Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa
File:                     30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa (raw, json)
Hash identifier:          J8r/sxcvX0SchEI7YhcKsO9WBCdbv10NgkZuNtfIHPw=
Subject key identifier:   22:EC:BB:84:7B:95:CC:68:64:D9:D0:5E:87:6B:39:E6:3C:1F:1F:EC
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584F1467A39C7A454111660CEB00
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     398564
IP address blocks:        2607:2240:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a3:9c:7a:45:41:11:66:0c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=ff8b85a0-91ce-4f82-8012-4c4bc5e20eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:ba:fe:a0:70:4a:d1:f4:b7:a8:f4:96:75:
                    f7:b4:3f:c6:fe:54:55:d5:38:da:3c:08:7c:59:75:
                    58:c3:76:1e:3f:46:3c:ea:eb:55:f9:6b:9c:51:d6:
                    b9:f4:4c:10:62:4b:bc:71:63:06:ac:42:d7:f9:74:
                    64:f7:aa:28:fa:4c:4e:20:d7:67:fe:f2:83:4b:e9:
                    ce:b4:f0:c4:d2:35:23:0d:a5:01:e4:5e:10:73:f2:
                    e4:b3:06:1f:0b:e3:65:9e:45:ec:2f:81:bd:b7:a6:
                    5a:09:76:90:3e:3c:04:78:ed:ca:fe:15:ee:4d:48:
                    54:d0:7b:db:d5:8d:20:5c:c2:41:8d:62:b2:92:2c:
                    a4:d3:d8:ad:31:84:80:cf:6e:e0:c3:f9:47:73:c4:
                    4f:ff:30:a4:4c:23:08:fb:04:c2:32:8b:9d:2f:9a:
                    82:b7:4e:39:ac:79:71:8a:e4:00:87:e8:12:1a:94:
                    13:d5:65:21:11:98:61:14:98:7d:0c:44:eb:b7:b5:
                    31:14:a8:64:c2:b4:39:73:7f:ff:00:6c:eb:33:36:
                    5f:2e:94:24:9d:76:5c:c0:f1:5a:bf:df:05:a2:c9:
                    00:22:fb:35:4d:12:a4:7b:8a:a8:73:62:53:ac:d9:
                    83:cc:a3:fc:48:43:2b:31:01:91:81:00:2e:27:bd:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EC:BB:84:7B:95:CC:68:64:D9:D0:5E:87:6B:39:E6:3C:1F:1F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/30183ad6-a9db-371b-bb6e-7604e4fae2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:20:9d:48:cb:fd:5a:a6:b1:5c:2a:c5:be:49:53:25:a0:
         9e:81:18:f0:09:08:34:06:46:23:a2:a1:a9:50:38:dc:62:2d:
         20:4c:0a:1a:84:a8:31:88:fc:8f:8a:5e:bf:e4:71:29:34:f7:
         b6:69:ce:df:29:d1:20:d6:42:10:84:ca:51:23:1a:aa:87:40:
         1e:3f:ef:2b:01:fb:b1:81:b3:97:80:e1:ef:c3:21:99:e1:f6:
         b5:51:34:3d:6a:6e:03:f6:45:9d:1c:56:f0:0e:c3:41:84:86:
         cf:94:6e:bb:e3:f2:eb:ea:38:c1:56:7b:c1:f9:39:9b:15:8c:
         17:56:f2:86:33:e0:56:e5:e5:47:09:60:7a:c7:b6:b5:8b:0e:
         85:a3:e4:66:2d:84:ff:7b:25:49:26:67:bb:17:1f:e6:8a:61:
         f7:b0:7e:b4:41:2b:d6:f3:ad:37:ce:09:48:cf:6a:bf:47:11:
         17:6d:4c:ec:ec:22:0a:7d:a7:3f:8c:c6:9b:58:6b:cf:41:3b:
         01:b2:2c:43:ea:e4:b4:b3:b7:06:df:2f:42:aa:46:8d:bd:cd:
         72:a6:ed:0e:db:0a:7a:a2:17:22:18:19:b0:84:93:af:6a:10:
         27:93:8a:df:f2:53:c5:01:0c:9c:9d:7b:ae:7d:66:c0:3d:5b:
         b6:9b:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:57 2026 by rpki-client