Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa
File:                     91a0f82e-0c80-3031-8728-18426dbe1fb0.roa (raw, json)
Hash identifier:          ifdEr7uOXnrYN2axaDT8mrYhpo0sxcojzPDKaSiEXMw=
Subject key identifier:   2F:90:A8:C6:DB:2C:58:B3:32:54:F3:1D:F6:BC:A4:B5:D0:8F:07:DD
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584F23C251636AB8C4B3E0FE1000
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     20473
IP address blocks:        2604:4540:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:51:63:6a:b8:c4:b3:e0:fe:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=0c1447e1-7a74-4034-8787-edc28a32805c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:0c:d6:c5:15:07:41:51:7d:b8:65:63:22:
                    73:c2:94:99:dd:b3:4d:24:37:b6:cb:a1:30:c0:19:
                    1d:c4:c4:86:a6:c9:b5:b5:33:83:fb:32:24:1c:fd:
                    75:59:99:11:bb:13:09:6e:8f:2f:0e:0f:5e:6c:91:
                    1d:18:f6:bc:a7:33:fe:87:6b:25:00:21:a9:e9:ad:
                    56:4a:7d:60:15:c5:ab:7d:6f:1a:18:02:5a:eb:b4:
                    e8:11:98:80:47:46:c9:30:f5:4c:03:38:b5:a6:14:
                    7b:70:f2:fd:6f:e0:a8:00:54:af:96:1b:07:be:54:
                    64:63:dd:b3:bd:8e:32:f6:7f:0c:e0:44:d0:e3:af:
                    6d:5e:01:c1:6a:cc:a8:71:5d:fe:95:eb:37:1d:ec:
                    2d:e7:9b:fd:d4:4f:5e:36:1f:f1:13:10:00:27:d5:
                    22:d7:a9:37:e8:62:07:55:2b:2f:78:e7:25:56:01:
                    dc:65:0c:01:e3:84:c4:e7:1b:28:83:d7:7a:41:cc:
                    ac:05:1b:e1:71:12:f7:7f:0e:ff:6d:06:35:c9:e6:
                    68:f0:6a:1e:e2:e7:0b:0e:20:82:d0:44:d1:25:32:
                    72:a7:9e:ee:c7:14:c2:b1:b8:84:ee:19:af:83:a5:
                    16:fc:0b:f4:99:30:a7:59:f0:74:d7:4b:94:bc:98:
                    a7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:A8:C6:DB:2C:58:B3:32:54:F3:1D:F6:BC:A4:B5:D0:8F:07:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:ca:40:d6:43:13:e0:dd:22:0b:ab:be:cf:7a:3e:46:60:
         4f:f3:02:8d:84:3c:8c:cf:53:2b:e2:34:4b:ae:f0:82:cb:17:
         f1:d4:26:69:7e:51:52:ca:dd:e1:b4:a8:ac:a6:ba:6f:3d:31:
         cb:4d:10:33:a2:16:12:60:22:0e:48:79:96:a0:e6:7b:7d:d4:
         12:5a:3c:40:21:3d:d1:37:98:23:b6:40:c9:6c:99:4c:50:ae:
         c3:0e:24:f3:ab:87:3b:c0:42:f5:fd:64:6f:7f:34:78:71:67:
         0f:31:62:83:7d:15:a9:5d:b0:ba:6f:b5:e0:ef:cf:fa:5b:33:
         8d:aa:e6:68:1a:3b:39:42:f8:f1:8b:55:ea:81:6e:1f:9e:5f:
         8f:ae:f4:e1:09:03:84:e6:09:6f:56:77:3e:03:8a:6f:c3:6e:
         18:d0:2f:f9:4a:6b:78:da:af:b7:f6:a2:d2:e3:a2:62:7f:93:
         eb:cb:2f:14:38:29:9f:58:fe:13:5b:8f:92:d2:17:d4:75:8f:
         13:0e:54:a4:de:96:6a:ba:c4:72:05:c1:59:32:d1:ac:4d:29:
         a7:d8:29:db:b2:a0:94:42:e3:c4:e3:aa:2a:fe:8c:30:da:4f:
         b4:01:bf:ad:34:b0:cf:d0:0d:42:18:9e:0f:3f:64:5d:0e:fb:
         66:57:ee:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:59:27 2026 by rpki-client