Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa
File:                     884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa (raw, json)
Hash identifier:          NdZD4ZiRmUYNhrXhRXFTlv/qGDbt66iyakIMImf1WLE=
Subject key identifier:   6E:E4:D1:74:AA:47:06:3A:13:8E:83:29:2D:8B:53:1E:25:CA:04:B6
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F4328584F46A7E5875F886C06B5578800
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     36858
IP address blocks:        2607:75c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e5:87:5f:88:6c:06:b5:57:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=931481b5-136a-4368-9754-3ca5466bc0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:ce:2e:de:cd:89:a7:bc:d5:8a:f6:3a:c1:
                    bc:ae:af:2d:ec:f2:69:d1:c0:50:01:6d:fa:ce:42:
                    e8:08:d7:c9:63:56:05:e0:66:1e:bf:9e:bc:00:80:
                    f4:04:5e:ae:e3:f5:7e:ae:b7:1b:8a:b1:b3:14:9e:
                    22:08:8c:c2:95:74:68:6a:75:67:f7:c3:1f:b8:3f:
                    71:62:37:0f:e7:e8:d6:0f:c9:eb:e3:10:9b:ac:f3:
                    4a:48:ee:eb:b6:74:43:c9:b5:38:51:7d:e8:d8:d1:
                    ce:16:42:22:ec:92:85:ea:0d:64:9a:af:eb:ee:f0:
                    00:c4:9f:55:0a:1c:d8:a4:1a:3c:ec:55:09:d2:d4:
                    fd:09:04:93:b7:c2:83:7a:21:dd:05:63:ad:f2:0b:
                    73:56:f4:c1:96:d6:92:bc:19:ee:6b:a4:7e:86:42:
                    09:4f:49:2b:ff:ff:4a:24:f1:ac:80:4f:fb:f9:12:
                    4d:f7:ad:06:ef:d9:ec:ed:a1:0f:ab:57:2d:8d:d7:
                    0b:5e:ef:e4:5a:05:28:78:aa:b8:ef:57:fe:17:a0:
                    e9:9f:c6:3e:13:4e:56:97:1c:2f:e0:6d:b7:3d:9a:
                    d1:86:24:69:ed:5d:49:69:d1:ed:2a:49:39:a1:73:
                    e2:37:b5:9b:8c:38:74:09:3b:e4:8e:63:b3:63:37:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E4:D1:74:AA:47:06:3A:13:8E:83:29:2D:8B:53:1E:25:CA:04:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:75c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:ee:ec:12:f9:c6:40:3e:04:88:84:44:94:7a:e4:7b:ee:
         b7:72:6e:ca:15:c7:33:9e:65:19:29:08:d9:3d:26:97:e3:8b:
         05:43:1e:93:0d:6d:9d:66:d8:41:5b:7e:22:6e:c5:6d:11:f1:
         82:11:bf:09:8d:29:a1:64:7e:67:c7:b3:68:a4:67:3e:27:f8:
         d1:a1:47:a4:e7:c9:81:6d:d2:2a:8b:73:ef:0e:24:e9:33:07:
         8b:c7:1a:ec:fd:32:48:70:e1:20:f4:7a:ae:f6:cd:fd:f5:94:
         ac:d5:e0:b1:3f:05:bc:64:f0:76:e5:9e:da:8e:5e:45:b8:8b:
         ec:c6:4b:22:bf:48:8a:2f:82:ac:20:63:17:6a:4c:3d:20:e7:
         bc:e6:ed:94:c3:0a:09:cb:38:af:1f:6e:bc:bc:e6:84:64:7e:
         9c:e7:84:58:43:f5:5c:da:fa:eb:01:2c:01:f9:c2:f1:ba:5e:
         20:6c:d2:cb:60:fd:45:38:93:4b:4d:68:c8:98:16:64:e5:bd:
         21:44:53:73:f6:b4:92:e8:6d:78:b6:13:14:7b:6c:31:7f:8a:
         78:c1:a0:ad:cd:ec:06:8c:c2:32:9e:01:1d:40:bf:ec:25:81:
         5b:43:5e:a0:dc:9c:81:18:e6:91:99:a4:8a:eb:ee:1f:f3:1a:
         e6:a1:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:23:15 2026 by rpki-client