Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
File:                     885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa (raw, json)
Hash identifier:          5AZZCffU3zmcAevdDrlil4vzDFXnirBTX8r+yzdnVUU=
Subject key identifier:   E0:CD:3E:F3:29:0C:3F:DD:B3:B4:6A:8B:7F:6B:EB:BD:C9:49:FA:D6
Certificate issuer:       /CN=acd38b39-740a-4881-b923-26d1a20ffbfe
Certificate serial:       010D0C9F4328584F4973ED6EAD51F44D0962CD00
Authority key identifier: E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33724
IP address blocks:        2604:240::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ed:6e:ad:51:f4:4d:09:62:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd38b39-740a-4881-b923-26d1a20ffbfe
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c1ab8bf9-7122-4d62-9431-40f38ce3d36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:9d:92:b2:ad:0c:39:74:cf:34:29:50:7f:
                    65:f0:e1:20:87:a1:ec:fb:43:f9:73:49:d6:e7:d4:
                    39:49:dc:cf:13:5f:8d:2e:0d:03:6f:d4:28:00:68:
                    36:26:3e:fb:c5:34:dd:32:e1:28:04:78:6e:ba:d6:
                    ec:df:29:7d:c5:80:f7:8b:e9:96:01:9f:01:54:a6:
                    a4:50:ff:01:d8:ef:2e:5b:65:79:aa:0d:6c:8e:b4:
                    d7:13:ea:89:79:c0:29:6b:09:ab:81:9f:af:81:c5:
                    a3:93:5f:5c:4a:53:ba:37:11:18:63:7f:f8:89:4a:
                    37:b2:ba:d8:53:5f:9e:d5:09:a5:ec:38:b3:d9:d7:
                    92:38:44:7f:bc:79:ac:ef:da:ad:36:c7:25:4a:6b:
                    39:52:21:5e:4e:89:db:a8:a7:92:46:ef:51:59:03:
                    ef:b2:c9:06:d1:e0:d1:cd:0a:2f:17:4b:e3:b5:9b:
                    b8:85:b2:96:6c:76:5c:82:21:39:62:0b:8c:83:0c:
                    4a:ae:fb:58:9d:83:c1:ee:fd:1a:c6:c1:ab:c3:22:
                    cd:07:a6:f9:18:73:10:0f:65:57:ea:a6:7f:68:f6:
                    51:35:36:ba:fe:bf:34:10:21:09:0a:19:23:15:81:
                    ac:30:03:01:03:06:31:69:d6:dc:8f:c9:21:7a:49:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:3E:F3:29:0C:3F:DD:B3:B4:6A:8B:7F:6B:EB:BD:C9:49:FA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:0a:f8:6b:c1:60:33:a4:52:de:08:de:fe:83:4e:2b:8b:af:
         8d:28:77:ba:3d:38:8c:47:60:83:57:cb:fd:21:f5:f1:49:79:
         1a:9f:e4:05:05:41:10:00:4f:f2:b7:f2:62:31:df:75:ee:dc:
         29:a2:c1:b7:67:aa:60:27:68:b2:c7:1f:42:af:1f:58:3c:6c:
         1d:59:5b:b4:51:8c:c4:47:4d:c5:99:8d:82:86:93:e4:68:46:
         0d:04:3f:4f:cc:a9:31:54:79:6c:6a:35:59:3f:43:03:e4:fd:
         58:ed:89:bf:59:49:d8:d2:75:21:2d:d8:bc:88:05:92:42:50:
         cd:71:18:44:63:c6:23:55:bb:48:78:bd:9f:d8:6c:ba:74:2c:
         d8:e7:ad:c4:1c:fa:31:59:61:89:69:cf:92:54:e1:2d:3e:da:
         f2:47:85:a8:d7:e7:23:46:1e:22:32:a2:d5:74:23:b9:0b:00:
         8a:3c:4e:7f:20:77:1a:ff:7d:a8:8b:7c:ce:96:2f:4e:49:5e:
         56:4a:a3:f6:e2:4d:aa:86:a0:74:29:b5:fe:f3:eb:75:bc:ca:
         10:34:f8:d1:83:b6:1c:4b:0b:63:34:7d:cf:24:7f:77:53:6c:
         cb:97:04:8a:01:f3:51:16:28:9b:ad:48:d3:88:79:f9:85:ac:
         f6:fb:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:14:23 2026 by rpki-client