Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa
File:                     3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa (raw, json)
Hash identifier:          SDg3+ONfa+XXet0xVKI4LDQavVdcGVrr6hlk312HqXc=
Subject key identifier:   0A:2F:33:6B:40:3B:1D:DB:8A:21:AF:7A:6A:AC:C4:03:C7:90:82:4F
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584EB2B1BF1E7381543182938494
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     32771
IP address blocks:        2620:111:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bf:1e:73:81:54:31:82:93:84:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=23e9ba84-d3f3-464d-8e23-c9e01a90af38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:0f:84:d6:14:9d:9c:27:df:b4:a1:94:4a:
                    15:eb:ab:2c:e8:a1:b0:06:af:2c:36:d2:6c:92:fd:
                    02:fa:99:e4:53:cd:9e:1c:3d:22:78:b7:d2:2d:6c:
                    e6:c4:9f:c6:d6:e4:d2:99:3b:04:42:29:dd:02:0a:
                    be:0a:24:af:6d:2f:1f:fd:4d:83:f1:61:45:24:46:
                    f3:1e:11:2b:68:c2:50:5f:d8:2e:9f:b9:98:86:af:
                    36:b9:f0:17:26:15:45:25:97:03:c3:bc:95:72:94:
                    6b:7e:89:1a:fd:16:af:29:4c:ae:36:da:d2:a2:1a:
                    e7:fd:07:d0:8d:1c:58:d2:bd:30:1e:a0:65:f8:5a:
                    fa:90:55:e2:83:07:83:af:9c:71:e0:4b:7d:16:61:
                    95:49:ae:db:2a:08:53:67:a1:2e:2d:18:b9:19:d1:
                    8e:ef:14:fb:38:49:da:c7:a6:e2:ac:93:63:c3:3b:
                    49:9e:44:be:14:a8:d9:3b:27:66:a0:39:ae:42:65:
                    8e:83:b6:b4:23:2a:85:47:5c:95:37:70:9b:6b:ca:
                    44:cd:7a:29:8e:84:59:37:57:34:c0:3a:8d:1f:e8:
                    9c:9e:03:7a:d0:2a:74:86:04:13:21:6f:90:f5:ea:
                    7e:60:2d:bc:85:e0:b1:cf:58:5f:7b:ae:de:64:9d:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2F:33:6B:40:3B:1D:DB:8A:21:AF:7A:6A:AC:C4:03:C7:90:82:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:8003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:5f:9f:e0:c5:d3:e4:6a:f0:80:55:df:3c:c7:9f:5f:11:
         d2:d7:eb:42:1f:60:16:43:c4:8a:79:67:97:39:92:d1:f5:82:
         47:a0:b9:e1:3e:8b:ea:c9:e8:1b:ac:6d:69:ed:ab:61:6d:b1:
         fd:c2:f9:c1:09:a6:cb:9a:3e:89:cb:1c:12:bf:7d:11:68:d5:
         c7:d2:9f:e5:7a:a1:36:b4:27:da:4c:05:10:cf:97:d8:15:8c:
         8c:53:e6:28:4d:f4:01:88:70:d1:e9:51:a6:4c:dd:44:59:ed:
         bd:f2:74:2c:3d:15:7d:dd:73:87:02:4f:00:84:cb:ae:c2:79:
         45:f2:9f:38:5c:bf:dc:24:ab:ae:f0:bc:2a:ab:34:44:7f:8f:
         f5:5a:84:cc:89:db:89:37:0a:1d:fe:ed:5b:7b:3e:8e:88:2f:
         32:7e:01:ab:2f:d9:77:58:86:6f:d8:62:6f:ae:a5:f7:1d:ed:
         20:a2:c9:6f:59:5c:dd:8d:7a:1d:06:39:a7:4d:2f:56:7f:73:
         e2:df:b6:bf:63:75:97:64:10:39:08:8c:b3:c3:22:5f:82:63:
         0c:69:fa:aa:b9:bb:d7:33:3e:8f:0d:93:bc:ba:be:78:20:a4:
         5e:c6:73:6d:2f:51:f5:3e:ec:1f:25:77:c4:40:a8:25:15:13:
         7d:82:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:48 2026 by rpki-client