Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa
File:                     5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa (raw, json)
Hash identifier:          pOZTAoYbvjo7vQvMAxaFafPZ4vJ5D3XmUh88vCi12wU=
Subject key identifier:   2D:0B:AA:8E:5B:5E:6A:60:6B:CA:AD:C0:C6:86:4D:7C:4E:C6:9D:F9
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F4328584EBB11B27793CBD905A0A8CA80
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     25846
IP address blocks:        2602:f947::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b2:77:93:cb:d9:05:a0:a8:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=a7d6d5f6-eb17-4f3a-b19e-bd15438b5326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:5e:d5:2c:fc:73:e3:b6:1a:5d:76:59:73:
                    7f:11:64:77:20:db:8d:c7:6d:8c:cd:18:af:3a:af:
                    11:68:73:1f:d3:82:f7:97:02:0c:64:0d:84:b4:4d:
                    bf:6c:fe:73:34:56:a0:5c:6a:08:47:ab:fd:a6:bd:
                    9a:ef:51:5c:61:62:93:ad:93:da:a2:27:35:b2:71:
                    35:a8:7e:41:48:46:d7:90:e8:14:51:c7:2b:fd:dd:
                    74:4b:3e:84:fe:b1:bf:b9:d1:b7:26:a3:ae:43:67:
                    d5:9b:0d:f4:07:f4:ff:75:2c:b1:2e:1c:66:b5:e6:
                    b5:37:9b:07:3a:00:1c:8f:4c:02:5c:cd:e6:cb:d2:
                    a9:dd:b4:fb:91:74:d5:0c:92:a5:45:d0:8a:1e:69:
                    a1:29:a2:3a:34:c1:1f:80:eb:a7:ba:fa:95:d5:1f:
                    68:7c:fb:e7:0f:af:65:ea:45:43:dd:7b:4d:af:2f:
                    5c:b7:75:b2:8b:16:d7:a9:da:c9:0b:93:bb:81:ce:
                    09:5b:03:ac:91:63:7a:da:e6:41:70:f9:39:6b:03:
                    bd:b4:22:09:45:f4:a4:b4:91:ba:ef:37:61:73:be:
                    98:26:65:84:27:a9:fd:5a:fd:66:eb:d2:2f:d0:e9:
                    b7:96:c2:71:11:2d:8d:1d:89:4b:6b:c2:c8:b5:19:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:AA:8E:5B:5E:6A:60:6B:CA:AD:C0:C6:86:4D:7C:4E:C6:9D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f947::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:b8:a4:97:c5:2c:26:28:cb:e3:b4:c9:e9:4b:f6:b1:72:
         a3:6d:6e:67:e4:b4:09:1e:5f:78:48:55:16:09:96:6f:b6:1b:
         67:33:c4:6b:1a:4f:4b:85:3d:17:0d:b2:b7:a4:b4:5b:29:ff:
         c5:42:08:f2:86:db:a2:ce:ec:9e:3e:4b:14:a2:6f:be:8e:03:
         ae:a6:87:6a:d6:90:b4:4f:2c:a1:82:8e:8d:3d:f8:fa:8a:04:
         df:ae:b8:fb:f0:81:f4:d5:39:cd:b2:7d:4b:4e:10:f6:0e:ad:
         84:8a:96:d0:4c:b7:65:4f:f1:fa:2f:6e:08:6b:67:c6:8f:43:
         be:68:ad:e8:e4:67:a1:97:1e:f1:1a:57:24:6f:99:b8:5b:8d:
         f2:33:02:b4:d2:f5:5c:64:cf:1d:f7:ba:dd:ec:f3:05:82:ac:
         36:4b:11:b0:23:3b:58:25:cd:2a:62:98:5d:2a:0d:14:3c:e9:
         0b:99:77:42:40:6c:5f:0c:d8:ee:43:09:86:08:72:30:4b:a7:
         5d:01:67:d3:c8:1e:81:19:54:2e:cc:a5:24:08:46:9f:b5:fe:
         a2:59:7a:51:b6:30:fb:f7:73:f0:ac:47:ac:7c:1a:a8:b0:07:
         19:14:1a:6d:45:4e:aa:f3:c6:9e:46:29:bc:85:c7:ca:7a:c1:
         14:55:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:40:47 2026 by rpki-client