Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
File:                     c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa (raw, json)
Hash identifier:          lTOM8oMfcsd3krAX1HkORVeIftqaVecH2SRsuSqemBA=
Subject key identifier:   13:FD:5F:F3:E8:71:85:EC:2C:B6:8F:F6:1B:7B:42:0D:1C:6A:FA:03
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584F2D87B70BC74E11FEAD543500
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     33083
IP address blocks:        2001:4830:c400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b7:0b:c7:4e:11:fe:ad:54:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=aec3b96b-54ae-466b-b537-688f598f96e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:60:ac:a5:10:ca:3a:2d:84:5d:c3:99:6c:d3:
                    cd:4b:4d:ee:f6:9a:df:bd:11:3b:e2:1a:a1:ec:64:
                    ed:83:f6:26:2b:be:47:7f:9c:1d:f5:02:85:bf:a4:
                    dc:90:4e:7d:27:dc:52:81:84:f2:42:f1:7b:d6:ef:
                    dc:ce:b7:a6:2a:54:bb:0f:c7:46:6f:02:ed:3c:1c:
                    d2:aa:a4:7e:5c:21:59:38:99:3e:c6:0c:fc:f2:26:
                    2e:44:a9:45:53:1c:0d:ae:18:7b:4c:2e:12:27:f8:
                    84:1b:77:e2:58:a1:22:69:56:ee:3e:d7:09:ea:1f:
                    78:77:6a:bb:3e:2e:a3:eb:77:3b:ef:4a:86:34:df:
                    72:81:35:90:a2:f7:da:ad:c3:23:b9:fc:4e:62:0d:
                    69:e9:81:69:c7:53:37:ae:0f:03:ed:11:96:68:04:
                    ae:73:91:05:41:8b:5d:52:65:b3:25:64:87:31:a2:
                    77:e6:70:4b:fb:aa:3a:28:bb:c7:54:57:ac:f8:18:
                    6e:91:99:2a:49:d1:75:02:ff:17:9b:41:04:d9:e3:
                    8e:91:8a:94:ca:13:de:3a:39:65:5e:e6:b4:8c:cb:
                    9d:71:1a:9f:47:5b:4c:cc:8b:a6:73:f4:11:35:d6:
                    cc:87:44:4c:02:21:7a:c7:0a:6e:84:d1:f8:9b:85:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FD:5F:F3:E8:71:85:EC:2C:B6:8F:F6:1B:7B:42:0D:1C:6A:FA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:fe:db:a1:34:a0:41:fc:8e:01:cf:a6:c1:a5:24:1c:4c:
         b7:73:1c:9b:00:e5:97:13:83:70:fd:85:0f:a2:e7:4d:3b:0c:
         cf:4f:3a:aa:a6:4f:25:ee:0e:2b:e6:8c:94:f9:95:a1:d7:68:
         56:21:4f:b4:e4:e4:e9:03:49:fe:14:aa:b4:aa:c8:cf:e8:78:
         0a:6f:1f:58:56:85:94:09:e0:55:b1:3e:76:ed:e8:3a:da:dd:
         a3:4e:1a:f4:30:8f:cf:56:16:f2:1f:35:e7:38:68:2f:8a:e7:
         57:42:5d:cb:2e:f7:50:e0:c3:fe:e6:48:38:ee:2c:31:72:0f:
         b4:55:f5:2d:83:21:65:06:8e:b5:18:c8:4d:39:12:2e:32:c5:
         6e:86:87:7d:57:2e:a1:01:4b:60:a9:72:86:d1:69:52:6b:99:
         d0:c2:b4:e8:6a:80:9b:03:a2:03:89:db:9c:17:b5:45:bd:28:
         dd:34:d4:b4:00:c6:6a:82:c9:f3:37:11:f1:b8:72:fa:48:58:
         26:bf:35:bf:64:ec:e8:32:0a:78:84:c3:bc:a1:5a:c4:5e:3a:
         d5:cb:5a:95:60:f5:d0:0c:a3:52:01:4a:5c:c0:9b:56:0b:2e:
         61:bd:bd:fa:46:49:20:74:c7:2c:cf:71:52:d5:ea:75:de:68:
         97:7c:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:15:36 2026 by rpki-client