Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa
File:                     d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa (raw, json)
Hash identifier:          J3Rvlin70qIaTfgNi/3n725lFiy07Hop5AgNzJBOPls=
Subject key identifier:   6B:17:96:16:7B:0F:F9:A5:57:59:0C:7D:55:4C:B1:65:B7:9F:26:4D
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584ED9C76B5F6CCF8735EF3AD280
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     26496
IP address blocks:        2603:b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:6b:5f:6c:cf:87:35:ef:3a:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=15645053-8b29-4321-987a-51d6f0f472ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:34:89:87:ed:e8:50:40:f5:82:d8:2c:b5:
                    15:f3:b7:9f:00:b8:09:52:cc:d6:18:c0:f4:1c:e9:
                    bd:e5:ee:45:d6:63:71:94:a8:20:37:ae:97:c9:37:
                    1f:95:b2:fb:02:ec:80:90:e5:28:c9:24:ca:75:c7:
                    a2:5e:8d:d2:44:e3:ce:3c:19:3e:88:91:d6:a6:75:
                    60:89:5c:d1:56:f7:e6:df:8d:74:e0:e7:1e:95:aa:
                    59:0a:a7:02:65:2e:09:b1:9e:ef:7f:e4:71:2c:09:
                    7e:f6:9b:28:5c:ec:a9:78:69:cb:d1:88:47:e4:6f:
                    d8:f2:01:cc:9e:e3:80:41:ce:4b:84:b6:5c:8b:b6:
                    80:34:a5:ac:3a:7b:b4:64:d8:be:e6:59:f0:81:17:
                    ed:90:41:90:f5:53:4d:86:57:f8:25:2e:4d:b1:fa:
                    e2:78:d5:3c:cd:fa:11:32:e3:7c:6f:9a:89:62:3b:
                    6c:95:76:6d:65:0f:8e:22:67:72:4c:f1:71:04:91:
                    cb:3b:38:8b:1a:49:3c:d2:e9:a2:b1:30:44:c8:5a:
                    8e:10:62:ff:f6:37:c5:48:31:c1:b8:98:25:05:e5:
                    c9:35:6c:10:0b:47:98:de:c1:41:c0:df:c8:12:87:
                    0f:21:84:58:97:03:8c:ff:30:fd:0c:c5:3a:5d:1b:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:96:16:7B:0F:F9:A5:57:59:0C:7D:55:4C:B1:65:B7:9F:26:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/d1d01cf7-7088-3372-a2e0-393efb23b0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:12:6b:39:6d:8f:af:46:88:22:6a:3f:51:18:c9:e4:eb:74:
         d1:a5:37:a9:18:55:6f:af:58:27:51:2b:d0:e8:85:3b:29:c0:
         4d:e0:fe:30:5f:ed:8b:0d:aa:e7:c3:0d:0f:5b:64:c3:d7:37:
         60:0c:9e:8f:c0:4b:4e:9b:f0:19:5b:9c:02:72:3a:ed:bb:6b:
         e2:a6:43:03:90:7d:91:44:e4:22:62:a2:cd:85:c3:4c:c3:47:
         05:33:a1:5d:ad:93:f3:2b:6c:cf:b5:d1:77:0c:9f:31:12:c5:
         ad:ca:b5:28:5a:93:d8:12:40:70:00:95:88:2d:5a:92:c9:9e:
         a8:f0:61:43:23:6a:b5:2b:74:dd:ce:c2:ed:fd:8a:c5:63:bb:
         e0:04:5b:9a:8a:c6:16:1f:ac:31:8d:cb:4c:1c:6d:71:5c:5b:
         82:f6:34:f5:64:7e:0c:85:75:86:c2:18:85:34:af:b9:08:21:
         21:1e:35:0a:18:f7:43:9d:78:c3:d4:ea:be:73:a9:43:48:1e:
         aa:fa:43:49:91:cd:34:e4:39:ac:f9:dc:3a:45:83:4c:f6:cb:
         c1:d9:f8:25:98:42:a0:51:40:1e:db:8d:b9:63:fc:5e:c6:84:
         fa:55:a4:c2:8f:d2:a1:c8:25:30:3f:7c:d4:94:1f:ab:ac:ca:
         aa:18:23:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:03:58 2026 by rpki-client