Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e704f8f8-132e-3c34-8a49-60bf56d84659.roa
File:                     e704f8f8-132e-3c34-8a49-60bf56d84659.roa (raw, json)
Hash identifier:          qyx6Cc9Gt5tlQfBWRFlxHztOt5Gec8Jzi95e98OMqRI=
Subject key identifier:   52:9B:86:D4:A9:12:88:1C:27:E5:4B:38:F0:51:B0:B0:09:18:B6:C5
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584EC4D7153B6E5A1C31A07F0660
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e704f8f8-132e-3c34-8a49-60bf56d84659.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     63150
IP address blocks:        2602:f988:a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:15:3b:6e:5a:1c:31:a0:7f:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=4f71dc80-8ca5-449d-9694-9844ff5a1104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:13:e9:ea:10:69:6a:69:10:8c:d8:f8:69:
                    45:ce:be:40:5a:b1:32:4b:12:1a:b1:93:80:7d:08:
                    90:f3:55:46:13:f3:e2:89:a7:0d:2d:30:39:38:ad:
                    33:d0:18:bf:00:22:aa:fb:00:39:57:a2:a4:ab:42:
                    b9:da:7e:5e:55:f1:4a:61:a0:45:db:bf:d3:8d:a7:
                    21:ad:50:74:a0:df:52:e6:a8:c6:65:b9:ba:3b:53:
                    b1:a2:51:32:4a:cc:11:3a:f8:70:34:d5:94:2c:55:
                    09:ea:85:83:ca:43:53:ea:e5:db:f5:2e:97:22:0f:
                    65:48:04:b7:85:1e:d4:c1:28:2a:16:43:7c:9a:17:
                    00:12:9b:17:a0:2b:0c:ac:63:1b:40:76:88:79:bf:
                    ea:50:0e:b3:64:83:e1:96:53:07:15:c4:8f:89:52:
                    c3:bb:15:14:55:dc:93:3d:3c:38:b1:08:5c:87:63:
                    fc:fc:b3:fa:28:48:c9:fb:36:ba:4d:f2:43:18:d0:
                    3f:21:94:13:f3:0e:d8:ab:97:97:a4:56:44:0f:ad:
                    08:42:7d:45:da:92:89:a8:04:06:d2:ab:10:4a:94:
                    ef:e1:7b:b4:c4:24:e6:ee:68:b8:59:2c:b7:49:1d:
                    54:03:25:37:b7:dd:a5:91:f9:22:4e:4d:f4:1e:1b:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:86:D4:A9:12:88:1C:27:E5:4B:38:F0:51:B0:B0:09:18:B6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e704f8f8-132e-3c34-8a49-60bf56d84659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5f:70:19:e2:fe:ec:7f:cf:62:e9:78:75:60:57:0d:35:ee:
         62:dc:60:1f:00:68:d1:10:1f:b6:8b:df:8d:a8:3c:2e:64:ea:
         e2:b4:80:f3:56:f2:81:de:49:96:bb:1d:83:53:39:2b:22:c4:
         f1:a1:92:22:bb:9d:03:8c:3c:b6:31:de:f5:c5:76:55:5a:11:
         38:55:38:c5:c6:39:85:e3:9a:3e:dd:cb:7b:13:30:b0:2f:b2:
         83:49:48:c5:d6:08:e9:ae:1a:af:19:28:5d:15:4b:0e:6c:bc:
         17:51:33:74:4c:7d:aa:47:99:69:40:d2:4e:f6:e1:bb:51:b7:
         ba:fb:44:12:80:df:6e:64:22:36:71:51:7d:ed:ca:df:96:e5:
         80:02:0a:6c:90:bc:70:ba:90:8b:ed:2e:3b:9d:0c:8d:82:64:
         21:40:6d:3b:66:e1:ff:b0:83:84:95:b8:9c:44:cc:fc:a6:a1:
         42:02:34:29:0b:67:9e:69:82:5e:38:54:5e:3f:b9:55:5e:59:
         b7:ac:0b:43:4c:50:6d:c9:ec:ee:5e:b6:80:5f:30:c0:3f:11:
         f9:eb:b4:8a:42:7a:55:90:61:e5:1a:6f:4d:c7:c4:6c:5a:4d:
         c7:cb:1a:71:1c:69:66:98:a9:0c:db:1a:49:c4:a4:38:30:e7:
         fe:4e:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:18 2026 by rpki-client