Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5cfe984b-2a8f-3d79-bc88-c069820b41fc.roa
File:                     5cfe984b-2a8f-3d79-bc88-c069820b41fc.roa (raw, json)
Hash identifier:          v9qUS7GSRoeiYB7rNJ8uF1sL3LTwzWmLxLlnjJYZuD8=
Subject key identifier:   84:DB:39:1D:3D:E9:07:26:DD:FC:D6:56:F5:6A:1D:0D:8A:E0:52:CF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73787C025E561F758E640
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5cfe984b-2a8f-3d79-bc88-c069820b41fc.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        2605:4300:2800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:37:87:c0:25:e5:61:f7:58:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=6aa421d8-71c5-4aa8-a788-3c42cbafe9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:85:a0:93:e1:4f:3c:71:6e:4c:8a:03:83:
                    87:fd:3c:57:a4:00:f6:b0:39:91:49:21:71:20:68:
                    7c:34:2b:39:cb:c1:96:ae:56:cf:9a:39:fd:f8:5f:
                    08:4b:03:ad:d0:01:e0:93:8f:4a:d6:bd:88:0b:a4:
                    0d:db:f7:e6:0f:21:d2:1c:d1:71:35:d2:c6:dd:30:
                    70:56:2d:e2:8b:c4:dd:20:f8:da:17:cf:a9:cd:d6:
                    14:33:a7:9b:3f:26:aa:d5:8c:29:34:1d:e5:08:28:
                    4a:39:a9:ec:f1:36:88:34:18:c9:55:0a:5a:8c:b4:
                    c7:37:1d:b4:20:8e:cc:59:cf:da:cf:f0:d9:85:a5:
                    27:e4:37:15:58:62:de:b8:67:ac:f0:ef:f1:eb:b5:
                    57:fd:44:a1:dd:49:cd:ea:24:83:0b:41:0e:46:73:
                    2d:01:e0:aa:d4:f6:31:22:80:24:62:f7:ef:eb:92:
                    5f:fe:ec:81:04:60:3a:22:ba:29:56:c5:4a:81:13:
                    c7:a0:0d:cd:71:8b:83:e2:6f:70:05:75:c2:95:13:
                    71:78:92:01:b2:89:a4:1b:92:80:55:1b:bc:07:54:
                    bf:19:d4:43:8c:5a:e6:d8:a0:80:cb:a3:b9:b9:35:
                    b0:14:b3:8e:30:49:89:38:83:8d:37:c5:e0:35:9d:
                    51:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:39:1D:3D:E9:07:26:DD:FC:D6:56:F5:6A:1D:0D:8A:E0:52:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5cfe984b-2a8f-3d79-bc88-c069820b41fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:f0:57:30:b1:a5:cb:5a:a2:80:51:f2:30:f6:c3:12:b4:
         ab:39:90:b4:d1:5c:43:e1:34:a4:14:fa:39:ec:84:e9:9a:26:
         d1:ec:fa:88:13:3b:83:b6:f5:ee:b9:9f:9b:04:6c:1f:be:c6:
         39:a3:bd:f5:7c:95:99:b0:aa:1d:a5:68:34:b8:fc:c6:dc:8a:
         6f:fd:ee:89:e4:2d:4f:63:39:6d:ba:82:4a:81:4c:f6:ee:63:
         a4:e9:73:d0:d2:35:b4:b4:ff:96:5a:1b:44:54:6f:c5:eb:fe:
         17:aa:79:03:5a:d6:75:9f:c5:19:0b:f6:fd:fe:89:3c:1b:1d:
         09:a6:ed:b0:3b:2b:b0:64:04:ef:3f:0f:7d:d2:89:26:c6:e0:
         96:02:e4:45:94:20:0a:ba:d2:7c:88:af:fb:15:ac:0d:42:de:
         ec:e0:49:3b:2d:8c:18:e7:cc:9a:a0:fc:a3:8e:4f:84:5d:61:
         55:ec:12:14:b5:24:96:38:2a:e9:c4:04:01:78:18:4f:08:1c:
         56:e6:92:9c:a8:20:1e:c2:3d:9e:4e:76:64:10:3c:00:67:1e:
         db:9e:da:9b:9e:63:00:ab:a7:42:2b:c2:3d:cc:7c:29:e7:44:
         bb:be:6d:06:0a:8c:e1:6e:5c:ea:9f:f2:07:f3:f2:e5:d2:09:
         04:9a:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:54 2026 by rpki-client