Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/2849b8fd-9576-3747-a5c3-be5c2ffd76fa.roa
File:                     2849b8fd-9576-3747-a5c3-be5c2ffd76fa.roa (raw, json)
Hash identifier:          h/mEFCHSxNutVVSxq8W2uEEAkkgW+T0GxHDK89ooz6Q=
Subject key identifier:   0D:00:0D:4C:1F:AC:C1:6C:CD:A8:9C:98:EA:0B:91:50:01:76:FB:F3
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F4328584FB24108391859969F0B1C1500
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/2849b8fd-9576-3747-a5c3-be5c2ffd76fa.roa
Signing time:             Sun 01 Nov 2026 14:00:13 +0000
ROA not before:           Sun 01 Nov 2026 14:00:13 +0000
ROA not after:            Sat 30 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        2607:5f40:8100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b2:41:08:39:18:59:96:9f:0b:1c:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Nov  1 14:00:13 2026 GMT
            Not After : Jan 30 14:00:13 2027 GMT
        Subject: CN=583e611a-66a1-48c6-a593-4d94d1da673d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:47:75:10:f1:c8:fe:0b:ae:88:63:b1:aa:
                    96:0d:cf:04:8e:04:b8:a0:ce:d4:7c:d0:41:5a:ab:
                    3e:db:64:1d:9c:a3:4e:71:4c:d5:f4:f8:38:c1:4c:
                    9f:2e:d1:36:22:f9:a1:4e:d8:0d:cf:78:ec:39:04:
                    2c:85:bf:d4:ee:84:ca:41:62:6b:ce:67:a0:12:99:
                    cf:28:b3:ca:34:da:6c:7d:42:03:cf:c7:c0:63:13:
                    44:64:ef:53:d4:8b:1c:0c:54:e2:7d:97:8f:4a:20:
                    51:65:e4:3f:40:c0:97:04:88:bd:72:c7:88:dc:54:
                    d9:0e:29:d5:62:19:de:65:df:29:84:1f:d8:44:18:
                    66:e7:18:91:a5:3b:29:0c:03:5a:7b:c1:6e:d7:de:
                    b8:76:5a:34:7f:62:51:44:78:62:3e:68:21:b6:8a:
                    7b:ad:11:6a:99:78:da:43:8c:12:32:e5:1c:61:24:
                    7d:cc:50:ec:6f:c6:f3:61:5c:0c:ea:39:12:5f:76:
                    5b:d3:41:e5:df:5c:d5:ed:09:d0:f9:f2:0e:d5:3d:
                    14:ae:32:ec:81:c3:ca:ae:e8:39:e3:a9:cf:e4:e6:
                    67:f0:6a:ea:16:b2:09:c4:d2:c9:7b:ea:61:b8:b6:
                    2a:14:a1:63:37:e8:9a:60:51:2d:e2:77:4d:e6:b5:
                    64:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:0D:4C:1F:AC:C1:6C:CD:A8:9C:98:EA:0B:91:50:01:76:FB:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/2849b8fd-9576-3747-a5c3-be5c2ffd76fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40:8100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:ea:c9:27:31:1a:cc:30:83:e6:ad:a0:45:42:47:22:39:
         04:3d:93:9f:72:b0:79:da:d6:8d:c9:e6:43:95:5d:8e:7c:00:
         82:f2:b0:92:e1:8b:62:77:41:26:a9:01:21:64:c3:b0:4f:99:
         6e:49:0c:33:da:91:36:82:ee:bc:29:76:46:bf:b9:a6:58:5b:
         0f:cd:b9:89:7d:68:99:34:c4:05:43:90:b3:d2:09:a6:30:82:
         45:64:d9:57:ee:00:70:4b:e7:46:af:45:22:a5:fb:f4:5f:93:
         aa:05:3d:4d:c4:6b:a2:f9:d9:94:bf:ec:fe:93:12:ed:83:cb:
         eb:9a:cc:ab:b9:f1:86:96:b3:6c:ec:df:b7:98:9e:b8:aa:8b:
         8a:b6:89:f9:49:fd:6d:60:a3:94:79:85:55:8e:5e:34:c3:c8:
         63:ac:95:15:77:0b:ae:db:69:f1:58:35:58:37:20:c6:89:c2:
         f2:97:3f:4a:8c:fb:f4:2a:8f:b1:27:09:de:5c:17:49:46:d2:
         7f:35:6e:96:b6:51:cb:9f:fb:d5:3a:e0:81:58:18:57:1b:c0:
         9f:95:c4:f2:05:98:4d:c3:3e:53:61:7f:40:7d:a0:ff:8f:e7:
         7f:b7:bd:19:77:47:98:de:c9:a4:6c:af:e2:0f:cc:fb:55:27:
         e6:05:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:19:45 2026 by rpki-client