Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/0171cd60-0e42-34d9-ace3-f8951f31be1f.roa
File:                     0171cd60-0e42-34d9-ace3-f8951f31be1f.roa (raw, json)
Hash identifier:          tTcBuXmxsQRgiW7GMpyO05OxStSQekL0CVT+PATDzBc=
Subject key identifier:   62:5A:C4:A8:FF:9B:AC:77:66:FE:07:FB:3A:06:B6:84:47:CA:FA:77
Certificate issuer:       /CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8
Certificate serial:       010D0C9F4328584EDB2C97B23CB44A5C15B7F4C0
Authority key identifier: D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/0171cd60-0e42-34d9-ace3-f8951f31be1f.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     398031
IP address blocks:        2620:77:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:97:b2:3c:b4:4a:5c:15:b7:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=d3cba14d-f12c-43d9-b467-83594c93c6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:1f:c2:f5:08:6c:b1:82:11:5e:52:a7:db:
                    91:b6:d1:2e:55:af:8f:6b:9f:ef:ad:41:d0:91:b5:
                    c6:96:df:2d:8e:3c:99:d7:64:ad:4e:4c:5a:56:a3:
                    d9:52:85:f5:d7:10:e4:79:ca:cd:05:fc:48:52:a9:
                    23:4a:e3:d7:6d:c1:b6:03:a0:26:b7:bc:ac:2f:ca:
                    d3:b5:2a:ce:80:33:22:39:14:79:68:00:d1:74:4a:
                    c9:d7:79:d5:98:31:68:41:43:be:46:53:03:06:3b:
                    eb:0b:ad:04:25:fd:49:09:e2:e5:ab:39:be:dc:6f:
                    64:80:f1:e9:d3:13:49:11:05:7c:73:55:9d:75:00:
                    f8:c5:16:c5:f1:ec:9b:f2:40:a8:5d:09:b0:ab:b6:
                    03:9c:0c:57:8c:37:c9:b7:01:df:6c:5b:9e:32:1d:
                    a9:b3:3d:a2:5f:86:7d:d6:d9:ce:68:23:81:81:21:
                    47:41:ed:33:2e:7c:5a:8d:82:2f:17:10:fb:be:8e:
                    10:c4:2f:61:60:94:b8:7d:bd:ed:3d:81:73:a2:c3:
                    88:94:76:a6:c9:3b:d5:c0:52:09:64:bd:1e:75:b3:
                    75:9d:67:94:1f:15:26:a0:2e:31:bb:4c:ac:69:3b:
                    bf:ee:50:f2:1e:48:75:d6:9e:4d:1e:ff:cd:3b:d4:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:C4:A8:FF:9B:AC:77:66:FE:07:FB:3A:06:B6:84:47:CA:FA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/0171cd60-0e42-34d9-ace3-f8951f31be1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl

            X509v3 Authority Key Identifier:
                keyid:D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:77:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:12:e1:4a:73:f7:6b:1d:79:bf:bf:fb:73:0f:b7:f1:6a:
         3f:2a:4c:a2:19:25:6d:94:eb:c2:57:88:16:20:bf:3b:73:c6:
         01:c6:ac:c4:18:6b:2d:60:9c:be:07:a2:cd:bd:f2:99:d7:e5:
         31:e4:c6:56:11:75:9f:4c:e9:64:b0:11:a6:69:84:bb:e5:0f:
         2a:92:98:01:1c:fb:60:9d:b7:ad:6a:d1:2d:2e:ac:ef:f7:f2:
         da:a1:dd:4b:bb:a2:74:ed:a7:3d:94:9c:a1:70:a4:9f:e5:88:
         d3:b1:60:4f:44:a7:b2:dc:4f:6b:4b:f1:68:d1:84:41:80:5e:
         09:de:d8:bb:9d:70:b7:3b:fe:02:18:4f:09:b8:90:0c:85:64:
         39:be:7e:fa:8c:1f:9d:9a:16:5f:cf:12:14:8f:46:21:85:32:
         4e:04:93:ea:ab:8f:ec:d2:3e:ea:ac:c1:bd:26:9a:77:c9:ae:
         bb:9e:60:f2:75:fe:07:75:01:7a:3b:f0:b0:cd:02:de:2b:93:
         d2:b3:2f:ef:0c:d4:d4:ea:22:5d:34:82:31:83:5a:9d:b6:b5:
         b3:29:53:10:e6:db:8c:42:2a:22:2d:6a:5b:94:8d:b4:a1:c3:
         5a:6c:4b:83:88:eb:57:93:d3:e8:6a:5b:5b:99:65:dc:7c:9a:
         ca:50:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:13:55 2026 by rpki-client