Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aeeafd9f-9447-3f9d-ad94-4122631462c3.roa
File:                     aeeafd9f-9447-3f9d-ad94-4122631462c3.roa (raw, json)
Hash identifier:          57MIEBc7vR6emOaia8gMSz/ridmbPGJhsIwszPwmr48=
Subject key identifier:   7D:70:7F:23:C3:F7:AD:E6:7E:A7:CD:62:9E:EE:4E:E9:A8:32:C8:22
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73672C4695F57A8832D80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aeeafd9f-9447-3f9d-ad94-4122631462c3.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        2605:4300:3500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:36:72:c4:69:5f:57:a8:83:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=4ebbae19-14bc-4acc-a509-6298c02fde86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:be:ed:d4:48:81:c1:0d:ab:23:90:e2:c0:
                    0a:d8:79:1c:78:c3:39:fc:05:18:a3:84:9b:01:49:
                    5c:20:87:54:f4:b0:9f:2b:b2:06:bc:ac:ca:45:96:
                    64:e8:a9:24:40:fb:f4:72:57:c1:aa:6c:6a:64:56:
                    2c:ad:3c:47:37:37:91:27:45:cd:ff:8d:2c:c9:92:
                    da:25:2a:04:c7:da:5f:32:24:cf:1d:d0:19:0e:b5:
                    a5:54:86:24:49:0a:c3:52:94:c9:72:d5:35:65:f4:
                    81:35:12:45:2c:8a:48:57:90:0b:55:74:35:a1:75:
                    f4:aa:d8:4e:d8:cc:3f:31:bd:74:23:3b:b1:a0:e0:
                    c4:2f:65:28:5e:e0:f8:27:42:ea:cf:2c:b6:4c:34:
                    a5:32:78:2b:20:75:4d:78:4b:bf:a9:dd:7f:91:b8:
                    4f:2b:96:33:f0:4b:19:d1:23:f5:bc:ed:6f:22:c9:
                    62:36:68:28:3a:a3:93:6b:da:09:a3:bd:e0:b2:2a:
                    48:0b:20:b0:30:f6:a4:6e:0f:cc:e8:b7:bf:16:65:
                    52:37:3a:70:4c:2c:4e:cf:58:3a:63:dc:33:d9:e0:
                    4c:b4:09:0d:38:dc:5a:22:7a:c5:27:94:27:48:68:
                    4f:49:2a:ba:be:4e:bf:71:e5:21:59:00:bc:f3:7f:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:7F:23:C3:F7:AD:E6:7E:A7:CD:62:9E:EE:4E:E9:A8:32:C8:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aeeafd9f-9447-3f9d-ad94-4122631462c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:a2:b9:0b:bf:17:b9:49:c4:bc:e8:a0:0c:b7:ed:fc:54:
         f7:9f:b3:4f:b8:65:4c:6b:d3:1b:b2:82:45:5d:ae:26:0d:10:
         bc:0e:4e:50:1e:0c:52:cb:fb:e2:39:06:4c:60:44:09:b2:1d:
         75:e7:b6:a9:7b:48:2c:f2:b1:af:56:11:c9:0a:b5:93:10:91:
         79:8d:86:f5:06:2f:87:27:29:fc:e0:d6:a4:2e:19:38:3d:21:
         59:c5:11:9d:48:da:b2:46:72:69:1c:70:a8:a0:04:48:97:ea:
         ea:0e:ea:ff:bf:b9:51:8a:38:15:ee:da:73:a1:02:27:09:e8:
         b6:78:b0:ec:fc:25:c1:3e:a4:a1:8b:9d:f6:92:9b:19:cc:0b:
         1c:71:89:a8:3a:2f:8e:6d:51:ab:31:b9:75:f3:16:90:b7:d7:
         af:4e:6d:a7:d7:17:80:88:a8:7f:a5:f6:58:53:3f:46:5d:17:
         93:fb:52:10:d6:59:00:b2:45:d5:c2:80:8d:74:a7:eb:a0:37:
         f0:fb:0f:6b:58:21:93:89:3c:b8:be:c3:37:68:42:24:3d:c6:
         28:c1:c7:f5:41:5f:d5:ec:e1:68:28:07:93:04:55:c0:5c:7f:
         dc:03:f9:87:9e:14:ce:93:22:86:86:8a:f3:7a:04:06:35:71:
         07:f3:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:49:21 2026 by rpki-client