Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b25f92f1-62f9-354f-965e-a2754a33640c.roa
File:                     b25f92f1-62f9-354f-965e-a2754a33640c.roa (raw, json)
Hash identifier:          xuulDjklWfoUK7Khg8Lp+5tWi9ZKvIBjiXDRJ6GIJ6E=
Subject key identifier:   AB:0C:31:92:2F:49:C9:DE:66:18:60:53:F1:43:57:F2:08:79:B2:7D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74A97C1B52B2C94A0C200
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b25f92f1-62f9-354f-965e-a2754a33640c.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        2605:4300:e300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4a:97:c1:b5:2b:2c:94:a0:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=a76abd8e-691d-4efb-aa31-eb8a2433f778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:39:f4:c8:8a:57:2a:ab:a2:ec:36:84:74:
                    b6:72:04:aa:8a:17:4d:96:1b:e2:d7:fb:2a:83:33:
                    7b:12:45:9e:70:83:c5:71:ef:f9:09:5c:d1:42:93:
                    dd:e8:19:5e:78:be:f0:1a:77:f8:61:67:af:3b:91:
                    76:fc:c4:81:53:ce:08:6a:a3:08:09:f9:ec:c6:bf:
                    21:58:de:44:46:4d:63:62:d6:09:13:33:0e:81:50:
                    34:45:1d:2b:55:34:aa:39:88:ed:69:f7:c0:e2:33:
                    6c:29:e0:d0:ba:44:6f:f7:f6:dd:e6:d5:57:c2:fb:
                    09:6e:d2:99:d7:84:89:de:62:45:e8:1c:7f:a9:6a:
                    7a:cf:60:33:5f:08:83:26:32:78:79:b7:b3:51:1f:
                    03:d3:18:eb:c2:e1:52:fd:4d:99:45:5e:63:6e:2e:
                    11:ca:78:a3:78:4a:9b:8b:29:ac:1a:68:c1:4e:a4:
                    2c:f8:ed:cd:39:ee:7d:f6:1d:82:96:4f:9f:7d:7a:
                    c4:5f:20:c5:13:af:ba:40:e0:92:49:66:0f:0b:bb:
                    63:de:2d:0e:fd:10:5f:09:b0:83:25:e1:4f:e4:7a:
                    80:3a:e4:03:07:b2:d4:b4:d6:6e:1c:37:63:db:ab:
                    65:fd:7e:1b:db:a9:5d:3b:8c:ce:d4:03:15:f1:28:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:31:92:2F:49:C9:DE:66:18:60:53:F1:43:57:F2:08:79:B2:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b25f92f1-62f9-354f-965e-a2754a33640c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:e300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:84:fa:d6:ee:54:d7:1e:07:4d:4e:e8:f6:fd:5b:6f:8e:
         0a:d7:9f:30:aa:fc:8d:ec:f6:95:c8:fe:f5:08:35:d1:95:c1:
         7c:08:52:64:44:0c:3b:60:4a:8f:7a:75:1c:37:35:9b:6d:a5:
         29:8d:54:e4:37:b0:f0:cc:8b:b6:c2:10:7c:b8:42:4f:be:d8:
         7c:0e:42:86:cd:42:64:77:0b:fc:2e:1f:95:64:d7:ca:ce:c8:
         54:b0:be:d9:d5:75:58:84:51:aa:50:de:c1:c5:9d:0a:ed:67:
         ec:8a:8f:34:53:0e:1c:c6:1c:2c:2c:5d:89:2b:6f:4b:12:fb:
         96:7d:37:e1:db:da:ef:a5:11:93:42:b2:33:df:cb:84:87:6d:
         24:1a:55:38:4e:40:09:e1:85:33:e5:ad:2e:5a:fa:06:f0:b1:
         2c:83:88:55:b1:48:11:e3:7d:71:49:57:40:49:15:77:45:28:
         46:3b:59:41:e3:b8:8c:9b:aa:b9:66:f2:c6:6c:8f:eb:f2:6a:
         1e:bb:76:85:1b:91:12:72:46:52:84:87:b0:31:ad:3b:fb:c3:
         66:e0:b8:15:8e:a6:5c:4c:e8:ba:7c:85:7b:71:9d:af:7a:e7:
         b1:bd:33:1d:19:a3:ac:28:72:8c:2d:45:17:ec:31:d3:1c:31:
         ba:e2:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:45:36 2026 by rpki-client