Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e6841681-39a3-3335-b302-5e7c1c57cd46.roa
File:                     e6841681-39a3-3335-b302-5e7c1c57cd46.roa (raw, json)
Hash identifier:          /j48L1JzUHTSvZR1Ri4CV84CPCCSHpiJTy7jakecVQs=
Subject key identifier:   C8:11:C1:36:80:9C:C7:5B:AD:DF:57:17:32:B0:0E:6E:A6:59:36:F4
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584EDC924D6E085087F002122A00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e6841681-39a3-3335-b302-5e7c1c57cd46.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        2620:11b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:4d:6e:08:50:87:f0:02:12:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=cef35f66-f7ce-4ee8-9e75-24dfb74a759a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:86:48:6e:6d:67:fd:39:ea:95:c9:83:4c:
                    9c:8c:0d:b5:7a:44:53:15:1e:8d:ae:4c:6d:66:58:
                    fa:24:03:f6:93:f0:94:ee:5e:48:17:10:f9:10:13:
                    75:d5:70:64:a0:6f:c5:68:f0:05:0d:00:a3:b6:aa:
                    be:e4:01:13:7f:b7:26:cc:41:2a:38:91:95:bf:71:
                    63:a7:20:f4:af:4c:4d:d1:91:0a:89:f8:16:30:9f:
                    b7:1c:32:ed:c6:82:06:d8:62:d5:47:d1:fe:6e:c8:
                    57:07:3b:24:10:a3:a2:76:7d:c9:f5:8d:59:ce:48:
                    95:71:17:fb:3f:e4:78:5f:5d:98:88:9e:8f:a1:31:
                    26:32:bc:da:4a:27:c3:9b:bd:ba:77:92:bd:6e:ca:
                    5a:88:5f:46:f2:1e:20:3d:82:dd:c9:ff:77:1d:60:
                    ba:86:35:d2:fa:73:24:8c:d4:3b:23:6a:1d:07:76:
                    24:9c:ea:1f:30:aa:27:a0:e5:f3:b0:6f:82:fa:7f:
                    25:ba:bd:5b:5f:b8:1f:84:9a:fc:eb:68:d0:1b:c6:
                    7b:2f:ef:c3:49:ad:5c:8f:d3:2d:04:8f:5d:44:f4:
                    11:66:26:3b:16:a5:0a:03:41:eb:75:ac:f7:f2:8b:
                    44:c7:2d:e7:92:51:42:fd:86:47:9b:f1:66:5a:84:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:11:C1:36:80:9C:C7:5B:AD:DF:57:17:32:B0:0E:6E:A6:59:36:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e6841681-39a3-3335-b302-5e7c1c57cd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:e5:fe:51:94:ec:94:c0:35:2e:31:3e:f6:c6:da:db:a9:
         87:82:cf:c8:96:80:99:ff:21:2a:4d:8e:6d:67:4c:ac:f8:6d:
         e0:d7:3c:85:88:81:0c:2c:bc:e9:85:16:6e:a1:8b:50:91:79:
         63:39:da:e2:45:b5:b5:b1:3b:ce:cf:1a:de:7b:a9:09:32:da:
         9c:00:65:5b:7f:3d:e2:d4:a7:c9:2a:b9:60:8a:9a:98:9d:20:
         8c:c7:ca:db:8e:79:5f:2b:39:87:9c:e3:70:09:4d:71:47:8c:
         52:34:16:3c:30:bd:64:b6:6f:a2:91:60:77:e3:cd:c5:e8:10:
         30:f1:d6:f9:7b:59:22:46:cb:4f:a2:8b:f4:00:b8:51:5d:7f:
         8c:98:e1:64:b3:fd:78:47:35:1a:31:18:62:aa:c6:76:41:8d:
         d4:78:3f:89:ca:08:4e:bf:60:94:fb:a1:68:64:e8:e7:a7:10:
         9b:44:f5:ca:69:0f:6d:a1:e7:89:c9:62:ce:7a:ad:52:d1:d4:
         fb:e7:b3:b5:e7:3b:cf:12:0f:2a:9a:59:30:5c:f8:a4:78:39:
         00:62:05:2b:e5:77:4d:81:25:cb:68:9c:eb:9a:1b:71:37:05:
         7f:4a:b0:5e:a4:9a:a4:0b:50:b4:71:17:27:b1:de:31:53:fa:
         cc:57:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:47:37 2026 by rpki-client