Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa
File:                     8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa (raw, json)
Hash identifier:          L/9b2c2Kzlro9sECaR/yTtMItvLQfZjIbK+z5e0BD3I=
Subject key identifier:   19:B5:61:9F:68:10:E8:8B:A4:05:D3:65:A3:E2:D6:E1:22:6C:0C:53
Certificate issuer:       /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Certificate serial:       010D0C9F4328584F497510669DE6A87EC9730300
Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14749
IP address blocks:        2606:fbc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:10:66:9d:e6:a8:7e:c9:73:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b71f5ea7-3938-4266-bb14-58b82792a83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:c3:ef:11:89:bd:a7:3f:68:a6:06:8e:c8:
                    b1:f6:a5:e3:77:b4:63:bb:e6:27:58:a1:ac:8c:8f:
                    06:1a:4e:e1:89:2a:93:6e:4b:ae:7a:7a:fd:83:8a:
                    67:b0:9b:24:bf:84:c4:63:95:6c:b5:c0:96:19:88:
                    e2:90:2f:d7:72:62:d1:6b:03:80:6b:b6:c0:d8:df:
                    47:88:9e:c0:a7:83:4d:6f:40:fe:51:bc:6d:c2:22:
                    8a:60:a7:e1:85:52:33:1c:6d:25:bc:af:c0:72:88:
                    83:3b:6f:53:09:ac:36:39:9f:19:46:74:c1:5b:06:
                    94:e3:e8:73:ff:d7:fe:0c:fb:ee:ae:ea:eb:d9:c0:
                    a8:4c:32:03:10:ae:b7:83:9f:bb:a6:92:4c:52:0c:
                    ce:a4:cb:95:8b:6b:52:a5:85:18:f9:83:e8:36:d8:
                    fa:7b:a9:13:77:20:39:9c:3e:0f:8b:57:00:47:73:
                    fe:2d:40:c6:f1:68:55:36:0b:cb:27:96:2d:5a:96:
                    58:1e:c1:a6:e5:87:3b:15:aa:5d:e8:e7:f3:a4:70:
                    d9:0e:05:fe:cc:17:08:3c:5b:99:6d:c7:09:f7:b4:
                    5e:18:49:c0:d1:a7:01:fb:9d:cd:04:b8:f3:23:98:
                    5d:e0:02:50:36:ae:63:f3:9e:01:76:db:b5:b2:a7:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B5:61:9F:68:10:E8:8B:A4:05:D3:65:A3:E2:D6:E1:22:6C:0C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl

            X509v3 Authority Key Identifier:
                keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:49:4a:6d:2e:9f:7f:97:29:5d:ed:ce:3d:6e:48:44:c2:da:
         f3:3d:c1:db:17:4c:20:40:29:05:59:93:e4:02:2b:14:13:76:
         c8:97:04:8d:f1:fa:33:24:0f:43:85:13:aa:5c:af:2e:e0:c7:
         74:4e:1b:98:c2:47:c5:81:0a:ce:df:26:eb:28:c3:7d:be:e1:
         23:6a:58:11:a6:c5:b8:15:2b:d3:86:e2:a3:ba:a7:bb:ac:d3:
         0f:da:7a:57:be:db:54:b8:b4:62:3c:13:fd:cb:45:59:cf:01:
         e5:00:95:b4:b4:e9:3b:a0:8d:20:71:1d:72:58:f5:22:a9:93:
         17:dc:4c:cc:8b:cf:21:94:ea:4c:3f:bb:6f:a1:17:b3:37:be:
         2c:ec:aa:d3:57:96:9d:c7:7f:24:81:cd:48:83:99:d4:32:6b:
         d6:36:f5:76:22:af:b5:be:db:bb:22:d4:07:27:a7:17:e1:5c:
         b5:7c:1b:f8:a3:4b:4d:b4:5c:7d:89:20:fc:15:93:2d:86:15:
         67:de:31:46:ff:9d:cb:67:2b:f6:b7:4d:b0:6c:e0:7a:82:9a:
         ad:86:5e:90:32:fe:33:7e:f1:99:ba:c1:92:93:2a:fc:84:78:
         af:00:de:61:c1:1a:4b:df:b9:2c:11:2d:2e:9a:b9:fd:50:28:
         3c:0e:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:16:20 2026 by rpki-client