Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
File:                     a8ef8ebe-92a7-3667-b275-a0fed342786e.roa (raw, json)
Hash identifier:          NgMfcQkWgy/4mFagDRQj5EqzIQsd7tt/SIWKPwi9reQ=
Subject key identifier:   8A:8B:3E:9B:30:EE:8A:29:B9:36:4D:BE:79:41:4D:85:D7:E9:76:72
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F4328584DBFD07B1B96E05DE67174C390
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     32554
IP address blocks:        2607:6b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:7b:1b:96:e0:5d:e6:71:74:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=c75126c6-ebf0-4069-ade1-a71164d8d644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:e8:ff:ec:ef:e8:5f:bd:65:45:85:6a:b5:
                    81:2c:0a:ba:93:a4:68:c2:22:dd:06:c8:4e:1a:e8:
                    7f:22:cb:5c:f5:a0:28:ee:20:07:36:c6:2b:69:21:
                    47:74:ae:4c:2e:aa:03:ab:e5:b1:04:9f:9a:f0:d1:
                    ec:fb:57:10:48:5d:5c:f6:d6:01:4a:f7:8f:fd:d8:
                    07:1c:cd:a4:fc:2b:f7:ec:80:51:0f:e0:2f:31:b9:
                    65:b5:e9:ac:38:6b:6f:bd:08:62:68:00:d1:3e:5f:
                    37:a5:ee:29:13:eb:97:83:f3:3e:8a:75:7f:da:17:
                    c0:5c:6f:05:9a:02:c3:10:61:7a:96:92:e4:49:b9:
                    a7:57:23:71:2f:34:0b:e6:2f:45:1d:5a:c0:b8:23:
                    ad:47:20:fe:01:e1:30:0f:88:c6:e9:44:3a:91:ef:
                    4d:8e:18:8c:1b:dd:a4:a3:3a:25:27:9c:58:f5:d8:
                    f4:18:20:4b:62:42:83:39:e0:63:46:60:01:47:55:
                    5e:0e:7d:ef:8f:03:cf:89:fe:e3:87:c4:62:0a:9c:
                    38:66:4c:47:97:ae:4e:9b:90:19:4f:24:ff:40:2b:
                    d4:a3:67:46:d4:d6:50:1a:df:9e:ef:e3:98:da:eb:
                    73:28:bf:b4:32:5f:4f:01:fc:e4:fe:2c:21:bc:da:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8B:3E:9B:30:EE:8A:29:B9:36:4D:BE:79:41:4D:85:D7:E9:76:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:07:19:61:08:26:f9:7b:b4:69:f3:a7:65:ad:0b:78:ec:cb:
         96:d7:87:35:36:29:7f:48:16:39:49:44:8b:a6:a1:a7:4a:ce:
         11:91:e3:39:c5:3f:1a:e9:e1:9f:5e:0e:d7:b1:23:97:03:0c:
         87:d5:3f:68:d0:4a:52:c1:5e:97:b6:64:60:f1:19:b5:c8:bf:
         9a:d5:02:04:3d:e5:c6:5c:1c:06:65:ca:99:58:83:9d:6a:d6:
         ee:1b:45:d1:f9:9d:a0:a6:a0:99:a1:16:ed:dd:4a:25:0e:36:
         a1:ee:65:1e:d7:e1:b4:e5:db:08:6a:40:e7:b1:e4:da:8f:1c:
         81:d6:cc:26:18:ce:8f:10:be:02:76:88:4f:cd:d3:d6:3b:d3:
         34:88:84:ae:dd:81:82:0d:60:3e:41:44:ef:a5:6e:2d:cc:a1:
         3d:60:b3:eb:aa:67:85:34:e3:ce:50:93:d0:a3:d7:95:e9:0b:
         38:e3:6c:0a:f2:47:13:77:5b:2d:26:1a:8f:d7:ac:e1:3a:76:
         0f:dd:ed:43:dc:8e:b7:72:60:e6:b8:79:a8:09:95:c5:61:02:
         85:06:88:d0:a4:13:e3:5c:38:52:97:8e:5f:07:c4:22:66:4a:
         fd:f9:55:0e:f8:f4:23:6e:e4:f2:b4:03:a8:19:7d:e1:b5:bf:
         5e:b2:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:59 2026 by rpki-client