Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa
File:                     cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa (raw, json)
Hash identifier:          H34VSJP8Ww1+Qvuq1Fy3DBMfpAncsFgEF25tIWT3yjE=
Subject key identifier:   23:2C:1B:28:29:16:44:E7:EB:9A:66:83:A8:59:8F:38:EB:0E:6C:39
Certificate issuer:       /CN=e0b025a6-f810-4886-9422-6feaed3df1ee
Certificate serial:       010D0C9F4328584EC4D7128D22371C631E4874C0
Authority key identifier: 70:7E:CE:FE:E7:9E:FA:12:C6:B8:64:19:94:18:5C:91:01:5C:D0:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     63311
IP address blocks:        2602:20c::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:12:8d:22:37:1c:63:1e:48:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b025a6-f810-4886-9422-6feaed3df1ee
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=67ca4469-a539-4263-b052-81b64070b4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:51:c9:08:7e:68:7a:ef:07:f1:f6:95:55:1f:
                    f4:f2:60:da:7a:43:3d:8c:24:64:d1:8f:01:d9:fb:
                    1b:67:c1:8c:61:e1:ef:85:ac:99:96:ce:22:67:de:
                    6a:d4:1d:68:c5:53:88:f8:03:d4:76:41:7d:06:44:
                    59:3a:23:94:4b:8e:fc:6c:0b:4b:07:c9:71:d1:c8:
                    5a:c9:bc:e7:21:07:ff:2f:eb:bb:c7:17:64:b8:c1:
                    07:49:b9:77:36:19:71:31:79:64:c9:d1:80:13:dd:
                    3d:82:dc:d8:6e:c1:57:a0:8c:78:65:70:02:0a:57:
                    ba:b0:7d:e1:32:07:6b:fe:b0:0b:54:1c:f1:71:3e:
                    94:6b:ad:58:ab:2c:c2:d0:d0:7f:d7:df:01:d3:27:
                    2b:ea:c6:f8:cb:af:76:47:90:8a:ec:48:34:e6:0c:
                    21:ff:be:e8:92:49:65:f0:38:f4:10:22:22:db:31:
                    19:1d:3a:7e:00:13:d8:9b:3d:25:23:72:a2:6a:43:
                    88:da:24:bb:56:43:3f:4f:8c:33:35:6b:e7:72:ec:
                    a6:28:d5:7a:7b:b8:9f:29:22:09:84:6d:7a:c9:4e:
                    a2:82:b5:c4:3a:bc:28:fb:bf:bd:e5:bf:9e:1c:0f:
                    3a:8c:58:b0:fa:dd:72:d8:aa:18:fc:d5:b8:cd:36:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2C:1B:28:29:16:44:E7:EB:9A:66:83:A8:59:8F:38:EB:0E:6C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.crl

            X509v3 Authority Key Identifier:
                keyid:70:7E:CE:FE:E7:9E:FA:12:C6:B8:64:19:94:18:5C:91:01:5C:D0:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:20c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6e:fa:03:36:55:a6:d5:51:65:3e:98:b6:d1:37:b4:02:ea:
         70:1e:a2:da:82:53:6d:3c:89:30:48:8b:fe:b2:48:f1:fa:c7:
         01:ca:40:47:72:8c:02:75:88:a2:89:7b:70:b3:c3:e3:8a:aa:
         7a:b2:f1:46:7d:92:d8:75:4c:34:50:9d:15:db:0f:66:8b:e7:
         06:8b:ac:23:18:a0:8c:5e:98:96:c4:57:5c:88:51:0c:c5:ae:
         55:bc:f4:64:54:c7:4d:51:9c:11:13:d9:ae:59:15:2b:93:5e:
         68:54:c0:48:9b:8a:f3:3c:f3:1a:94:cf:59:df:48:03:44:13:
         41:2f:48:b3:8e:52:71:e9:2c:df:e2:5b:c7:ae:ce:ab:09:b0:
         94:9e:ac:43:8f:6e:51:8c:29:63:9d:29:fa:19:e6:16:e2:99:
         a4:f9:22:18:ae:88:75:8f:d8:d9:34:51:2b:9d:a9:40:a5:51:
         9f:43:48:70:62:51:82:0c:e5:c7:43:62:15:7e:7c:39:f8:78:
         a5:6a:d8:56:a7:6b:8c:5b:5e:29:7b:66:45:8d:aa:fa:1c:5c:
         e5:90:de:60:fd:ae:b3:50:18:14:4e:57:5c:f3:2a:aa:0b:8a:
         da:8c:b2:bf:a4:97:c0:f4:30:6d:e2:cb:61:0c:4e:21:9e:32:
         5d:ca:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:09:44 2026 by rpki-client