Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa
File:                     9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa (raw, json)
Hash identifier:          yMtqMgRwy98BKD6UOKQ3boihnufnqo6NwsuaP2oBQYo=
Subject key identifier:   6F:6C:82:A1:67:FD:E1:70:57:D6:3F:BE:27:71:D0:0A:18:12:B6:6A
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F2EED261502B4F53989B6AD80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     11404
IP address blocks:        2001:1868::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:26:15:02:b4:f5:39:89:b6:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=c1ea01f6-b450-4060-ae22-1a5dadbe1a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:3e:de:0d:3d:7e:61:3e:41:42:ff:c1:21:
                    49:7c:9f:17:18:2f:79:7b:4f:48:f4:54:d9:ad:53:
                    07:c7:fd:ec:31:85:c8:d6:3d:c5:cf:fd:08:13:1e:
                    05:5e:1d:66:0a:00:c5:9f:7e:72:8e:94:6c:a5:ca:
                    80:04:12:bf:c1:80:ba:27:7a:2a:10:d8:eb:b3:cb:
                    51:cc:4f:99:e5:e5:05:8a:b9:a0:2e:94:36:4e:9f:
                    ed:fb:fe:41:87:66:b2:91:5b:b7:19:c2:d8:8a:4f:
                    f1:d4:a3:97:0e:7d:a4:8c:77:e3:9e:cf:fb:d1:4e:
                    c9:af:0a:a9:83:2a:0c:ea:3c:90:d2:ec:9a:af:4c:
                    b1:cb:2b:d6:1d:23:d9:fa:fa:69:41:18:80:d7:55:
                    c4:0c:31:38:e7:93:d7:ef:14:01:d8:39:bb:a7:3f:
                    2d:92:52:36:39:e4:fd:93:65:9a:1e:ba:ca:ec:c8:
                    dd:fa:16:73:43:8f:2e:32:84:62:65:cb:43:3b:b3:
                    87:33:6f:08:c2:a5:b6:17:f7:1c:72:e8:84:d5:a3:
                    cc:14:3b:51:57:de:5b:20:05:ff:35:d9:76:ef:02:
                    7d:6b:c8:81:fb:5c:1e:21:93:a8:6c:32:70:02:67:
                    e2:70:8f:26:7a:ec:34:83:92:67:4b:80:1a:44:89:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6C:82:A1:67:FD:E1:70:57:D6:3F:BE:27:71:D0:0A:18:12:B6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1868::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:35:9e:ec:fe:c3:4c:ab:20:e8:a4:9f:07:53:6d:39:76:ff:
         2a:05:ce:cc:05:ad:d2:91:1a:ab:33:e9:19:16:eb:a4:8d:98:
         bf:46:1e:7b:c7:2b:14:f1:59:be:ca:70:ec:0c:e2:46:10:b7:
         3c:b8:09:38:d7:fc:36:42:18:67:46:ce:bf:be:48:7d:36:07:
         bf:14:b6:97:99:9a:1b:59:7c:b1:42:8a:f7:ed:ea:94:9d:09:
         cb:6f:0c:9e:35:2e:34:52:11:ea:7a:91:08:ef:3d:07:b3:6c:
         6f:12:b9:39:71:16:98:bd:e3:b7:f8:88:43:35:07:02:56:95:
         9a:8e:03:85:3f:3d:d6:4e:65:6c:da:ac:43:f7:ed:5f:5d:1a:
         48:97:1a:c8:42:c9:c0:43:39:29:a7:da:ad:de:9a:fd:db:1d:
         2b:d6:7b:34:5e:55:fa:f8:5a:e1:47:ce:87:6a:47:44:eb:d2:
         89:f2:12:48:b1:a4:c9:0e:1d:4d:e6:a0:24:80:86:78:48:b7:
         04:93:44:5e:b7:ba:86:45:b2:9a:98:ae:41:f8:de:bb:a9:5b:
         d3:51:8a:42:1d:90:51:fa:e8:3c:94:da:c1:3e:ee:b7:75:62:
         40:ed:b4:d6:9e:19:e4:ba:e9:3e:80:42:c1:af:3d:84:61:ab:
         13:5e:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:43:42 2026 by rpki-client