Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/20a714de-d4f4-352a-8724-b13f2c17da5a.roa
File:                     20a714de-d4f4-352a-8724-b13f2c17da5a.roa (raw, json)
Hash identifier:          2Of07zIiqtvL+cgwb50W7Non1mz3SIiQMkA8jUQPY9s=
Subject key identifier:   E3:4B:E4:85:7A:1B:0B:E6:12:01:D2:71:AD:52:F4:AF:A1:16:93:52
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584EA7882C14F639CBFA0D08BC40
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/20a714de-d4f4-352a-8724-b13f2c17da5a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:2c:14:f6:39:cb:fa:0d:08:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df43c6e5-94bc-44f0-a19f-8cb8fd771a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:81:4f:03:86:02:66:0a:36:92:5a:d4:54:
                    95:76:21:65:77:91:7a:26:57:aa:d3:e7:be:d1:09:
                    1a:00:1b:9a:ba:19:de:b3:f1:59:b7:f1:08:04:78:
                    ea:f5:00:07:6b:82:0e:1c:58:9f:6c:a0:3c:e4:a2:
                    02:60:fb:64:b0:86:87:a4:0c:26:61:7a:25:8f:cf:
                    10:be:f1:fc:56:e3:c0:15:fa:cc:ba:cf:49:4e:86:
                    07:a7:00:4e:9f:40:f2:06:ae:91:ad:5f:b7:a5:44:
                    05:ae:27:7d:f2:7b:bb:35:80:5f:02:78:72:43:7c:
                    01:86:92:6a:16:a8:c2:65:a9:63:9a:90:eb:3d:76:
                    8c:a4:da:62:91:6a:dd:d8:1c:df:af:e0:4a:26:af:
                    01:67:d7:f0:84:21:41:4d:97:11:87:f2:3e:12:1b:
                    61:37:1b:e3:b9:28:60:40:c9:c3:7e:2c:2e:d4:d5:
                    99:d5:16:a1:b5:d7:26:7f:ea:af:73:28:76:6f:00:
                    e2:47:b2:86:9c:bb:35:d7:ae:e5:7b:1f:b8:49:b8:
                    0e:ea:f4:02:eb:a2:cf:57:b1:0f:45:a9:b0:fc:37:
                    05:d1:fa:ca:a8:54:52:ed:24:b6:a8:b2:fe:0c:7a:
                    19:12:e2:35:23:aa:fe:72:af:6c:38:6b:ad:78:3c:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4B:E4:85:7A:1B:0B:E6:12:01:D2:71:AD:52:F4:AF:A1:16:93:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/20a714de-d4f4-352a-8724-b13f2c17da5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef08::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:14:c1:6b:04:53:ce:c9:c4:0b:96:1a:1f:77:6b:2e:2e:6a:
         93:d5:27:71:4b:fc:ae:9e:fb:63:05:ab:20:07:72:7b:42:80:
         38:ea:1d:19:2f:3b:33:de:8d:a2:f0:a5:8f:c0:20:db:4f:9f:
         48:0c:0e:a8:6e:f6:49:55:ec:3a:95:b5:29:c4:53:92:48:13:
         4c:41:df:7b:70:ff:30:8c:b6:9e:1c:c0:85:c1:e2:9d:eb:92:
         3e:d4:50:24:7f:83:52:e6:ad:36:a8:15:db:e4:3f:dc:b3:5d:
         75:3a:0b:33:7a:5a:22:ff:86:2e:b4:49:0a:62:fc:f6:35:d1:
         88:a4:ab:7c:d9:dd:f1:ce:1d:b3:32:82:92:93:0b:0b:cc:2b:
         9f:a0:e7:d2:26:24:64:5e:ed:84:01:79:a0:08:98:9f:c9:eb:
         f4:79:80:94:ba:f0:56:9f:a4:64:53:56:9a:e8:b0:1e:e5:2c:
         63:b7:45:83:e6:12:89:fe:56:00:95:2f:40:94:e2:11:1e:c0:
         55:8b:b6:4d:2d:b0:6f:7d:3e:d6:4f:60:2b:52:82:3a:12:7a:
         cb:66:33:d5:c9:85:6d:e8:22:6f:6e:9f:5b:fc:76:35:11:39:
         bd:d4:3e:d5:2d:d9:1d:07:f9:f7:ae:5b:35:1b:cb:f1:59:22:
         cf:db:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:57:22 2026 by rpki-client