Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa
File:                     43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa (raw, json)
Hash identifier:          rbWpDrDepBXGPMLH9i5XjqDJaoiaNkzZBjjeJD9169U=
Subject key identifier:   FE:F5:80:71:DC:8D:07:C3:30:43:F7:4B:8A:99:15:D3:0E:21:F5:E1
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584D9FB565C57A69750965E3C680
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     88
IP address blocks:        2604:4540:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:65:c5:7a:69:75:09:65:e3:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=e1c4dca0-eefd-4e78-bfa5-7d4b0aec5d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:84:d8:a6:d5:5e:7b:5d:9d:5f:21:9a:48:
                    a4:1d:67:22:b2:c9:e0:44:b7:aa:16:c5:4f:35:e0:
                    c4:b6:5c:ff:cd:d4:c0:db:25:84:21:21:fc:70:d0:
                    97:d0:08:dd:a0:fa:ee:9e:54:75:21:0e:09:dc:cc:
                    8a:14:e4:61:d0:32:8f:53:95:d9:26:34:98:6a:6b:
                    f1:36:ff:e8:6f:24:80:ba:eb:97:eb:30:70:71:d9:
                    19:e4:4b:b4:8a:ee:b2:50:b6:61:14:47:28:e1:4d:
                    ae:89:c6:17:50:3e:eb:71:b2:54:08:4a:02:f8:96:
                    7a:5f:6c:3d:4d:d7:b8:95:49:33:19:18:c0:d3:74:
                    e0:b5:25:9c:92:ad:44:39:31:4b:05:cd:ca:5f:23:
                    60:9d:75:28:4d:b4:bf:97:01:f8:24:47:9c:dd:d5:
                    c0:cc:22:4d:bc:db:88:f1:db:5b:06:ce:10:6a:6e:
                    b5:43:98:e5:94:60:15:ef:98:41:57:4a:47:a5:23:
                    a6:08:d4:07:f1:85:c2:de:f3:10:1d:45:50:53:a7:
                    03:40:bc:06:48:4a:35:0a:70:1d:5a:f0:5c:c3:07:
                    3f:13:5d:b9:88:61:a4:b7:51:05:ff:2c:bc:a1:41:
                    19:70:59:09:ff:ca:29:9c:8c:c7:94:c6:9e:9f:b3:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:80:71:DC:8D:07:C3:30:43:F7:4B:8A:99:15:D3:0E:21:F5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1e:82:81:b3:71:4c:ed:0a:96:14:df:c4:ca:0b:a3:07:66:
         53:1e:10:12:80:e8:d9:6f:6f:db:5f:ff:03:02:81:96:94:3a:
         a3:00:4e:20:d4:9b:99:64:e0:3e:67:d7:77:7a:d5:3e:c1:1c:
         5c:24:67:8f:65:46:37:55:99:0f:c0:d6:9d:30:7d:d1:a5:66:
         09:ad:66:40:a1:36:13:67:a2:e2:b5:e4:df:f0:16:8d:70:9f:
         e3:31:7d:3e:87:19:5c:09:01:15:c5:35:db:c9:62:4c:01:ae:
         c0:48:d0:4d:8d:08:fd:49:e1:57:a1:1e:09:05:47:e5:2c:c4:
         ae:56:b4:3a:f1:59:e0:98:30:f1:f0:cc:e4:7c:22:e7:7a:91:
         31:2b:2b:d2:46:44:32:df:26:e9:b6:d9:85:16:9b:04:75:7d:
         99:19:29:73:4c:50:df:8e:bb:d1:2d:39:78:96:49:ca:be:5a:
         9b:95:4b:19:0f:ad:06:3c:56:95:8d:f3:ec:83:69:1b:70:32:
         c0:46:ec:43:08:42:fa:46:53:50:f9:cb:bf:91:87:2c:63:42:
         e6:6d:69:c2:60:e9:55:a7:41:7a:b1:c4:25:e8:d8:e3:27:ff:
         4f:43:c5:c7:cd:30:ed:f5:90:72:e1:3d:71:8c:5b:b9:13:cb:
         07:e5:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:06 2026 by rpki-client