Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/1acecf7b-b6b2-3e0e-a3b0-d46e404a7118.roa
File:                     1acecf7b-b6b2-3e0e-a3b0-d46e404a7118.roa (raw, json)
Hash identifier:          2ImxkzKSxD79NJDJ4xSVlsYnWxisSQv4Yn3e8+U6owM=
Subject key identifier:   BC:1E:DE:CA:B7:BF:45:11:12:AF:73:C4:E8:90:1B:60:1A:BA:91:48
Certificate issuer:       /CN=2c02bf4a-5763-4b76-899c-563f0f4ef065
Certificate serial:       010D0C9F4328584EEA874823AF14628766A9BC80
Authority key identifier: 97:B6:60:1E:34:E7:62:3E:8E:B8:16:B6:7F:AF:9C:57:54:37:9E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/1acecf7b-b6b2-3e0e-a3b0-d46e404a7118.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     21921
IP address blocks:        2605:61c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/2c02bf4a-5763-4b76-899c-563f0f4ef065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/2c02bf4a-5763-4b76-899c-563f0f4ef065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:48:23:af:14:62:87:66:a9:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c02bf4a-5763-4b76-899c-563f0f4ef065
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=ba0e140f-33b8-4038-a4fa-66664c658a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:2b:7f:da:2c:99:55:0a:4c:28:4a:f9:a8:
                    9f:a6:8e:60:da:de:0b:d0:9b:3c:fa:cd:fc:40:a6:
                    ba:73:a6:d3:00:5f:57:c7:38:84:fe:69:8b:fb:ad:
                    9f:15:ce:c2:41:36:83:8c:c0:87:fd:53:90:53:c6:
                    ba:50:56:7b:15:8f:c3:dc:59:c0:10:28:8c:04:3e:
                    b9:57:dc:47:a7:8f:af:00:f0:8d:cf:5d:3b:7a:ef:
                    1b:00:0b:11:81:39:28:12:32:53:1d:51:54:b1:90:
                    40:06:89:b8:21:5d:4e:78:6d:06:10:38:68:3c:1a:
                    7e:14:6b:ad:93:ea:ef:a5:45:9f:9a:27:6e:de:69:
                    f2:65:02:3b:a5:13:87:e2:a2:ae:2e:fe:45:2f:b5:
                    1b:5b:68:44:7a:ad:92:c4:19:33:2d:7f:ff:52:28:
                    00:61:38:26:79:4c:c2:3a:4c:1b:ac:df:68:12:50:
                    06:32:14:ba:bd:36:29:b5:a3:93:43:55:ee:ad:94:
                    1b:b0:22:b8:3c:3b:e9:bc:9e:88:26:04:66:f4:9c:
                    30:88:0c:59:15:6e:8f:43:c3:d6:fa:c3:d1:d9:5b:
                    de:ca:bf:cb:84:ba:3d:5a:33:92:d4:26:7d:5d:92:
                    51:ca:09:e8:9f:a3:40:ac:b3:c1:40:d5:83:5b:7e:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:DE:CA:B7:BF:45:11:12:AF:73:C4:E8:90:1B:60:1A:BA:91:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/1acecf7b-b6b2-3e0e-a3b0-d46e404a7118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065/2c02bf4a-5763-4b76-899c-563f0f4ef065.crl

            X509v3 Authority Key Identifier:
                keyid:97:B6:60:1E:34:E7:62:3E:8E:B8:16:B6:7F:AF:9C:57:54:37:9E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2c02bf4a-5763-4b76-899c-563f0f4ef065.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:61c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:44:cb:51:12:1d:58:d8:81:4e:96:bb:f6:59:b4:0b:36:25:
         a4:8c:11:69:f1:38:99:f4:ef:e5:1f:c9:92:5f:7a:33:ae:6e:
         b6:8c:d7:dd:7f:27:d4:c1:03:ac:35:22:ba:60:f8:91:fd:23:
         74:a6:3b:64:37:f7:72:c6:1b:0d:2f:f0:5e:47:25:d5:4c:56:
         c1:00:1a:4f:9a:b3:b6:fe:a3:65:ee:74:02:70:b9:a6:8a:76:
         c2:71:12:c7:c0:ba:72:92:39:e4:b0:ab:a9:d0:8a:15:71:3d:
         d4:f0:41:81:c1:e6:f8:a8:92:3e:41:8f:00:35:a8:90:20:3b:
         f9:a9:bb:2e:a1:0e:e6:50:66:4a:dd:f9:f3:56:3d:99:8e:d5:
         d8:52:a1:78:d4:97:f3:5f:8b:49:9d:da:b9:83:22:48:d8:39:
         9f:74:0f:bb:f7:a2:5b:0b:5b:3d:1a:19:77:d6:7e:15:d7:53:
         5b:ee:4b:e8:7c:47:2a:f9:63:29:63:6b:37:b3:c2:56:85:06:
         c5:fb:a6:61:cf:2b:61:a4:0c:40:65:97:d1:4f:37:88:b2:9a:
         92:a3:07:5b:8f:27:08:ce:4f:f6:be:2e:e9:6e:a1:cf:3a:07:
         56:86:87:6f:b3:44:50:a9:b8:95:64:de:d9:d9:a7:3d:26:ee:
         c6:39:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:30 2026 by rpki-client