Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa
File:                     e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa (raw, json)
Hash identifier:          ikXH8v7krzg3RJE5Hr94RdOdzdpCCc0Co3KXh3f4Wk8=
Subject key identifier:   4B:8B:6D:D4:70:F1:1A:44:95:5C:53:37:C7:AE:31:AA:BA:35:17:58
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584FD0F69744A1D6E00038CA7590
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa
Signing time:             Thu 12 Nov 2026 14:00:13 +0000
ROA not before:           Thu 12 Nov 2026 14:00:13 +0000
ROA not after:            Wed 10 Feb 2027 14:00:13 +0000
asID:                     11404
IP address blocks:        2607:f060:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d0:f6:97:44:a1:d6:e0:00:38:ca:75:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Nov 12 14:00:13 2026 GMT
            Not After : Feb 10 14:00:13 2027 GMT
        Subject: CN=879b8048-68f8-4fe9-9696-d04cfac1d140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:91:13:e4:63:3c:63:98:c6:51:fc:60:97:
                    32:63:c4:5a:83:f5:55:7b:af:e9:34:d6:1f:64:60:
                    e9:24:95:a6:9f:39:77:2d:a1:68:5d:4a:f0:73:38:
                    a7:1a:aa:80:99:5a:3f:e4:d6:52:41:f2:26:6b:81:
                    22:dd:4f:cb:97:c6:b1:61:00:3d:b9:7d:e7:a4:1b:
                    81:98:64:a4:71:ab:54:b7:f6:37:dd:69:99:4d:0b:
                    b1:f1:df:52:17:37:67:82:09:28:51:06:9b:8d:ec:
                    14:06:9e:19:5a:e5:ea:2f:62:16:26:6e:b7:d4:cd:
                    2a:d6:f1:87:9d:35:41:9f:29:5b:68:ed:cb:2d:1c:
                    de:cd:d4:24:c9:43:09:48:48:e7:9b:95:15:10:03:
                    09:1e:bc:50:6a:15:de:3f:93:36:05:43:87:83:32:
                    ec:9c:63:af:d8:40:be:fb:42:00:83:60:bf:cc:26:
                    c6:c6:20:67:22:1e:02:75:8c:86:12:40:16:47:33:
                    8f:ef:88:8c:6c:e7:17:7e:8a:dd:fb:2e:4c:17:bf:
                    21:09:1a:14:27:9f:84:5e:ef:f7:99:db:13:86:85:
                    1f:d8:09:c2:42:de:dd:d9:07:a9:fe:a4:bf:94:5b:
                    53:4e:15:31:d3:35:a5:e3:4e:cd:38:14:9f:e6:ac:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8B:6D:D4:70:F1:1A:44:95:5C:53:37:C7:AE:31:AA:BA:35:17:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f060:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:87:1c:b7:53:ad:84:b7:f9:ab:1e:a8:39:97:28:2f:41:
         62:ed:c1:f9:83:eb:97:b3:73:cb:28:a3:d8:c7:f4:87:cd:bb:
         cf:7a:97:ac:a4:45:7a:78:9e:1c:ef:4c:08:45:30:32:d8:c4:
         db:47:b9:a3:02:d3:dc:d4:4e:2a:42:57:54:3c:7d:cc:58:28:
         40:4c:d0:31:04:8f:1d:6e:83:be:4d:68:dd:74:c7:fe:78:0d:
         17:ae:3c:63:7c:1b:10:2f:cc:96:da:54:95:ae:05:e1:2b:52:
         65:b8:08:88:29:d0:32:7a:4a:3c:ef:44:84:f5:7a:4c:29:6f:
         2b:ba:61:dd:dc:ef:5d:d0:46:75:08:e2:26:63:b7:49:b3:70:
         27:83:da:0a:7f:63:7d:17:22:7b:05:ef:d8:76:06:b0:40:3f:
         09:82:63:76:32:46:8e:cf:24:62:fe:45:95:71:6b:77:29:6c:
         5c:74:19:fd:e8:fc:c3:12:02:5a:5b:22:83:fd:27:c9:ff:b4:
         f7:19:f4:ce:08:c3:41:3e:ca:ea:6b:c4:23:8b:b8:7b:b9:96:
         8c:de:31:c6:cc:b7:26:7c:4c:38:32:82:e7:e3:f5:1e:77:e6:
         af:ca:26:28:00:7f:54:1b:05:90:bd:0c:43:96:a5:e1:c1:40:
         22:db:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:35:10 2026 by rpki-client