Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
File:                     5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa (raw, json)
Hash identifier:          Jus1mcltxf0+5o1v3vDcGlhTyUWUP++q/D0utGxwCdM=
Subject key identifier:   EC:CC:D7:56:F6:25:67:00:FC:78:21:7E:AC:6F:26:74:3A:5B:C9:F1
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584F1897917385D44F054B1D7880
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     33208
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:91:73:85:d4:4f:05:4b:1d:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=06714550-954b-42e8-b860-b505995ec722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:16:a9:ff:50:09:4e:13:6d:c5:fc:08:93:
                    22:30:5b:12:d1:18:25:cf:b2:a3:b5:2b:d5:bc:23:
                    93:9b:a5:50:16:18:f5:41:75:b8:c2:5b:02:d1:9f:
                    5f:da:39:ce:fa:dd:5c:4c:71:48:c4:6f:46:ca:65:
                    66:28:37:31:26:04:cc:05:72:38:64:c7:29:a7:3d:
                    5e:dd:e6:6b:e9:0e:05:4d:19:e8:07:ae:7b:8d:d9:
                    1c:fa:18:b0:43:39:70:1f:c9:ab:6a:90:d8:29:84:
                    0b:f8:42:02:a0:de:1b:90:dd:2d:18:ed:74:7c:df:
                    ff:05:25:7b:09:7d:3e:55:24:2b:94:07:b6:b0:5f:
                    02:37:ae:2c:75:f3:56:a0:3b:7f:22:6e:62:78:c4:
                    be:0b:a8:8e:16:c3:64:c3:a4:e2:b8:47:bc:30:b1:
                    af:2b:a8:e9:0d:d1:91:df:0c:53:99:23:eb:97:90:
                    57:36:e6:49:c4:fe:2a:a3:9c:1c:d6:f7:bd:36:3d:
                    d8:b8:04:45:e3:ea:e0:6e:2b:be:2a:94:a7:4e:46:
                    f5:c7:23:4e:c2:34:0c:da:e8:29:3f:41:87:a4:5a:
                    ed:df:15:82:e3:0c:2e:0a:f7:3f:82:e9:63:54:52:
                    d6:88:1f:c7:2c:3b:84:c8:fd:5e:76:13:60:b3:df:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CC:D7:56:F6:25:67:00:FC:78:21:7E:AC:6F:26:74:3A:5B:C9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:66:dd:6e:cb:30:89:77:80:13:d5:99:37:b7:72:85:3c:
         63:07:48:55:c3:69:28:a0:7c:c7:3b:b9:c7:24:df:06:15:61:
         46:81:2d:35:b6:51:3f:65:e9:d4:be:f1:4d:fa:ed:ad:be:a3:
         f7:6b:c8:70:c3:27:c5:2f:c6:0d:06:66:33:eb:01:74:14:80:
         7b:b7:6e:5d:6b:33:25:bc:e4:5c:55:f6:86:04:6d:ab:37:76:
         ca:e6:e9:1d:bc:f1:c7:13:dd:da:68:e8:3c:01:d4:c7:83:8f:
         30:4a:6c:97:7b:1f:6f:8d:91:fe:64:d0:bf:22:37:57:cb:be:
         a4:24:be:31:8a:4f:9b:86:f3:11:65:04:ba:9a:fc:8a:3b:63:
         44:af:a5:9e:a7:59:a9:62:df:2c:41:f4:46:ad:3f:53:c7:ec:
         88:29:8a:8b:77:1e:8a:9b:b4:80:47:a6:9d:25:f5:9a:fb:48:
         b7:19:2e:dd:4f:e7:73:15:1c:a9:a0:60:36:52:5d:97:d5:d6:
         d8:97:53:16:5a:1c:ec:96:47:e9:ad:f0:86:f8:34:af:b6:c2:
         6a:17:dd:29:32:2e:b0:02:79:88:8f:2d:ee:2a:03:91:63:63:
         6a:14:60:d5:69:6e:a5:86:7c:8c:32:ff:de:88:24:c6:a4:22:
         90:2b:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:28:14 2026 by rpki-client