Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c7523460-7ec3-362c-ae8a-0e68f65bb0b9.roa
File:                     c7523460-7ec3-362c-ae8a-0e68f65bb0b9.roa (raw, json)
Hash identifier:          L6+fk9spMfl0QQygYd2+PR3sYu7mO6fm/CjnTTotql0=
Subject key identifier:   D7:CA:FF:D6:55:9C:D1:A0:5C:C9:88:CD:A4:03:2D:E1:01:74:C1:B4
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F7D182DE3E539B1BC80D734C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c7523460-7ec3-362c-ae8a-0e68f65bb0b9.roa
Signing time:             Tue 13 Oct 2026 13:00:12 +0000
ROA not before:           Tue 13 Oct 2026 13:00:12 +0000
ROA not after:            Mon 11 Jan 2027 14:00:12 +0000
asID:                     64286
IP address blocks:        2601:2040::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:18:2d:e3:e5:39:b1:bc:80:d7:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct 13 13:00:12 2026 GMT
            Not After : Jan 11 14:00:12 2027 GMT
        Subject: CN=a6af96e6-67b9-4fc0-b617-089ce39ce0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:73:d7:b6:cc:35:0a:e2:ce:c0:94:31:7c:
                    35:2f:c0:f1:ec:7b:72:ed:d7:c8:f8:16:65:e0:d1:
                    4c:74:b1:68:1b:17:a1:9e:37:71:10:9a:dd:97:a5:
                    93:ec:56:c6:b3:b7:e4:f4:23:20:a5:4e:67:60:42:
                    42:29:73:6e:07:b3:4f:7a:8f:a4:ff:42:d3:7b:07:
                    22:22:3c:ac:ad:48:37:24:dd:8f:60:f6:65:90:c8:
                    67:70:b8:a3:9a:87:f9:1a:85:94:73:da:ba:b9:8a:
                    a5:65:26:b8:7d:30:71:84:6b:e3:c2:68:71:c7:41:
                    84:37:08:4c:49:95:dc:f1:2d:62:f0:69:28:c9:0f:
                    e6:f1:89:73:14:46:79:66:7b:02:25:67:58:ed:ce:
                    1b:dc:af:d9:22:42:bf:59:de:3e:8b:4c:7c:8c:54:
                    e3:9b:b6:9c:5d:79:dd:3e:78:0b:57:66:6e:9f:3f:
                    8d:b2:e3:b2:25:44:02:3d:1f:ef:61:5b:84:7b:a2:
                    28:4f:ea:8a:0e:12:d7:13:cb:ef:7e:12:fd:45:6c:
                    5a:72:fa:7c:87:5f:f1:f4:ea:76:10:d8:36:ef:f5:
                    dd:57:82:a7:51:f9:fc:5c:88:2c:d8:ea:62:59:9f:
                    cd:54:ce:7b:32:36:b1:73:42:2f:4a:81:2e:1e:af:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:FF:D6:55:9C:D1:A0:5C:C9:88:CD:A4:03:2D:E1:01:74:C1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c7523460-7ec3-362c-ae8a-0e68f65bb0b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2040::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:f4:b6:af:8e:3a:d5:13:4b:b3:04:66:78:d8:83:0d:ef:
         28:72:62:b5:5e:41:5f:63:a5:7a:d5:b2:dd:32:fe:b7:8c:28:
         8c:f4:ee:57:58:31:c9:65:71:ab:f9:d8:92:e0:bf:f1:c6:b4:
         84:bf:bd:ab:2b:07:37:e9:90:e0:3c:e2:48:91:50:9d:84:e4:
         54:7f:de:68:09:47:cb:5d:57:d1:75:07:a0:9b:dc:d2:23:a7:
         2a:28:50:e7:7e:37:3c:61:55:96:db:86:7e:3d:5b:6e:7e:7f:
         e3:3d:e9:11:d0:da:01:fa:20:1b:a8:1a:1d:04:be:e5:18:0f:
         7f:58:aa:a6:2c:b7:08:c5:07:56:04:5c:12:0e:7d:91:1e:86:
         d0:6c:94:9d:05:c6:e9:59:45:c2:ed:0a:59:ad:22:cd:aa:7f:
         a5:bd:49:f4:72:f2:7b:d7:ae:8b:b5:b4:49:25:90:9e:02:f7:
         14:02:af:38:38:09:dc:8c:27:31:b2:ca:86:36:67:60:b5:11:
         93:68:e3:73:18:ab:1f:31:b0:85:ee:8d:bd:21:5a:d6:b0:f3:
         78:a6:91:fd:ef:65:8d:01:86:ac:11:c9:11:8a:dc:38:ac:54:
         69:da:66:d8:ac:d5:20:d0:7d:31:e8:7a:9c:f1:51:c2:92:54:
         af:e7:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:08:34 2026 by rpki-client