Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa
File:                     0591e8cc-de15-308a-9274-817e31ffff4e.roa (raw, json)
Hash identifier:          LSUKnEewwCPhH2vdFGc4362HDxmt5HSWmT8697EJRCs=
Subject key identifier:   DF:3A:E6:01:B7:D4:01:28:6C:FD:CB:12:E9:49:18:39:ED:E0:84:03
Certificate issuer:       /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
Certificate serial:       010D0C9F4328584E0005D58FA396A4BAB51DE080
Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     8134
IP address blocks:        2001:4a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d5:8f:a3:96:a4:ba:b5:1d:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=9b3e2a77-e0d8-4474-99eb-f6f894c837bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:1a:34:bc:a3:73:58:04:73:0f:23:4c:20:
                    b8:c6:d4:2d:3c:63:57:43:32:13:a2:6d:cc:f9:59:
                    1a:70:2f:a0:b2:6b:b3:66:6f:b2:2b:a8:4a:b7:0a:
                    f4:a7:a6:09:e3:98:2e:99:42:6f:a9:60:ef:4a:2a:
                    a8:c2:1a:1f:da:c2:3b:a1:b9:66:57:ab:bf:f3:93:
                    df:d7:96:96:67:ba:b8:b5:ef:cb:98:9c:53:7e:e1:
                    3b:f7:80:2d:87:f1:28:ed:ce:e3:a4:50:01:c4:f8:
                    28:dd:3e:f1:d1:d5:1a:b7:10:c5:5f:e2:d8:7a:59:
                    9a:6f:b5:b1:4e:7b:9b:90:a7:7b:d6:8b:08:9c:cf:
                    bb:27:37:da:94:bb:fc:c4:bc:9f:12:f2:57:ca:c9:
                    39:d5:d4:32:43:7d:eb:47:84:f8:7d:2d:5d:6c:5b:
                    cf:f9:16:54:32:ae:55:bb:5f:53:2e:f6:52:a8:ed:
                    e3:aa:af:a8:f0:2d:c4:48:33:7e:a6:c6:b8:de:fc:
                    0c:54:0e:c3:33:0f:db:17:97:1c:59:ab:c5:f6:0b:
                    b2:49:8f:c0:1d:b8:0b:78:f4:46:81:bd:de:8b:20:
                    0d:3a:0e:cc:29:5a:ce:6c:d6:43:af:bc:26:83:cb:
                    d2:da:8c:44:36:28:be:68:04:67:73:8b:93:3c:25:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3A:E6:01:B7:D4:01:28:6C:FD:CB:12:E9:49:18:39:ED:E0:84:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:45:ca:9c:ca:b8:7c:5e:d7:d0:4b:22:9e:e7:03:36:e0:
         fd:2e:f4:c3:40:b9:0e:64:3e:b4:cd:87:86:dd:17:1d:33:b7:
         c7:28:a1:da:dd:f3:0e:e6:7b:c3:6d:49:3f:33:72:90:2e:7c:
         9e:5e:5a:c9:d7:48:cb:fa:85:72:b9:1f:05:d2:93:94:0e:74:
         9d:0c:ce:0b:30:50:2a:d4:f3:22:3e:9f:4b:b0:2f:fb:e0:cb:
         af:67:56:34:53:50:a8:30:d6:3d:1d:30:35:c7:3c:2c:49:80:
         8c:ac:91:58:1d:3f:02:17:ae:ea:93:5b:b2:22:e4:a0:a7:1e:
         a0:75:e6:4f:a2:e4:9c:fb:57:60:ad:8f:58:d3:fd:6e:25:f1:
         c8:54:ce:e1:64:6e:9d:31:43:63:14:7e:20:ee:27:b9:d8:50:
         a2:91:8d:f3:5f:0e:6e:3c:d9:17:7d:fa:b4:e7:06:08:88:60:
         fc:d4:c2:22:79:10:e2:85:24:fb:70:52:81:dc:bc:5c:ec:8f:
         76:ce:1a:2b:ac:81:40:a9:fe:2c:33:c7:29:2e:d6:d4:6d:0c:
         95:23:ac:67:1e:bb:6e:3d:ed:1b:01:0e:77:81:c4:23:f6:c4:
         17:d1:5d:e5:87:03:a4:77:8a:59:1c:c9:28:8c:d1:01:26:9e:
         b0:cb:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:40 2026 by rpki-client