Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa
File:                     87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa (raw, json)
Hash identifier:          pYdS4oaUl+gaDqHQyjrtaELTer8M8VVCeuq156Agr50=
Subject key identifier:   36:39:55:C0:7F:C8:64:2E:B7:CE:5E:91:D6:DC:B7:C8:AB:62:76:C0
Certificate issuer:       /CN=86375a98-0294-4970-a5b8-3fec0469382c
Certificate serial:       010D0C9F4328584E1A143C2B4B3A3527D5B75C40
Authority key identifier: 49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     3783
IP address blocks:        2607:3540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3c:2b:4b:3a:35:27:d5:b7:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86375a98-0294-4970-a5b8-3fec0469382c
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=fbcd8434-64cc-42b0-beea-311e197de231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:f1:21:fb:02:1c:8f:0c:90:42:c3:ad:8a:
                    de:1b:37:17:75:be:83:67:d2:05:6a:a1:fb:4e:14:
                    71:34:67:ce:80:e5:e5:55:59:1c:60:9d:ed:4a:a4:
                    80:f9:63:d9:b0:0a:e7:82:eb:fd:af:b8:51:21:b8:
                    f2:91:f0:7b:48:c1:7a:7b:4d:58:1c:71:24:3c:13:
                    73:a1:65:4b:0a:fa:fb:58:b7:48:91:c0:3e:8c:dc:
                    6c:24:0a:be:2f:e7:5c:ac:44:e1:58:ff:10:13:9c:
                    8a:83:97:ed:e9:93:8e:c4:98:67:61:34:a7:24:ce:
                    0c:06:97:38:e6:a3:90:60:c5:d5:43:a5:ae:07:5f:
                    9e:34:e5:23:98:28:cc:2b:99:1a:e2:38:20:09:54:
                    5e:00:3c:7a:7c:b2:56:0e:0a:0d:bd:3a:2a:70:28:
                    fc:6d:75:83:0c:48:c1:40:32:1d:7c:43:35:2c:6d:
                    7f:b6:f4:73:22:75:f8:88:ad:d5:fd:a9:c7:c7:bd:
                    0b:4b:f3:28:5a:aa:5a:e6:48:ff:b4:63:77:52:43:
                    ae:26:9f:bf:b8:9d:02:04:6d:07:3f:4e:52:64:cc:
                    d2:6e:d4:e1:80:3d:a9:cf:a4:fe:6d:53:4c:4d:40:
                    3c:69:6b:e2:b2:a4:c3:ec:b0:ac:93:71:46:ff:d8:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:55:C0:7F:C8:64:2E:B7:CE:5E:91:D6:DC:B7:C8:AB:62:76:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl

            X509v3 Authority Key Identifier:
                keyid:49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:19:b5:47:fd:9a:c7:e6:0d:22:12:b4:03:a4:ad:70:7d:a3:
         3d:2f:9c:f3:33:72:fa:ac:eb:83:2f:01:30:e3:c8:8a:b4:19:
         fa:95:09:c8:2e:8c:8e:aa:1e:62:e3:2c:60:01:a3:fc:04:94:
         0e:79:61:43:a1:1e:84:e8:e7:c1:81:c6:b0:c9:72:ec:50:7d:
         60:5b:41:db:3a:3b:6e:11:ac:cb:79:22:19:15:ee:27:1f:90:
         10:a4:59:8e:8a:29:0c:aa:49:39:51:e7:45:a8:22:e5:30:b5:
         a8:44:6f:27:46:e0:fa:6e:f4:1a:75:44:76:c0:2d:24:4e:c3:
         0a:c6:bb:28:ca:bb:a7:9b:43:40:6f:e4:15:59:2b:0d:a5:20:
         64:c2:ee:07:d7:6a:6c:59:5f:62:14:02:3d:85:db:fe:21:ff:
         54:23:4d:b7:4e:4c:d0:f5:b2:b1:ec:39:d5:cd:c8:c0:9b:65:
         0b:dc:1d:ec:fc:92:64:e3:2b:8e:dc:48:bb:1f:d4:b1:80:07:
         3a:1c:9c:cc:41:91:11:d4:3f:4f:cb:c4:3f:15:eb:54:10:5a:
         87:0f:1f:ee:85:58:6b:45:2c:74:ae:b8:2c:7d:a0:a0:88:5f:
         09:70:3f:45:43:80:66:40:a8:53:54:b0:38:98:84:24:e0:69:
         65:4b:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:11:03 2026 by rpki-client