Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa
File:                     99c569cb-49e3-3b55-8f14-63e32d1466d6.roa (raw, json)
Hash identifier:          YZStOLp2ZkGzzX9axhVyrMobQJ9VlBpvEN7OaMGHByg=
Subject key identifier:   68:71:64:ED:FE:7E:2D:12:C7:0A:97:41:91:92:96:0D:BF:2A:8A:CC
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584EB2B1BF42D0323E5B681E1780
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     32771
IP address blocks:        2620:111:800b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bf:42:d0:32:3e:5b:68:1e:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f1c98f9c-eb38-4526-9bd0-ede86225fa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:27:35:ec:2a:04:b9:32:ea:41:c6:c6:bc:48:
                    3f:1e:ec:e6:1c:9d:0d:4b:cd:e0:84:41:4e:bc:b6:
                    54:03:49:de:72:f1:67:cc:0e:da:2e:7b:62:f7:3a:
                    30:db:b2:64:64:08:33:3f:25:6a:bc:67:a1:0f:21:
                    85:26:46:07:d3:44:b5:71:18:e7:ac:a6:8f:e3:15:
                    6e:9b:19:9c:81:e7:54:01:d2:96:78:ba:20:11:8c:
                    56:e5:ac:f4:5b:9a:5c:41:28:70:db:8b:82:f9:ae:
                    65:18:d1:2d:bc:70:1a:69:74:c0:95:b0:11:78:91:
                    55:b0:3e:db:25:19:d2:d7:7b:a2:bd:99:5f:78:4f:
                    da:59:e8:02:ca:3b:3f:ea:3b:41:79:d5:5d:07:37:
                    b6:71:06:3f:33:fc:52:4c:a1:4e:dc:28:06:f6:fa:
                    d1:15:04:aa:ef:f7:b6:72:8b:97:1f:73:a4:98:80:
                    50:ff:9f:a5:7b:7f:e5:95:70:f5:52:ae:51:2d:c9:
                    41:3e:90:57:74:90:c8:f7:e3:aa:e5:08:96:7c:dc:
                    78:61:02:6e:68:6f:fc:74:09:56:03:dc:06:4e:41:
                    ad:1e:29:05:8d:18:cc:37:5b:9d:74:ee:69:a8:86:
                    57:a5:ec:05:2b:62:ae:37:14:3e:4c:90:d4:11:92:
                    92:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:64:ED:FE:7E:2D:12:C7:0A:97:41:91:92:96:0D:BF:2A:8A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:800b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cb:59:d3:79:00:b4:db:d8:05:c8:8f:86:43:8a:7a:db:00:
         ec:4e:b9:96:2e:bd:e2:eb:66:e0:02:2b:8f:4e:55:43:c0:9b:
         85:8c:24:60:02:18:b7:db:30:39:39:5c:d3:02:e1:3b:34:ce:
         59:0e:86:0b:fd:49:d7:3d:9f:78:f2:b8:64:1c:36:45:af:4b:
         db:05:4f:71:90:49:29:d7:24:e3:bc:46:d4:0d:bd:d7:75:95:
         d1:57:05:2d:34:c2:fe:8e:3e:ce:b1:95:fd:4d:65:ea:a7:df:
         ef:f9:fc:f2:b3:9e:10:87:05:0d:8f:49:96:a7:17:b4:63:de:
         a8:54:45:88:6d:b9:a6:36:a2:d5:e0:23:28:3b:d1:d0:85:95:
         b2:aa:40:4e:e8:00:15:a4:40:d1:ab:5a:47:ab:d5:b6:2b:db:
         86:96:39:ee:35:f7:a5:20:46:1e:e0:4f:68:60:8d:94:e6:a7:
         7c:83:80:87:e6:e6:f8:9a:fe:e2:2e:29:0f:ff:5d:92:6f:be:
         13:b4:2e:b6:3e:c4:f7:b2:88:18:cb:04:31:f1:24:b6:f7:03:
         ec:a6:8c:9a:88:5f:cd:44:ce:d9:59:98:33:6f:28:c2:c7:8e:
         07:41:22:a7:5f:1f:b7:28:42:13:43:c1:7a:7a:9d:75:3a:40:
         d0:4c:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:54:48 2026 by rpki-client