Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
File:                     5bf9e334-dc7e-3b55-8aff-c525713a2347.roa (raw, json)
Hash identifier:          l/R+QJZKFTQAEJJEBWzEGrLGsyLwukQJ0QFGT1m2wSE=
Subject key identifier:   28:6A:80:11:DC:30:6C:8D:5C:A6:4E:D6:14:BA:51:2F:C7:DE:46:F4
Certificate issuer:       /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Certificate serial:       010D0C9F4328584F14679F8046BC3CBE5FE78E00
Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     20388
IP address blocks:        2604:ce40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:9f:80:46:bc:3c:be:5f:e7:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=d997d8fb-5f2d-462f-ac9b-0239c09e3238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:e2:c5:b4:9e:89:08:62:79:6e:2a:00:9c:
                    d8:a9:53:0e:d7:48:9c:e6:60:9b:1c:d4:93:14:41:
                    95:11:d1:65:bb:55:bc:6f:fb:d4:94:1c:dd:ac:6e:
                    22:35:2c:25:c7:c2:38:c8:d1:d1:f4:cb:93:dd:09:
                    1f:28:12:c6:02:c8:10:01:d5:83:c7:02:6a:80:76:
                    66:94:01:01:f0:f4:2d:45:9b:4a:bc:91:2d:cb:c5:
                    79:b6:f6:be:06:6e:51:55:da:27:dc:ee:70:3e:07:
                    1f:64:0b:8e:a2:94:c6:f0:b6:ff:ff:f3:b5:6f:ac:
                    cb:3f:0e:77:dc:f9:46:f3:54:42:70:fb:3c:eb:b8:
                    91:be:ca:65:9c:ab:8c:c6:55:00:97:a7:40:c2:5b:
                    41:f8:2f:a9:a1:2c:0a:35:04:9a:35:6d:b7:43:f7:
                    f7:6e:74:cb:c4:68:44:d8:da:04:7e:52:3f:25:4c:
                    01:79:8c:57:d6:8f:51:e6:a9:75:e9:6b:56:06:ff:
                    ba:ed:3f:35:58:a0:4b:ac:88:1a:a7:54:78:5a:74:
                    e2:b6:19:d2:0e:ad:5e:49:b1:e6:2d:87:59:d1:fa:
                    3e:72:96:b3:92:b4:08:0b:b5:87:49:47:da:20:bc:
                    64:cb:f4:ec:8c:63:a6:da:cd:2a:e0:94:23:56:b3:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6A:80:11:DC:30:6C:8D:5C:A6:4E:D6:14:BA:51:2F:C7:DE:46:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl

            X509v3 Authority Key Identifier:
                keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ce40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:37:de:75:30:88:ff:61:b9:cb:f7:2a:7c:53:71:27:65:4a:
         c2:5e:a3:03:47:fb:cb:02:fe:dc:65:d1:e5:0d:2c:52:7f:55:
         17:3b:24:36:68:ff:62:0d:eb:57:c9:0c:46:85:e5:ba:12:e2:
         83:e7:d6:4d:41:af:57:78:a0:d4:3c:d2:3a:a9:4c:21:9c:b3:
         eb:fd:f6:62:20:71:6c:98:7d:5b:b1:43:58:53:10:cc:6d:69:
         84:e8:64:4a:21:6a:80:50:7f:e4:34:c1:f7:7f:25:2d:a3:1c:
         85:00:da:3e:72:78:41:51:e1:b6:a0:38:28:eb:d4:94:48:a9:
         fb:69:e4:be:f4:46:a6:5f:f2:a7:a0:8d:8a:31:5e:b5:1f:b6:
         f4:de:72:a8:41:8e:24:d4:db:47:59:81:e1:34:03:99:70:86:
         51:92:69:ed:22:2f:98:a7:3c:65:44:96:79:42:db:b3:b9:0b:
         90:89:be:bd:24:ec:16:66:bc:26:24:5b:9f:84:4a:eb:cb:60:
         07:e9:39:4d:6a:b0:a3:6f:52:2a:26:f7:35:19:35:ca:47:7a:
         0c:26:32:87:54:e4:2d:61:b8:ba:ab:58:31:a6:d2:3b:cc:76:
         b1:44:7b:92:81:09:45:61:d9:54:5b:0c:32:60:3a:a5:d5:7d:
         58:fb:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:18:15 2026 by rpki-client