Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa
File:                     383a3fcc-da13-31fe-9fb7-abe63f181588.roa (raw, json)
Hash identifier:          Jqdh6z1eo+jCAGe97r4Y5lD0krhCXVvWEJjmZKptjdw=
Subject key identifier:   33:DF:2C:24:16:BF:C0:46:2B:CF:EC:A0:A6:C4:8B:48:7A:C3:EC:F2
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F2EED1E53CAE58ECB82172AB9
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     54858
IP address blocks:        2607:f060:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:1e:53:ca:e5:8e:cb:82:17:2a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=1d127d97-0d17-436d-8aa7-7a2c9502e0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:7a:ee:8c:4c:97:98:30:1a:31:1d:ac:21:
                    9b:db:85:08:17:af:78:75:8e:53:8f:36:82:44:92:
                    13:65:d9:f1:67:82:b8:bf:a2:c0:1e:c6:a6:4b:c6:
                    10:a4:75:cf:1c:a8:b2:f8:6a:ac:d2:1d:54:5f:bc:
                    cd:58:53:eb:e0:a4:cc:b2:e0:e8:3f:e5:21:13:a6:
                    4b:3d:16:20:15:02:03:c0:95:53:04:fe:24:d4:d8:
                    1c:6a:0f:7f:e3:ec:3d:a5:b2:96:31:50:1b:64:d6:
                    37:73:50:e8:96:e1:43:ef:28:e3:14:1d:4f:70:74:
                    bf:e7:ab:0a:26:2a:48:49:0f:bf:ed:98:b8:64:87:
                    a7:8c:a5:5d:45:73:b4:bf:13:e9:8c:39:ba:30:0f:
                    70:a2:db:0a:f3:cd:bf:45:0b:cb:b9:12:41:54:0c:
                    dc:a9:12:4f:7a:f7:b0:17:5b:b4:21:28:f8:ef:b7:
                    c4:03:92:20:49:c3:20:42:19:97:cb:3f:65:bd:39:
                    be:39:e9:ee:10:70:ec:c7:e0:b4:24:fe:c1:98:fa:
                    89:d7:bf:33:56:79:28:c8:e6:da:e3:9c:76:ea:ef:
                    24:3e:74:11:12:53:e2:66:44:fb:a1:74:f4:19:3c:
                    98:a7:e0:b5:ee:04:6b:1d:2a:a8:56:b9:ac:b7:01:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DF:2C:24:16:BF:C0:46:2B:CF:EC:A0:A6:C4:8B:48:7A:C3:EC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f060:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f1:4d:29:2b:f2:b2:e9:3c:7f:c3:74:b8:8c:57:a9:2a:ba:
         05:ee:99:dc:41:a7:2a:1a:b0:f2:58:47:85:64:ec:bf:3d:54:
         b7:6d:3b:af:36:68:88:71:3d:9d:c0:92:a2:ef:8a:b3:bd:bf:
         60:84:72:63:f4:75:e0:1d:b1:08:71:ce:70:ef:38:15:bc:4f:
         2f:52:ec:a6:d0:46:88:eb:3f:a4:ac:d3:1d:2d:85:c6:bf:a8:
         39:02:89:bb:c4:9c:9b:71:e9:4c:60:47:ad:b8:21:e0:ac:7c:
         b2:d6:c0:b0:9c:fe:f4:04:f5:d8:fa:61:dd:75:76:28:19:4d:
         88:04:25:34:01:14:19:d1:9f:0a:ca:b7:06:38:50:93:46:25:
         66:bc:d5:b4:ce:de:1e:84:a4:38:8f:bb:96:47:e7:1a:41:bc:
         f6:2e:6a:e3:67:e0:e9:c1:53:4d:4a:16:eb:78:ae:79:c5:44:
         41:44:bc:ae:e1:0d:96:50:20:fd:04:3a:f9:b4:89:0e:77:c1:
         7b:e3:1f:de:ad:e0:f9:5b:6d:9d:f6:c0:31:ee:5b:80:0c:c7:
         e3:67:dc:52:98:4d:11:10:9d:23:71:ed:48:00:af:52:36:44:
         9f:89:14:d8:b7:43:cb:71:f3:f5:1f:4d:af:c8:a5:e8:cd:7c:
         ce:e8:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:47:48 2026 by rpki-client