Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b/a9a5727a-7bef-37cd-a2dd-7176c65fbe43.roa
File:                     a9a5727a-7bef-37cd-a2dd-7176c65fbe43.roa (raw, json)
Hash identifier:          av9kirtJPpBK/vwwxZNSSRThZQM2s8UtwzA20DSlZd4=
Subject key identifier:   1A:BF:68:3A:9B:4F:CF:69:A0:08:79:A1:E7:E2:87:60:4C:B2:61:EE
Certificate issuer:       /CN=f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b
Certificate serial:       010D0C9F4328584ED0C009DD37563AD9647BA880
Authority key identifier: 1C:6F:23:96:6E:78:9F:E7:CE:4B:06:78:F4:75:C4:72:B1:D0:90:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b/a9a5727a-7bef-37cd-a2dd-7176c65fbe43.roa
Signing time:             Wed 12 Aug 2026 19:23:35 +0000
ROA not before:           Wed 12 Aug 2026 19:23:35 +0000
ROA not after:            Tue 10 Nov 2026 20:23:35 +0000
asID:                     32518
IP address blocks:        2602:81c:2000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:c0:09:dd:37:56:3a:d9:64:7b:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b
        Validity
            Not Before: Aug 12 19:23:35 2026 GMT
            Not After : Nov 10 20:23:35 2026 GMT
        Subject: CN=e2c9f7ee-12ec-4334-831b-18c093a3d784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:c2:c6:32:0d:e9:55:9f:77:28:ff:69:bd:
                    5f:d4:d8:ce:11:e4:16:56:e1:2a:4d:4c:22:e8:04:
                    bf:28:10:91:4f:b7:bd:0b:9e:e6:f9:3d:2d:99:b4:
                    6a:95:d9:72:b5:9d:5e:f5:d1:8b:ec:3d:2c:9e:fa:
                    2d:dd:0b:f5:20:f8:1b:0f:82:54:50:16:f5:97:80:
                    c7:bb:74:19:79:b5:bd:83:0d:0d:07:c6:e8:b9:9d:
                    a1:36:12:18:d5:a9:5d:66:ea:f2:8f:12:32:f0:bf:
                    8f:c8:56:5e:a7:f8:02:46:ec:5f:a1:e7:4a:dc:15:
                    65:51:55:42:ff:1a:88:05:b9:37:99:86:1f:81:a9:
                    df:ac:ee:eb:17:b0:f1:37:ec:b3:20:67:9d:c5:a5:
                    1d:7d:d2:1c:9e:5d:a0:4b:d2:7e:67:df:4a:29:9e:
                    5a:f3:9c:02:dd:24:6d:5e:4f:64:7b:cf:94:ff:e8:
                    4a:17:48:ba:68:41:aa:e7:87:fe:bd:3f:a4:55:e1:
                    d3:a2:e4:d7:93:1a:a4:ed:3c:7a:bf:34:bc:f5:16:
                    15:9c:88:e5:ee:1a:22:ea:4a:55:e2:7d:eb:14:bb:
                    4a:c7:e3:e8:d2:19:9a:9a:af:29:ee:39:c2:b5:c7:
                    60:de:10:d2:a4:57:7d:63:4c:dc:77:3a:fa:6a:03:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BF:68:3A:9B:4F:CF:69:A0:08:79:A1:E7:E2:87:60:4C:B2:61:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b/a9a5727a-7bef-37cd-a2dd-7176c65fbe43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6F:23:96:6E:78:9F:E7:CE:4B:06:78:F4:75:C4:72:B1:D0:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f055c7f0-75a1-45e3-b5b7-f7253b6e7d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81c:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:41:f7:c7:1c:93:1a:ef:fa:f4:a8:98:29:b1:55:70:8d:45:
         fd:c6:c4:fc:01:62:84:dd:b9:ae:8f:26:68:cf:3e:bc:1d:17:
         64:98:5b:6e:d9:d0:d2:39:33:2d:75:c9:d8:2b:ce:29:8f:6e:
         89:b6:b0:48:2b:3d:2e:86:18:4b:bb:30:11:2f:78:43:cd:a8:
         98:f3:62:8d:cc:aa:1a:b7:17:14:c6:3e:cd:80:7f:36:b2:03:
         40:34:5d:c8:fa:ca:81:ba:2a:d7:6a:7d:be:c2:cc:14:d7:a0:
         da:9f:e5:71:73:3e:6f:8e:32:05:63:9a:26:e2:a1:4b:7c:b9:
         9a:b3:59:2b:b8:dc:c2:5d:98:13:c5:d7:27:66:d7:c0:ae:cc:
         70:58:d9:eb:87:04:d6:cf:8c:36:60:46:f8:83:69:72:c2:6d:
         db:98:e8:79:05:78:e4:4a:69:dc:7a:e2:e1:bf:a9:4a:38:7f:
         3a:84:7f:b3:43:06:94:da:d9:17:ed:80:a9:6b:7d:ef:c8:04:
         4e:3c:39:2c:7b:f8:b7:05:25:48:6b:3c:67:31:32:09:89:af:
         a0:13:86:3f:b4:6f:fb:fb:95:1c:24:97:72:4c:6b:4a:31:f5:
         24:f4:91:46:1f:e0:d1:ef:b3:e9:11:70:f3:f4:09:a4:0c:c6:
         1b:af:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:11:19 2026 by rpki-client