Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/8837e8c6-7fcc-3a65-881a-18177bad0061.roa
File:                     8837e8c6-7fcc-3a65-881a-18177bad0061.roa (raw, json)
Hash identifier:          BOMLYl/oNTcjYvnOoGV+wZZ6+JZ5ncS8114QNVdOnIw=
Subject key identifier:   D7:B4:58:C9:E2:E9:FD:7E:B9:B1:43:BE:A2:D4:3F:71:78:90:B8:0E
Certificate issuer:       /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
Certificate serial:       010D0C9F4328584EFF777B7F199C86410FAD7A00
Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/8837e8c6-7fcc-3a65-881a-18177bad0061.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     26459
IP address blocks:        2602:815:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7b:7f:19:9c:86:41:0f:ad:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=abd4ff1d-599d-476b-b928-98dd3d8a79bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:86:30:9e:df:7b:37:22:24:2b:25:67:7a:
                    56:c3:7a:69:a8:0b:6a:d6:db:c9:b2:1e:36:44:ad:
                    f8:6f:2c:28:21:ce:0c:8e:54:29:34:bf:7c:f4:03:
                    34:8e:d6:ad:5e:89:41:44:2d:2f:b6:84:12:fb:89:
                    3e:db:dc:30:da:26:a1:02:e2:57:ce:06:d3:12:d9:
                    99:a2:43:e2:23:ba:22:a2:6a:4b:ca:23:a4:d3:da:
                    4c:26:bc:f1:e0:34:f3:5f:3a:f3:c6:84:c0:98:33:
                    04:69:57:0c:0d:57:cd:3f:9a:79:2c:a5:4a:06:26:
                    7d:5f:67:36:a4:6e:64:cd:2f:e8:18:77:fd:23:53:
                    43:d3:d2:8c:37:05:a0:7f:eb:f8:e9:9f:41:e3:e3:
                    a7:be:60:bc:46:c4:51:08:ce:a5:51:16:64:b2:43:
                    5c:14:a7:1b:1f:1d:fd:46:4f:fa:bf:4a:dc:29:43:
                    a7:a2:4f:12:55:6e:2a:67:a4:1a:25:16:0a:16:b8:
                    56:c8:dd:5e:f7:41:2f:08:e8:85:a0:e6:05:d1:14:
                    c4:dc:6a:64:d3:3a:fb:b9:ff:04:0c:b4:e5:72:f7:
                    3c:53:62:ea:02:33:d6:24:05:ef:ce:55:dc:24:49:
                    8c:12:9d:0f:f8:ad:90:2d:36:0d:0c:c1:05:d4:a3:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B4:58:C9:E2:E9:FD:7E:B9:B1:43:BE:A2:D4:3F:71:78:90:B8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/8837e8c6-7fcc-3a65-881a-18177bad0061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl

            X509v3 Authority Key Identifier:
                keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:32:1e:4c:0a:40:81:96:49:91:50:cd:42:78:41:3a:65:
         dc:23:0a:57:38:0e:1c:31:6f:58:2c:fb:b6:d2:09:a6:d1:cc:
         71:81:5d:92:fc:3f:b5:31:c6:ba:58:93:7a:48:09:4c:7a:ca:
         c2:34:17:82:c7:51:f1:1f:52:2e:98:0b:1c:6e:e4:6a:76:90:
         f5:fe:ba:b8:52:a8:40:8d:9b:04:27:aa:43:3f:75:72:7f:10:
         af:d8:53:a3:11:f6:ed:fd:bc:74:b9:8d:82:04:69:df:50:16:
         a8:c9:8d:b0:6f:ed:a6:5c:57:e7:0a:85:6c:cd:2e:12:b7:41:
         9b:c2:ff:d6:b4:5a:c5:cf:87:df:39:69:65:0a:c3:f7:d3:fd:
         f9:57:99:75:88:a4:ba:dc:8c:ed:c5:cc:c3:d3:9f:fa:6b:22:
         ed:e8:df:82:b6:58:dd:28:a2:15:a1:31:6e:a5:53:b2:91:88:
         2b:40:88:c8:98:65:f2:bb:0c:32:87:e6:ce:87:86:0f:97:28:
         97:8a:3e:61:e3:e4:7b:aa:52:a5:7c:e6:97:54:73:5e:b7:26:
         90:d6:85:6b:86:51:e1:93:22:8d:0c:f5:97:66:ee:97:04:3a:
         68:09:4a:bd:aa:e5:3f:90:6a:7f:6d:8f:f7:8a:cf:1e:7b:6c:
         d4:33:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:29:40 2026 by rpki-client