Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/87f6d04d-4567-3af7-b282-55a08bf36a7b.roa
File:                     87f6d04d-4567-3af7-b282-55a08bf36a7b.roa (raw, json)
Hash identifier:          AGqFO3yFwb0uhX53kVsNZY1f0IVvi/JkV+3YdqD7JjQ=
Subject key identifier:   E5:43:0E:BF:61:5B:2A:E2:05:EC:71:55:0F:11:45:B7:CC:23:51:82
Certificate issuer:       /CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4
Certificate serial:       010D0C9F4328584EE38C91E84D99C357C6938080
Authority key identifier: EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/87f6d04d-4567-3af7-b282-55a08bf36a7b.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     63025
IP address blocks:        2602:f8ea:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:91:e8:4d:99:c3:57:c6:93:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=a9c4275e-aa5e-46b7-ad10-74397ff038a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:a0:fb:ff:69:0c:f3:d8:80:a8:89:f0:ce:
                    11:c8:30:7b:f7:2d:13:19:af:1e:ce:f1:23:ed:ef:
                    a0:a9:41:29:9c:32:a7:11:df:8c:b7:87:f5:72:4f:
                    ea:e6:ff:fe:6c:20:ff:2d:a8:d7:c6:55:38:20:f2:
                    ca:ad:fe:45:cb:a3:f9:e5:fe:7e:79:25:6e:45:fc:
                    c5:99:59:9c:0e:95:cd:fa:03:96:5c:f5:b8:76:14:
                    2b:d6:24:7f:61:1e:b9:89:01:07:87:ed:32:3b:67:
                    b5:6b:d7:bc:6e:b6:c2:a8:f7:e0:b6:79:64:67:57:
                    3f:71:a8:ee:eb:0d:90:a4:94:34:ed:e0:da:1e:68:
                    b4:0e:35:ca:04:de:09:72:54:94:f6:4d:c4:06:67:
                    e5:ac:1c:48:8d:3a:ef:d6:70:19:e4:69:a4:85:34:
                    60:6d:d6:80:a2:a3:7b:d1:c5:b4:a8:2e:5e:f8:ce:
                    79:40:be:1e:d4:b9:6f:3c:6b:a0:26:88:d2:ff:82:
                    7c:a7:a8:19:49:f9:7b:3c:27:c0:0e:4d:5b:6d:3a:
                    c3:1f:86:67:91:44:0e:30:8e:1f:ed:dc:88:58:04:
                    e2:b9:51:05:85:ac:9c:2f:9f:d4:67:8a:e1:55:84:
                    c3:24:f5:b4:26:8c:42:c6:40:bb:93:8a:f4:f4:94:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:0E:BF:61:5B:2A:E2:05:EC:71:55:0F:11:45:B7:CC:23:51:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/87f6d04d-4567-3af7-b282-55a08bf36a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ea:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:8b:38:1c:50:5e:70:a8:75:0d:28:c4:ae:e6:fd:0a:29:
         fc:7d:82:f8:45:e5:ab:24:a9:17:a8:6a:ca:f1:31:d9:71:4f:
         f4:f8:36:be:8c:36:07:3e:27:ac:16:f9:b1:8e:79:60:92:90:
         d3:bc:ad:89:d8:a4:bd:ed:d5:60:3c:10:1b:a8:2e:71:8e:5c:
         86:d4:fc:9d:3a:92:79:16:f4:f2:f0:00:d5:59:6a:8e:ec:39:
         b0:6b:7c:c2:f9:5d:4a:f1:4f:7c:65:cb:86:b2:bf:23:51:0d:
         e4:b2:0f:1f:2d:8b:2d:73:c0:a0:5e:27:41:c3:e9:d3:d4:fc:
         44:d8:08:be:ac:17:d7:ef:14:7c:8c:8e:63:1e:59:26:e7:dc:
         48:1d:20:97:c4:ec:bc:8f:c5:0a:fe:01:3f:ae:b4:49:53:8b:
         49:50:00:a3:62:5d:02:32:06:81:81:83:ad:4d:81:5f:79:8e:
         1e:11:51:2f:21:98:69:47:12:b5:48:e7:69:1a:a2:78:1f:be:
         d4:a7:6f:c9:7c:ec:66:31:05:5e:da:f8:7b:16:e5:59:86:2b:
         73:24:ad:0f:06:b3:f2:da:b8:f3:6f:e9:b8:c1:44:9b:6e:4a:
         86:ad:1c:b3:ff:cc:ae:cd:45:13:b4:3e:91:1a:0e:a8:a1:1c:
         1b:bc:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:09:18 2026 by rpki-client