Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa
File:                     646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa (raw, json)
Hash identifier:          ioyoAFne802c7rNyDvrGht/YxPNaTxINGl+HOKHiqKk=
Subject key identifier:   B3:C2:7B:D4:BE:13:EE:E8:94:29:EE:CC:DC:0D:15:27:6D:CB:04:9C
Certificate issuer:       /CN=197570da-926b-4348-892e-3ea7821d2f51
Certificate serial:       010D0C9F4328584F920879D525C1BCB233C82A00
Authority key identifier: AF:4B:12:5C:AB:26:3C:89:4C:09:3B:FB:E2:CB:AA:F0:66:F0:8B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     396982
IP address blocks:        2631:8008::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:79:d5:25:c1:bc:b2:33:c8:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197570da-926b-4348-892e-3ea7821d2f51
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=2d285dce-91cc-41eb-8846-b6afcc23a0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:8b:a9:e5:84:2e:fb:ff:3e:70:40:20:99:
                    f2:c5:e9:c7:e0:96:5b:d0:0a:33:97:9b:d5:8c:72:
                    98:1f:d1:32:27:5a:ec:e3:64:23:1c:75:80:21:eb:
                    ef:68:4d:d6:9b:40:29:8d:b9:11:50:1d:c7:12:ef:
                    ce:a4:70:b9:a1:88:71:0b:02:a3:f9:e9:89:73:9a:
                    b0:4b:1b:69:c3:94:92:5b:5d:76:aa:80:9c:42:60:
                    49:55:69:71:1f:50:f4:b1:f8:4e:a8:58:0d:dd:1f:
                    a5:c1:68:9b:bd:ce:4a:f2:42:8b:73:6e:a6:21:1f:
                    d6:7c:04:c3:c2:4c:f2:2f:0d:fd:13:72:7d:89:7c:
                    9f:25:43:7d:1c:09:1f:5d:83:0d:45:50:41:ee:85:
                    47:b5:c1:0c:5e:6d:b7:22:91:3e:1d:57:4f:3c:50:
                    e1:f9:71:81:df:23:43:40:7a:2b:4f:df:8c:a2:e5:
                    36:ea:f2:0e:e4:a7:aa:8b:35:88:0c:2f:7f:9e:fb:
                    8e:a6:12:5d:16:2a:21:81:4d:49:c3:33:86:2d:03:
                    2c:85:42:6a:0c:4a:ad:1c:d7:40:0c:22:ec:0b:22:
                    8f:ba:72:2d:e1:00:f8:cf:74:12:00:29:e4:5d:c4:
                    0e:5a:3b:b9:47:4b:3d:83:0b:77:2a:89:16:33:60:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:7B:D4:BE:13:EE:E8:94:29:EE:CC:DC:0D:15:27:6D:CB:04:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.crl

            X509v3 Authority Key Identifier:
                keyid:AF:4B:12:5C:AB:26:3C:89:4C:09:3B:FB:E2:CB:AA:F0:66:F0:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:8008::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:09:1a:9d:8b:ad:55:a1:1c:cd:fb:3d:83:37:13:4d:ae:f5:
         4b:43:37:a8:9c:b7:ed:ec:8f:2e:bc:53:20:aa:f0:ef:e0:29:
         64:39:cc:db:29:06:7d:92:5e:bc:7a:bb:f9:5d:c8:8d:c7:74:
         f5:09:79:52:69:26:2d:29:b7:0e:49:17:9b:4f:43:6d:f2:57:
         0b:82:7b:3d:c5:08:cb:36:eb:62:dd:31:3d:f4:65:ad:9d:ad:
         e9:8e:53:19:29:8f:f2:b5:e6:af:76:81:26:a4:c8:76:4d:5c:
         0c:a0:12:1d:4c:80:bf:a7:5a:3f:3e:28:a6:3a:b8:71:6a:ce:
         fc:9c:5f:f2:83:6f:cc:93:58:ed:15:42:af:3a:a4:54:ac:38:
         55:df:bc:fd:cf:36:31:4a:40:45:c4:6d:e6:7b:0b:3d:87:eb:
         12:7a:76:9b:e1:e5:e4:e8:15:62:56:c4:aa:63:b4:56:54:29:
         93:c4:bf:28:81:fd:b9:13:7f:0f:d1:eb:17:91:b1:cf:47:7e:
         f8:91:79:f0:b6:2f:62:5f:6d:d5:60:01:19:83:12:12:34:c4:
         78:c3:d5:83:31:9a:60:c2:10:d7:22:a8:41:0b:62:1c:c5:4b:
         14:b2:63:6b:71:70:8d:53:34:8f:57:c9:6e:1f:cc:56:ed:61:
         3c:90:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:48:41 2026 by rpki-client