Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
File:                     ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa (raw, json)
Hash identifier:          sEb6Pu9DHUPqWC2wJVZdbjXqc2ZwUS0J43MeshZDCBg=
Subject key identifier:   D7:76:3F:94:4F:8E:C0:9F:0C:2A:EF:AE:E3:FB:F3:D2:8C:97:97:B8
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584EF7177981E98868DEF2B6D140
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2607:d540:fc0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:79:81:e9:88:68:de:f2:b6:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=b8861580-acff-458c-a171-ab2f71b6d286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:33:a9:75:dc:73:56:06:6b:7e:75:0c:c0:
                    d6:cd:d7:16:6b:16:44:8d:cb:d5:be:03:7c:68:d3:
                    0a:1d:b8:4e:f1:6e:19:a6:7c:84:b2:c0:20:3b:74:
                    5f:a1:38:68:e0:d7:59:c8:b5:06:d0:b0:d0:5d:a3:
                    8a:b6:c8:4f:4c:a7:99:82:bc:66:b9:1c:cf:b4:61:
                    a9:d1:3f:30:0c:59:28:18:a5:dd:82:bc:78:46:94:
                    7e:3f:f8:76:45:12:ce:26:76:4e:1b:93:52:7d:f5:
                    59:7f:9a:24:b9:44:0d:6d:50:b8:04:7a:c3:be:be:
                    a5:b7:25:77:e6:bc:bc:13:f2:d6:2d:d6:51:73:69:
                    70:26:ff:d9:96:d9:2a:b6:d9:9e:66:fb:2d:e5:40:
                    28:9f:45:ff:d9:e4:98:d3:ad:29:f4:71:5d:81:cc:
                    2d:77:fd:0e:c1:5f:9d:97:97:78:8d:fa:64:80:3d:
                    18:c4:d6:95:43:b4:02:30:67:b6:15:d7:d7:4b:eb:
                    9f:f7:a3:ee:b5:33:6d:29:3e:ad:f0:07:e4:4a:12:
                    03:e0:01:38:f6:b7:e6:1e:ea:2e:ce:8a:9a:e5:63:
                    cf:13:66:96:76:d5:10:65:9b:7f:f0:6b:8f:c6:10:
                    ce:f9:82:06:58:33:6b:e6:4e:af:62:b5:7f:0c:13:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:3F:94:4F:8E:C0:9F:0C:2A:EF:AE:E3:FB:F3:D2:8C:97:97:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:b4:fe:fb:cc:9b:f0:1e:4b:84:d8:14:07:76:ad:75:6c:a9:
         f9:b9:51:02:a8:33:02:a3:df:13:77:bb:b1:15:50:d4:b9:5e:
         01:68:e6:7c:30:32:53:35:39:01:af:1e:55:53:68:ed:b7:27:
         e9:f6:6f:2e:8d:73:12:d3:7a:e8:43:59:62:e7:71:1f:26:4e:
         5e:83:30:1f:e1:e6:9a:e5:d0:3e:bf:bd:ce:cc:ee:bd:7d:18:
         5e:ee:5d:f1:e9:08:cc:7e:76:7d:a5:52:bf:7d:21:ba:10:01:
         16:90:95:84:1e:0c:e7:fa:8a:64:2e:52:aa:32:7b:ed:a3:d0:
         59:03:22:8e:35:77:89:6c:f3:0d:57:64:a1:37:f1:5a:6c:58:
         e7:06:50:dc:2e:58:0d:61:d9:ac:18:55:d1:57:40:a2:78:55:
         cd:64:ed:d0:0c:42:4f:13:2e:e0:35:cc:3f:0b:e4:30:0f:93:
         44:94:d3:a0:bd:3e:ab:fd:46:94:86:2f:2d:c8:6f:a9:6f:df:
         e5:86:3a:2f:87:6a:fe:bd:20:25:40:9f:2f:86:9d:38:61:cd:
         82:ad:1f:6b:25:43:41:00:5a:b7:18:2d:33:06:e1:e8:31:92:
         67:04:f5:d7:83:8d:8e:e3:af:0c:96:81:f8:df:c7:2d:cf:64:
         58:e0:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:28:38 2026 by rpki-client