Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/41c86e91-2b34-3442-9132-f231999ed23a.roa
File:                     41c86e91-2b34-3442-9132-f231999ed23a.roa (raw, json)
Hash identifier:          qauzlb8aAhqy9d30KqN7GV7kbMf5IQ+dY+LZ5d3Gu4E=
Subject key identifier:   78:4E:54:02:31:F4:36:0D:9E:3C:F6:DD:13:42:89:F5:CA:BA:65:EE
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EF6900BAB7175C8A6554CEB00
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/41c86e91-2b34-3442-9132-f231999ed23a.roa
Signing time:             Wed 26 Aug 2026 08:27:36 +0000
ROA not before:           Wed 26 Aug 2026 08:27:36 +0000
ROA not after:            Mon 23 Nov 2026 14:40:25 +0000
asID:                     396982
IP address blocks:        2604:e700:80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f6:90:0b:ab:71:75:c8:a6:55:4c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Aug 26 08:27:36 2026 GMT
            Not After : Nov 23 14:40:25 2026 GMT
        Subject: CN=2b2beccc-0235-42be-b86c-e89e26a64e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:a2:da:be:9a:bc:9b:cc:78:bf:3b:e1:9c:
                    62:67:da:3e:d8:4a:99:0b:ef:62:e7:4d:1f:29:37:
                    fc:b2:f0:58:d3:08:dd:2b:6f:bf:d3:91:66:6f:5a:
                    73:0a:d2:2e:b8:bd:02:fa:c5:1c:45:53:24:3e:aa:
                    44:4e:83:03:7d:c2:65:de:59:f4:e5:51:26:2c:0a:
                    b9:e5:a5:3f:85:a2:2b:99:b6:19:41:97:44:10:3b:
                    00:4d:a8:f2:92:34:2c:59:41:65:84:72:04:97:c2:
                    93:ed:fb:5e:76:11:63:56:98:e9:03:e2:44:86:7a:
                    a9:29:e2:9d:ab:7c:0e:d0:13:de:2f:11:6f:88:c9:
                    bd:6d:ac:1f:2f:f0:ea:97:e3:4c:09:0c:c4:35:17:
                    6e:34:2e:eb:f4:23:f6:7c:b4:a4:14:36:09:f7:2b:
                    79:b3:d9:fc:98:1e:d3:a7:59:07:fd:72:0e:55:61:
                    d4:8c:6f:31:53:00:cf:f6:90:75:7a:6f:99:d4:a2:
                    33:05:fe:c5:de:0c:b6:56:c9:83:21:df:6f:fe:ea:
                    cf:d3:91:0c:ee:bd:80:98:00:bb:65:a4:20:76:95:
                    85:df:82:a6:83:a6:09:bd:80:58:ec:43:a2:9a:37:
                    ca:a5:65:b3:fe:e4:b5:1b:ae:f2:9b:f1:ed:25:e5:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:54:02:31:F4:36:0D:9E:3C:F6:DD:13:42:89:F5:CA:BA:65:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/41c86e91-2b34-3442-9132-f231999ed23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e700:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:74:39:5e:7d:0f:c2:9b:2d:df:14:6a:e9:df:ff:2a:1c:
         ed:53:1e:20:b2:56:90:0a:2b:ba:dd:7b:a3:d7:99:63:2f:7e:
         83:f5:1c:8a:fe:e7:4f:8f:92:5d:d6:c6:8e:4d:1d:11:84:c7:
         10:a4:11:5e:62:5d:2b:49:8d:24:2f:92:66:0d:df:c5:0b:3c:
         86:30:1b:09:b8:2d:aa:0a:43:e7:65:fc:cc:0c:fa:68:4c:ed:
         a5:a1:bd:cd:78:93:f1:b0:18:d8:33:ac:fd:64:f0:d0:ef:64:
         c7:91:26:4e:28:2b:f5:32:ea:ec:a4:80:96:08:eb:20:8f:09:
         b6:03:e1:5f:0d:e6:84:e3:d7:7f:c8:09:57:69:43:28:2f:22:
         c7:8b:9d:48:64:2f:e6:a5:4d:f6:fc:0b:42:d7:20:c2:04:2b:
         5c:70:c2:5c:ff:08:44:8f:8f:e5:91:70:19:4e:8b:ab:70:72:
         34:4d:26:d6:af:86:19:23:83:44:26:60:e7:d4:ee:82:4c:28:
         cb:ca:e4:61:c4:f7:6d:e3:6e:7b:66:66:17:8f:5c:9e:67:84:
         23:7d:81:ab:c6:24:2a:13:86:2d:df:6e:01:43:ac:64:04:58:
         e7:d9:61:a6:1e:88:bb:c9:b4:2a:17:77:ef:ac:a8:f1:62:64:
         b0:ec:bb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:14 2026 by rpki-client