Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/d5950a16-5acf-3d75-ac57-e9035989892d.roa
File:                     d5950a16-5acf-3d75-ac57-e9035989892d.roa (raw, json)
Hash identifier:          /b0EiShbWrj98Qs8gYh9vGoF7mW0moOlspuBDFJQILA=
Subject key identifier:   13:19:05:4C:FE:BE:1C:4A:E7:62:D7:71:60:AE:BE:81:0D:B6:FA:5F
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584EE38CA0C6F50B34C057AF6B00
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/d5950a16-5acf-3d75-ac57-e9035989892d.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        2620:a0:200e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a0:c6:f5:0b:34:c0:57:af:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=c8f0f73a-b361-480f-b375-fc40976d9a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:f3:47:af:0d:be:36:f1:ec:d1:53:19:d5:
                    c6:ed:c7:e2:25:08:93:0e:e9:27:91:9d:be:fd:10:
                    bd:e1:46:56:79:17:91:ea:f5:f3:ed:fe:43:7b:eb:
                    ac:ba:57:e6:c5:70:ad:6d:ed:ea:4c:19:1a:82:0b:
                    e6:ac:86:28:b7:f9:cd:1d:4c:44:f3:29:3f:36:7c:
                    0e:95:ac:89:94:da:52:4a:13:36:ed:f7:cf:13:4d:
                    6e:d3:34:68:61:14:dc:3b:0f:c4:ac:74:da:aa:91:
                    b9:83:43:08:d7:6f:d7:99:9f:5d:d9:f5:83:7d:80:
                    28:7b:7c:0a:50:9f:8f:1d:3b:31:2d:47:09:d8:a4:
                    38:cc:91:fb:f4:26:c3:76:60:f9:98:2f:ec:57:d4:
                    16:11:3e:d5:9e:90:b5:20:b4:22:73:97:33:e1:ae:
                    7d:07:54:86:a2:a2:7a:03:f4:ab:57:d9:25:37:cd:
                    34:0f:6b:60:36:17:f5:66:19:be:46:84:0f:14:68:
                    0e:c4:fc:6e:1b:dd:78:38:2c:98:f5:19:f6:f4:95:
                    1b:aa:7f:4e:e9:29:b0:05:d9:31:f1:6f:47:e6:f8:
                    69:69:f7:9a:ae:99:06:64:bd:bb:70:73:b8:ba:c1:
                    4d:f0:71:9a:cf:55:c0:f8:e1:98:72:32:82:5a:7a:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:19:05:4C:FE:BE:1C:4A:E7:62:D7:71:60:AE:BE:81:0D:B6:FA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/d5950a16-5acf-3d75-ac57-e9035989892d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:87:e0:77:ea:ce:95:20:a9:c3:a8:a6:03:df:b9:b4:d8:
         7a:1c:92:7f:84:c0:27:6b:19:ee:be:21:7e:aa:b8:42:32:a5:
         40:3b:64:4b:96:ea:6d:0a:f8:86:8b:76:c4:2e:13:24:90:14:
         34:5c:40:b6:98:b5:f1:42:72:79:59:ac:7b:30:e2:f8:12:2a:
         91:5d:1c:22:c7:7d:21:c3:14:e3:0e:e4:ae:21:9f:c5:d3:01:
         fa:b9:7b:5a:75:b0:23:1f:06:b7:e1:50:b4:fc:86:0a:39:a7:
         ca:dc:86:85:b6:f4:b8:0e:83:74:93:b0:d8:f2:85:55:d2:1f:
         42:45:91:d2:28:75:bc:41:d0:c5:fd:7d:f6:6e:20:a8:48:d5:
         be:07:dd:61:8c:81:6a:d8:f9:67:df:59:31:fe:a7:d0:03:f3:
         88:85:60:16:6a:3a:f3:7a:d7:18:ba:cd:40:8d:c3:56:6a:05:
         c9:02:58:01:2c:d3:8f:4e:1d:e3:01:cd:6e:13:6a:5e:cc:2d:
         2b:76:1e:94:13:9f:1f:6b:c1:f2:3a:15:2c:8b:76:37:b7:5f:
         7f:b5:c9:10:c2:28:c3:44:dd:b6:77:f0:fb:d0:4b:be:96:b4:
         c2:d7:a1:00:73:37:11:3a:f6:00:d3:66:30:15:fc:fd:39:3f:
         bc:a0:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:57 2026 by rpki-client