Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa
File:                     9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa (raw, json)
Hash identifier:          ZGu4KUM3whWvqw3VTDJbmZskuDVardd6MxYGx1Jv8/4=
Subject key identifier:   AE:78:11:62:52:21:64:7E:AD:7C:CC:23:CA:13:23:DA:FD:5E:5E:86
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584ECBD1D475A788279F25236F70
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     139267
IP address blocks:        2602:fe12::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d4:75:a7:88:27:9f:25:23:6f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=86bb001a-7627-4615-83b0-2f5da081e2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:7b:53:8d:b2:c7:3a:67:bd:18:cf:8c:c8:
                    ba:33:0d:db:d6:65:8c:0c:7e:21:7a:22:71:ad:72:
                    ed:fe:6c:11:ff:74:3b:cf:95:de:c5:b9:94:95:f6:
                    83:96:c3:fb:79:49:a4:2a:34:23:ee:16:09:dd:c9:
                    32:d6:4e:38:56:97:00:76:66:83:15:1c:2c:26:b9:
                    3f:8f:cf:e4:46:23:5b:87:54:d7:d4:53:5b:c0:ec:
                    5b:01:41:d6:f4:cd:12:e8:e8:1b:22:9d:fe:d7:85:
                    75:8d:35:8e:67:9c:dc:bf:f8:31:6c:01:d4:76:9a:
                    73:6f:4b:6e:b4:cd:96:87:c6:51:00:c3:c6:d8:07:
                    06:ef:dc:4b:40:59:07:92:19:4e:27:cb:15:1d:b1:
                    92:c6:b3:57:89:d1:d5:36:d9:5c:de:e0:34:94:63:
                    65:24:7b:21:20:0a:f7:41:cd:90:b6:2f:a3:12:02:
                    58:75:42:e6:67:48:50:72:86:39:9b:4d:16:2b:79:
                    bc:88:d3:b7:c3:9c:40:16:01:2d:a6:09:57:44:39:
                    7f:9e:03:2d:5d:d7:0a:bb:c1:bc:08:69:e7:9e:f3:
                    cd:4f:18:df:0a:ee:4a:a7:24:c2:7c:51:1f:f6:3b:
                    10:12:67:b6:cf:61:af:a4:bb:a7:89:73:7f:a9:90:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:78:11:62:52:21:64:7E:AD:7C:CC:23:CA:13:23:DA:FD:5E:5E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9ac5c3b2-2a0f-3c25-ac04-714701f8e873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe12::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:2f:2c:65:c7:03:ed:da:6b:65:4a:7b:49:68:e8:2b:dd:
         2d:77:24:56:8f:a8:a2:24:4d:11:f9:36:09:c3:fe:4b:6e:62:
         71:8b:ce:44:48:7d:d2:04:7f:38:0d:f3:f2:7a:eb:f7:92:18:
         ab:b2:39:06:f9:1e:59:29:87:20:c6:00:36:15:10:89:80:8d:
         9f:7d:6a:a0:ce:1a:c7:8f:c4:27:cf:ef:a6:28:a9:ca:d9:50:
         69:f2:47:38:7b:95:63:31:9a:ca:c2:ed:4e:64:90:71:7b:9b:
         fe:66:22:8b:be:90:80:c7:30:d0:2d:2d:ac:5d:96:1f:2a:36:
         83:d6:88:09:e8:39:a8:f4:33:55:93:b8:35:4a:37:18:e8:59:
         6b:f6:bb:e7:40:c6:2c:ec:e9:13:b1:fb:4a:ac:08:7e:59:d1:
         c8:8b:33:f9:ac:ac:fb:3d:b5:bc:ed:9b:fd:ab:5f:9c:2f:c9:
         d1:ca:6e:c4:e9:f7:02:a1:42:05:8f:9d:e6:62:e5:bf:35:fc:
         ba:b4:11:f9:75:00:71:f5:80:82:bd:32:e6:fa:9e:0d:fe:c8:
         f3:81:15:53:cd:ec:e8:00:94:4c:74:f9:ad:45:ea:78:b8:b9:
         14:cf:88:e3:7c:ca:28:fc:45:bf:5c:1e:62:56:ef:02:73:f8:
         38:26:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:07 2026 by rpki-client