Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/45085941-5166-3649-92de-8ad40bad4a58.roa
File:                     45085941-5166-3649-92de-8ad40bad4a58.roa (raw, json)
Hash identifier:          2fte9/Y99t2QrMtu2CFvQw4b48NDsLfG38dUHIMoRZY=
Subject key identifier:   3B:B5:94:DB:54:AE:0C:40:81:7A:4D:EC:5C:FE:F7:61:CB:5D:02:2D
Certificate issuer:       /CN=a98125f9-ec1d-4988-bd94-11fb3274a4ed
Certificate serial:       010D0C9F4328584F00DCCDC8B6809E55C7C924C0
Authority key identifier: B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/45085941-5166-3649-92de-8ad40bad4a58.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     54057
IP address blocks:        2604:1de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:cd:c8:b6:80:9e:55:c7:c9:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98125f9-ec1d-4988-bd94-11fb3274a4ed
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=b864b785-37b8-4fa7-b648-f470b2e932ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:87:b1:5e:e4:3b:f9:c7:8b:ad:61:a3:e0:
                    1e:af:31:f2:6b:78:17:8f:9d:a4:c4:18:0e:53:43:
                    c0:d1:4b:43:67:ef:47:11:bf:04:db:86:27:b1:2e:
                    8a:22:e8:e5:0d:bd:0c:e3:64:c8:2a:c7:c3:40:20:
                    b5:85:25:78:3b:ce:4f:ae:47:b9:cf:e9:ce:57:bb:
                    fe:66:bf:4c:4f:80:fa:d3:7a:b0:0d:b2:36:0f:a5:
                    a0:5f:00:d7:57:d8:88:19:f8:2d:d2:94:61:4d:1c:
                    ec:5d:3d:37:b5:98:5a:4b:0d:be:87:02:e0:8a:c5:
                    67:86:e2:52:c6:59:8c:68:65:27:f5:e2:83:69:a0:
                    82:96:5b:bf:2a:70:f3:65:9f:29:7e:64:e1:65:14:
                    8c:c2:fe:b1:ef:ed:00:bf:2d:37:76:5b:49:48:18:
                    e1:91:6f:ea:8e:52:a7:7d:15:90:7e:06:00:98:6b:
                    ee:0d:94:ed:bd:00:4e:62:b3:1e:1d:66:a6:94:ad:
                    14:dc:ee:15:bc:18:63:ad:23:73:5d:9d:e3:a8:6d:
                    88:66:cd:5a:bf:ed:a7:c4:82:6e:97:f3:c0:43:ad:
                    6a:12:33:a2:f5:89:f4:0b:35:53:38:22:a5:fe:e6:
                    86:06:6f:56:e3:be:9a:a6:10:c4:bc:b0:21:bf:68:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:94:DB:54:AE:0C:40:81:7A:4D:EC:5C:FE:F7:61:CB:5D:02:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/45085941-5166-3649-92de-8ad40bad4a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.crl

            X509v3 Authority Key Identifier:
                keyid:B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1de0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:88:bd:87:4a:4b:67:55:85:94:e8:74:b2:2e:1d:25:e3:bb:
         9c:82:b4:24:57:50:97:a0:7a:2f:89:84:16:84:1b:34:ab:ca:
         94:75:a6:d3:6e:ff:78:29:c9:93:6b:fe:e0:4e:0a:ce:8e:0e:
         3c:0f:9d:4b:89:87:97:7c:52:da:c5:dd:21:65:cb:38:b0:94:
         a4:0c:60:15:00:c7:f5:16:12:b5:74:a4:97:5a:d1:40:12:e5:
         38:fd:ae:9f:2d:a2:14:80:66:fb:b8:32:e4:b1:96:ef:ef:8a:
         2d:cb:52:33:94:1b:b6:25:11:44:f3:ce:f1:21:cd:bf:24:64:
         5c:58:45:5e:91:5e:11:45:6b:48:59:69:e4:50:18:68:c1:7e:
         04:0f:70:be:b0:5c:42:84:b3:04:45:51:14:c5:63:9b:53:93:
         7f:16:da:9e:54:bd:1b:d7:6b:61:fd:21:01:50:11:5f:fc:b6:
         ee:9e:d2:98:12:11:a2:3a:1c:36:94:0d:81:67:cd:25:32:e4:
         11:68:27:65:6f:4f:a4:df:d0:98:c6:b5:9c:41:f8:c5:5b:9a:
         30:bd:8e:9b:65:b7:40:f7:04:60:7a:39:91:8c:ea:97:c6:ef:
         a3:91:14:0e:d6:ea:36:18:f4:79:ed:11:d3:b8:3d:8a:90:46:
         6d:1d:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:22:11 2026 by rpki-client