Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f80f19f1-c159-3089-b2b9-fc7137e3f320.roa
File:                     f80f19f1-c159-3089-b2b9-fc7137e3f320.roa (raw, json)
Hash identifier:          4OtrW5+1cPIymyUpxRGVFUDaq+gO/wcjzG9Q8mr0VY8=
Subject key identifier:   14:D7:CA:BA:D1:07:40:A8:A2:BE:F6:6C:D1:24:5F:FC:84:68:DF:E5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74860B678703495E3A680
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f80f19f1-c159-3089-b2b9-fc7137e3f320.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        2605:4300:1b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:48:60:b6:78:70:34:95:e3:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=3ce5c928-9904-476d-8416-76373566f3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:a2:ff:6a:a4:6a:28:c4:1a:47:a6:94:ce:
                    eb:86:d3:1f:79:d7:41:55:7c:84:00:89:de:7e:83:
                    d4:1a:c9:6a:8e:43:68:b7:2a:80:fc:dd:da:a8:0a:
                    8e:e3:7f:cb:f8:db:d7:44:5d:dc:2b:36:fa:9b:8a:
                    50:cf:ba:cd:c1:30:9e:2e:62:2f:35:26:a2:47:9b:
                    7c:e8:dd:ce:bb:4c:86:cf:40:9d:0a:fe:78:50:ce:
                    89:14:2a:57:c5:ab:a3:de:9b:7f:b9:20:f2:c0:50:
                    d8:9a:20:65:59:98:29:2d:b4:00:82:2d:11:c3:72:
                    11:a3:3c:83:fb:44:51:53:64:3f:3c:25:5f:15:94:
                    f5:6f:ee:ab:eb:08:5c:cc:1f:75:d7:5a:0a:54:64:
                    83:b4:4d:32:99:fe:05:9e:4f:86:8a:ef:31:4b:fb:
                    7a:e7:7f:97:2b:b8:4b:5a:0b:f8:e9:5e:ed:92:72:
                    b2:56:85:46:04:08:da:d5:a1:d4:39:14:70:76:6b:
                    ea:b1:af:a8:cc:a7:a7:6b:a9:6c:15:a1:2d:c1:cd:
                    57:22:24:07:b3:f0:02:ce:a6:d4:e6:e1:09:07:c2:
                    61:9f:68:1a:ed:dd:50:ef:81:b9:99:cc:51:96:d4:
                    d9:eb:6c:c4:82:70:b3:d2:24:17:58:35:9f:3a:20:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:CA:BA:D1:07:40:A8:A2:BE:F6:6C:D1:24:5F:FC:84:68:DF:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f80f19f1-c159-3089-b2b9-fc7137e3f320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:1b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c5:b7:fe:03:d2:c4:ce:ab:80:64:04:36:73:b0:9d:a9:20:
         e3:86:22:50:6d:8a:5d:ca:38:83:36:8f:3f:93:f9:42:05:8d:
         be:ef:ce:0f:d2:86:03:98:77:85:c3:ac:f2:58:53:69:1d:cb:
         c5:4d:47:0d:0c:3e:25:4e:d9:9a:50:25:80:c5:e0:76:47:39:
         0c:45:2c:6b:1d:4e:a6:67:fc:54:b3:09:f6:83:55:b6:3a:99:
         79:8d:28:4c:29:57:9b:cf:a6:de:8e:90:24:1e:13:60:2c:e3:
         77:96:63:a6:81:b3:eb:9a:c8:2a:da:22:25:f6:9a:a0:af:6f:
         5c:12:d7:c5:6b:15:60:e0:9b:b2:31:6f:fc:49:8b:15:f6:0c:
         60:de:7e:44:dc:6c:57:d7:cf:ce:bc:4a:25:9e:8f:d1:40:e0:
         66:52:89:4e:13:89:3e:4e:bc:2c:62:7c:e5:ec:a8:cf:4f:17:
         02:0f:4b:4a:a7:6d:5c:ab:36:99:0d:25:ad:75:0e:d6:31:a2:
         62:a3:dd:2e:40:8a:48:61:e8:61:cd:f5:97:28:db:56:1f:ae:
         60:83:1c:82:a8:c7:d9:ec:24:2b:3a:f5:b0:82:43:e2:f0:6f:
         92:c9:0e:99:91:26:73:bb:e5:70:0f:0d:49:bf:29:54:45:b0:
         10:47:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:23:30 2026 by rpki-client