:50:18:e5:5d:62:04:25:0d:36:fe:6f:
         e8:6a:6e:c5:ff:83:17:e1:02:0d:2b:c9:02:00:c0:89:9c:db:
         96:56:57:59:32:fe:fe:bc:5a:26:14:4c:eb:85:f7:e8:f6:f6:
         05:02:74:27:bf:c3:ad:b8:04:fa:f0:22:fb:fb:96:46:de:c8:
         20:fa:f1:2d:58:99:70:c1:f1:c2:9f:40:c4:89:5e:41:57:5f:
         1f:1d:63:3b:a1:d1:59:b9:63:de:8f:45:fc:f4:fd:89:2c:84:
         b5:61:43:a0:6f:33:58:6c:1e:d3:9f:8e:88:97:ee:f7:68:74:
         22:13:f8:f5:5d:49:91:7b:1b:90:ce:a4:6d:b7:fa:65:d0:71:
         61:8b:16:97:10:60:de:a8:34:fc:1b:e8:f4:3d:f6:60:51:dc:
         8f:ab:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:45:03 2026 by rpki-client