Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a7e6fe2c-e5cc-3877-a468-93597ae7cef7.roa
File:                     a7e6fe2c-e5cc-3877-a468-93597ae7cef7.roa (raw, json)
Hash identifier:          qluSKD03b/V/WaldC8cku3NsKOv8u7Udn4g1doo2p4k=
Subject key identifier:   7F:F7:B3:61:39:17:AA:70:FB:AD:5F:FD:FF:AE:34:A8:89:8E:AD:34
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F71EDBE6215EF217900604180
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a7e6fe2c-e5cc-3877-a468-93597ae7cef7.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     11537
IP address blocks:        2001:468:1f17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:be:62:15:ef:21:79:00:60:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=6526f12d-ac5f-4c07-b049-0bbba87d9afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:e0:97:ac:95:64:5c:b9:d2:8f:21:67:45:
                    57:e9:3e:e1:85:d4:b9:d5:5c:8a:38:68:00:7d:54:
                    ab:1a:82:1b:9f:3b:bf:21:7b:39:68:74:79:8c:0b:
                    e1:f1:c1:d8:de:f2:7d:c5:90:97:0f:6a:59:30:6f:
                    e1:05:db:34:ac:70:74:76:fd:2d:dc:a1:96:54:4e:
                    f9:d8:02:e1:8f:02:a4:dd:47:32:e4:9e:34:6a:d7:
                    9c:81:dd:84:1d:1e:d2:f2:aa:ca:98:64:7f:4f:e2:
                    32:4b:1b:6b:f2:1c:cf:35:d1:ce:79:e6:9e:cd:05:
                    3b:e5:cf:f0:27:ca:a7:50:1e:b0:67:15:d9:00:bb:
                    71:83:96:1b:42:75:44:70:0c:ae:41:d2:a8:26:64:
                    25:bb:d1:50:2d:5a:6f:19:b2:5d:38:9d:c5:c6:dc:
                    cd:9d:d4:ac:6a:98:99:6e:99:97:0f:78:09:70:aa:
                    70:92:5b:97:60:56:8c:4f:e2:8c:3e:44:e8:ec:d3:
                    98:eb:00:d1:16:94:c5:5f:2a:9f:3d:a5:37:8c:34:
                    d0:9e:64:85:c1:77:b3:27:16:5a:4e:26:14:0a:13:
                    d9:df:3c:5a:37:9b:86:f9:1a:9e:9b:29:f5:11:be:
                    bf:52:8e:cd:5f:24:5c:30:4c:41:7c:c8:ce:1b:80:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F7:B3:61:39:17:AA:70:FB:AD:5F:FD:FF:AE:34:A8:89:8E:AD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a7e6fe2c-e5cc-3877-a468-93597ae7cef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9a:fd:02:dd:cb:eb:fa:1d:18:e2:34:3a:5f:62:71:2a:ce:
         09:bf:96:31:a9:a3:13:6e:32:a5:96:92:4f:a1:d0:b8:81:09:
         08:68:c9:17:9a:2a:85:ad:50:c0:b0:50:e2:88:5e:ce:43:39:
         52:e5:ba:9a:c7:4e:cc:07:37:cb:ee:2b:e7:f1:94:e9:a3:2e:
         50:22:65:d0:cc:98:85:3e:c5:c2:d5:2c:c8:60:fe:ce:ce:5f:
         ff:e2:12:42:cc:3c:5b:7a:09:36:95:ec:54:9b:14:99:fd:52:
         8d:f7:6b:c4:b9:b9:85:77:69:d4:74:33:aa:8c:29:3a:0a:90:
         fd:11:eb:b4:83:06:76:37:1b:9e:0d:0f:e7:34:b0:b1:01:ff:
         15:84:7f:1e:b7:4c:56:10:ff:5f:27:19:ab:7a:89:a3:1f:4f:
         72:56:ee:70:38:59:98:35:af:7b:96:58:46:8f:e0:a8:85:d8:
         e3:f5:47:84:b1:d4:f3:25:7e:bc:56:e2:cf:7e:74:41:8f:9f:
         38:c5:54:c6:9e:3f:0a:7b:b7:26:b5:ac:14:b7:d0:27:7e:4b:
         8f:94:d9:89:54:10:00:e3:bc:20:c8:2f:29:57:3b:ce:2b:cf:
         38:b4:25:82:15:9f:8e:df:63:c8:9d:1f:55:39:ac:6a:27:43:
         1f:7d:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:43:56 2026 by rpki-client