Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa
File:                     017f82d2-8fcc-3ffe-917e-340f3336d850.roa (raw, json)
Hash identifier:          RuyM7hOMdgrYCAHC1he5uf2R2nwj28aPxndp74LC9Qg=
Subject key identifier:   06:B1:68:A5:2C:31:DD:5F:89:03:8F:82:C2:19:D4:8F:6B:A8:B0:9D
Certificate issuer:       /CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
Certificate serial:       010D0C9F4328584EC4D70B15B71C3C6CF037E500
Authority key identifier: A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2604:1fe0:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0b:15:b7:1c:3c:6c:f0:37:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=13660d8f-7bb5-4a3e-be75-3515e1a85402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:91:2c:f6:d7:08:c6:d2:95:62:05:00:b0:25:
                    49:6b:1d:7d:86:32:2b:c4:f4:0e:78:20:53:0d:56:
                    6f:bd:c4:e6:d1:59:c8:2d:22:22:ff:fa:4c:10:13:
                    52:c1:4e:b2:62:72:89:c5:9f:49:a5:91:dd:78:51:
                    5b:2e:8a:48:73:05:40:ce:31:be:a4:08:7b:ce:41:
                    4a:ba:78:62:9d:40:f1:df:3b:21:3d:45:1f:27:38:
                    b5:f9:c1:3c:78:ef:5b:82:2e:5f:a3:c4:52:5e:e8:
                    87:9b:26:c1:0b:bb:45:74:85:19:94:03:eb:d0:3d:
                    1b:2e:8e:de:2a:d4:85:08:cd:2a:7c:0c:ca:4e:b9:
                    5b:ae:a2:97:e0:19:ac:d7:6d:84:bb:24:e3:45:72:
                    39:66:29:f9:04:9d:35:d0:67:c7:22:dd:32:97:e5:
                    80:e4:8e:e4:39:fb:2e:a7:52:03:a4:7b:62:f5:21:
                    65:3c:4e:26:78:3a:5e:bd:1e:1a:cf:75:21:6e:79:
                    8d:7e:67:15:cd:23:fb:6b:83:99:f1:f8:c5:86:5e:
                    0b:c9:6c:b7:ee:a7:f4:f6:0c:3c:ac:8e:a5:96:4a:
                    f9:59:00:35:ff:08:b7:f4:23:51:39:25:ce:b7:85:
                    5e:ce:84:d9:7c:bb:ff:b2:eb:a2:99:25:75:28:5b:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:68:A5:2C:31:DD:5F:89:03:8F:82:C2:19:D4:8F:6B:A8:B0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/017f82d2-8fcc-3ffe-917e-340f3336d850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl

            X509v3 Authority Key Identifier:
                keyid:A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1fe0:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:7e:3a:0b:52:83:62:18:b2:cd:1d:37:9a:a5:04:29:95:ad:
         5c:fe:9f:a6:39:14:21:cc:d6:5d:01:c5:6c:36:72:cb:62:25:
         83:2e:0f:18:97:b4:e8:17:6e:d5:7a:ef:f6:27:88:d6:8e:d0:
         c6:e4:c7:34:0e:43:d2:c0:12:3d:f4:59:40:7b:88:fd:df:98:
         89:ce:3f:27:16:f3:70:57:59:45:64:5f:96:18:27:b5:a4:eb:
         29:ec:bd:13:90:ee:59:e8:24:3e:ac:86:12:1a:1e:f1:2e:c7:
         53:b1:f6:19:1a:1e:c8:bc:75:6e:75:f4:d9:da:d9:4d:c3:0f:
         18:5c:5c:19:10:6e:66:e1:5c:56:a5:2b:3b:95:d8:e8:ea:4b:
         49:78:55:1c:03:45:37:6a:5d:b8:1b:08:20:7e:70:9c:70:8e:
         bf:8e:f6:89:00:26:7d:91:4a:d0:b9:4f:97:62:0c:ed:a4:a4:
         ca:1a:07:2b:52:13:68:a3:f6:e4:45:59:2c:de:44:e3:80:77:
         67:ae:88:66:1c:a1:83:c9:c3:bb:86:0c:ab:f5:a0:99:b6:79:
         d6:9a:24:b5:f7:6a:98:28:61:88:4e:0b:0c:ad:81:4f:ee:62:
         ea:34:fe:58:62:9e:dc:e3:e9:a5:e2:df:91:a1:8d:fa:3d:bb:
         2b:83:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:23:55 2026 by rpki-client