Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4ba98b84-7c78-361f-878f-a73fd51bd385.roa
File:                     4ba98b84-7c78-361f-878f-a73fd51bd385.roa (raw, json)
Hash identifier:          bGN3tbs3T547R8U/u2ZdtpFklwafuVAb2O/C8ofiXZg=
Subject key identifier:   62:2C:13:CC:A6:67:97:0F:68:7F:56:50:EF:A8:4D:A3:EF:38:46:23
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F5663024F471A8BD8EF266CA0
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4ba98b84-7c78-361f-878f-a73fd51bd385.roa
Signing time:             Tue 29 Sep 2026 16:14:28 +0000
ROA not before:           Tue 29 Sep 2026 16:14:28 +0000
ROA not after:            Mon 28 Dec 2026 17:14:28 +0000
asID:                     6327
IP address blocks:        2607:ffb0:2006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:63:02:4f:47:1a:8b:d8:ef:26:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Sep 29 16:14:28 2026 GMT
            Not After : Dec 28 17:14:28 2026 GMT
        Subject: CN=3659959c-29e6-41c1-b382-3c3716f8c86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:86:bb:88:62:2e:75:86:2c:a5:1b:04:ff:
                    cb:f3:c1:a8:b5:b1:c2:de:4b:c0:fc:f8:d9:6a:0d:
                    0e:c0:2c:36:9e:21:3e:b2:00:9a:52:26:a8:47:aa:
                    86:f4:e5:80:7a:65:0b:d5:c5:03:1c:61:ef:a4:b5:
                    9b:d2:05:0c:bc:5d:7b:72:24:70:89:c6:64:6d:73:
                    71:21:b9:39:d5:84:9c:61:22:a0:ed:b1:e9:9a:c3:
                    f6:3b:3b:f5:49:83:da:fa:75:83:a8:d4:5d:23:1d:
                    15:6a:ad:e5:ba:f1:21:c8:b5:de:fd:46:44:0d:4a:
                    b1:3b:5c:e8:95:5d:37:a6:cc:ca:5a:f8:54:cb:59:
                    a3:4a:d4:b4:47:f2:2c:a3:e1:0b:e0:23:f6:fb:18:
                    b8:53:44:03:ec:d9:37:0c:6b:a2:f3:40:e2:30:92:
                    2e:6b:92:09:60:56:a5:49:72:59:55:ff:c4:a3:5f:
                    ad:ee:4a:41:d6:c0:65:7a:a3:d3:28:be:9b:99:06:
                    5c:88:93:65:b1:fd:41:14:ad:92:fe:19:40:1a:fe:
                    dd:e6:1c:5e:6f:30:f8:a9:f9:76:9c:77:93:d6:56:
                    52:b3:b3:cd:fd:7e:fe:f9:1b:f8:8e:f7:84:05:bb:
                    76:11:bf:45:3f:bd:a8:3d:7c:6d:59:65:ed:e7:42:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2C:13:CC:A6:67:97:0F:68:7F:56:50:EF:A8:4D:A3:EF:38:46:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4ba98b84-7c78-361f-878f-a73fd51bd385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffb0:2006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:29:01:bb:0c:9e:9d:1a:db:fa:1c:82:58:42:ef:66:9b:16:
         83:1f:3a:04:c1:9f:93:ff:18:81:5f:65:2b:c2:60:ce:59:5d:
         e0:a4:7c:7b:2e:7a:30:5e:c1:86:31:97:81:cf:1f:4c:38:88:
         cb:d9:6e:b2:ed:47:54:b3:cb:eb:69:5e:a2:0f:d9:d8:ed:38:
         14:7e:c3:5b:23:17:21:bd:48:c8:6d:cf:27:3a:56:2d:73:70:
         70:8b:e6:fd:cf:22:c5:3f:af:b4:24:b2:f6:78:3d:7c:5f:0f:
         68:d2:bb:38:e0:78:58:58:7c:23:4a:52:88:d2:07:65:98:dd:
         10:23:ac:fb:75:9f:0b:93:ba:26:f8:ca:02:dc:7f:37:a4:0c:
         07:46:12:7c:d1:8c:be:1d:55:66:09:7a:59:ba:7a:b3:86:fd:
         05:b1:46:cd:a8:a9:bb:bf:cf:12:4c:f8:84:17:d5:e2:9e:8a:
         db:f8:ae:38:a6:94:3b:e1:b5:ff:56:a0:51:b5:a8:c0:fe:3d:
         12:0d:55:2f:4a:ab:e3:2e:d3:dd:1e:c8:65:46:15:95:8a:75:
         13:01:8f:a1:fe:3f:4e:7d:f0:99:f7:eb:a7:65:0b:61:a4:6f:
         c1:6b:7b:1b:69:ea:18:ec:ca:98:01:01:c9:fc:e8:32:2b:82:
         f1:a5:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:14:05 2026 by rpki-client