Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa
File:                     cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa (raw, json)
Hash identifier:          gaxhz+bxZ6BDr6VrfUL86dtqZMxhUPCxNcweQQFAFAs=
Subject key identifier:   13:2A:0D:3F:09:4D:5A:47:C9:9A:20:A0:29:8F:A1:1E:6D:CB:59:7E
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F4328584F3A17D0F980C2C5FCBF1053C0
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     398325
IP address blocks:        2605:e040::/40 maxlen: 40
                          2605:e040:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d0:f9:80:c2:c5:fc:bf:10:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=1bc40c8b-f8a0-402d-973d-bc33ec2f6a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:d0:fd:84:d1:01:4e:78:3e:10:c0:3b:c7:
                    ce:1f:68:d3:ba:63:da:c2:bf:83:a0:e5:fe:78:93:
                    dc:54:63:4e:cd:31:11:66:d0:cb:89:5e:e2:76:ba:
                    3b:91:3f:a0:f8:12:ff:9b:6d:54:5f:03:fa:9c:d2:
                    0f:25:0a:c6:e4:3c:b6:29:7d:84:22:81:2c:8b:c9:
                    9d:19:aa:ab:9b:82:57:26:52:bc:12:06:aa:c7:27:
                    52:fe:76:fd:3c:75:45:61:bb:c2:d4:43:38:28:ab:
                    db:72:97:06:91:fd:cc:4f:55:67:91:2a:79:b5:6c:
                    ea:73:af:62:a3:77:75:f0:29:11:be:b8:ca:35:b2:
                    69:9d:4e:86:a8:e3:e5:5a:d2:4b:66:a2:0b:cd:8b:
                    7a:15:12:df:30:15:16:2f:31:3d:f4:82:c3:00:fe:
                    6d:1c:c9:2a:68:37:ab:55:13:9e:5a:29:36:82:38:
                    cc:57:8d:7b:88:ca:36:a5:aa:0a:bb:46:25:de:d7:
                    df:f5:f7:81:3f:1c:8e:34:2c:ad:56:07:d5:95:19:
                    be:64:7b:54:40:5f:17:67:aa:89:b9:94:aa:3e:7f:
                    25:0a:cf:b9:51:f7:7a:5b:ff:c4:ab:00:93:7d:6a:
                    75:70:bc:6d:43:ea:66:54:94:17:fc:e7:1e:70:8f:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:0D:3F:09:4D:5A:47:C9:9A:20:A0:29:8F:A1:1E:6D:CB:59:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/40
                  2605:e040:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:94:93:1f:de:5e:b5:e6:a7:53:56:f6:46:92:88:3f:03:35:
         37:f3:f3:5e:e5:73:e3:e6:61:e4:5f:29:fb:72:df:af:dc:a6:
         14:c2:09:81:9d:78:93:8f:79:dd:83:d5:36:62:06:47:d4:04:
         9a:d6:f6:1c:aa:c2:10:48:1d:76:3a:cd:24:cb:82:04:19:79:
         9e:77:bd:33:ca:76:54:69:e5:83:70:f3:f1:f5:b4:18:cf:e5:
         de:94:31:65:1c:a4:74:21:5d:29:c1:74:40:b4:f4:85:f5:d5:
         04:13:46:f6:92:58:b7:23:27:88:e8:bc:ab:86:05:87:01:58:
         bf:43:47:45:32:b8:d1:9e:f3:71:b7:f4:ac:a3:e5:d3:aa:6c:
         ec:ec:59:ff:a5:e1:78:3d:5d:3d:8e:cb:5b:08:79:7b:a6:d5:
         3f:de:06:1b:a9:38:f9:45:41:d8:46:4e:a3:19:bd:d6:30:4e:
         4b:4d:d5:34:8a:1a:d8:c4:bc:9a:11:b8:3e:37:54:37:17:4c:
         28:b7:c6:b1:49:6e:a1:0f:85:24:3f:49:bb:99:ca:bd:3a:f1:
         7a:62:39:22:64:25:53:91:6b:42:87:b6:a2:8c:cf:3a:a1:b6:
         a7:c8:53:ee:17:7d:0b:4b:a7:bf:45:d9:85:00:76:b6:5c:2d:
         02:0c:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:43:58 2026 by rpki-client