Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa
File:                     eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa (raw, json)
Hash identifier:          /9+VplZg9sVp2+U4i8GH1Ctu7x0hbDVOlb4NBb9y0zg=
Subject key identifier:   44:59:07:42:B9:3D:8B:0B:D7:69:B4:E9:1D:F8:FA:0B:E9:E8:C8:66
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584F2D87C3F6A15E925E368A2C80
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     393885
IP address blocks:        2604:4a00:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c3:f6:a1:5e:92:5e:36:8a:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=65d96214-f8a1-432e-ad53-2a87b9ffe96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:c4:4b:f7:ae:49:81:64:91:0f:22:fb:83:
                    14:8f:ec:4e:0a:d9:96:d5:01:7a:ea:16:33:f5:eb:
                    12:ee:27:fc:43:eb:45:3c:54:c2:b1:73:1d:22:35:
                    fe:84:b4:2d:10:b8:e8:69:73:e9:14:d7:b6:eb:92:
                    35:b9:0f:67:a7:c4:68:08:c8:4e:fc:f7:83:ea:0e:
                    c5:18:88:b0:29:86:ec:03:c0:77:db:44:10:e0:80:
                    3a:aa:07:31:45:ee:a3:d7:63:22:c1:cf:ff:0e:84:
                    f1:0c:56:84:a8:a7:23:02:69:24:cb:87:b3:a7:ad:
                    75:e6:0c:df:43:3a:f9:48:bb:d8:00:b8:84:6e:38:
                    2b:25:09:59:85:ae:18:72:64:c2:0c:4c:fc:c2:c4:
                    6c:9c:27:3a:85:57:67:d1:b7:2a:95:3b:5e:36:d0:
                    2b:75:a5:1e:bd:7e:eb:65:5c:c1:29:95:2e:3c:5d:
                    f9:2c:f6:59:ab:c3:4e:f5:3c:ea:c1:5d:bb:5b:04:
                    d0:a2:24:b9:15:d3:8a:a0:ed:8b:c9:4d:6f:e2:fa:
                    0f:51:f6:93:a6:e2:81:88:18:1f:4e:c0:c9:ae:23:
                    6f:a2:ad:1d:f1:bd:ce:81:9d:10:4f:48:c6:c2:06:
                    0b:18:e7:65:84:9f:ee:1f:3c:d7:ae:b7:9d:37:13:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:07:42:B9:3D:8B:0B:D7:69:B4:E9:1D:F8:FA:0B:E9:E8:C8:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:21:e7:11:08:26:87:0d:75:71:18:87:b4:89:74:f1:c2:73:
         3b:d5:12:1c:1e:30:82:ba:7b:aa:3b:d8:86:dd:e1:72:b7:87:
         44:fa:db:fa:92:b2:e4:cc:20:7b:92:13:da:a2:eb:51:79:6b:
         48:00:37:88:2d:af:75:f5:4f:c4:b3:e3:cb:63:db:4c:41:21:
         2d:ef:7c:22:5e:9c:f2:f2:a5:2a:33:cb:30:08:65:91:56:3a:
         4c:9f:56:07:48:71:cf:b7:c0:7c:d1:70:f2:cd:6e:25:a8:b0:
         7c:63:0e:0b:d1:6b:62:dc:e5:d4:37:71:91:e9:41:a3:69:3c:
         5d:4a:de:b3:a3:b3:1e:d2:69:93:52:47:e0:43:01:a6:70:51:
         d2:00:f2:e0:a8:b6:80:41:fd:a9:ff:c9:f3:7b:8f:63:b0:68:
         a1:9f:1b:48:55:0c:c9:04:2e:a6:7e:46:6d:08:31:f2:71:ab:
         6c:00:fc:77:92:35:62:93:fd:75:65:26:39:dc:eb:f7:fa:18:
         39:42:2c:fd:59:b4:0c:1c:67:11:b1:7d:09:3a:b2:d1:a7:b7:
         79:00:68:70:5a:43:12:97:ad:d4:14:cd:42:aa:ce:a5:61:da:
         fb:ef:3d:a5:64:d6:1b:13:60:32:00:91:4e:70:ae:db:b0:36:
         ce:8d:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:22:31 2026 by rpki-client