Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa
File:                     a3c68675-a98f-39ec-a89f-2b77a3df4901.roa (raw, json)
Hash identifier:          MrUvVf+fgyrpxzPujnI+6x5FDJebriPiMKzmpYeCpb0=
Subject key identifier:   0E:74:30:C1:92:7E:F5:2E:33:51:E2:2E:37:CE:03:9D:F7:D0:23:B4
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584EC0A759FF8FC7AE984B507000
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     36549
IP address blocks:        2604:1780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:59:ff:8f:c7:ae:98:4b:50:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=80c89d62-c023-4cae-ba9c-4aac5d7a372d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d3:bc:08:b4:dd:ad:64:90:8e:31:95:0b:90:
                    74:fe:0c:d2:10:d5:4b:f1:9e:26:dc:88:2b:54:94:
                    14:b8:71:d2:c9:fd:de:95:cc:37:db:b9:d1:87:ee:
                    11:43:ad:20:a5:0a:34:3b:ca:b8:38:c7:23:d0:48:
                    8d:aa:53:ce:ee:97:86:8c:a0:15:f8:c2:15:53:fb:
                    13:ae:9f:85:4c:37:9a:72:8d:46:c0:67:ca:8c:23:
                    cb:d7:f1:66:0c:77:28:95:08:77:3e:db:e1:12:0f:
                    67:97:fa:b6:ec:a2:ad:0e:09:65:f2:33:c9:df:60:
                    07:f4:30:25:cf:29:21:77:f2:89:58:5b:40:23:cb:
                    3a:b4:41:af:2f:e6:cf:20:e9:09:89:a5:dc:e4:4e:
                    6b:75:12:cf:e1:02:ef:c4:88:f9:e2:97:12:40:12:
                    f3:87:7c:ab:a1:ee:a3:f8:d4:95:ad:8d:97:e8:43:
                    19:38:bf:51:51:37:e7:b6:35:da:be:8e:ec:7d:c3:
                    69:dd:62:b4:97:b6:a8:b8:73:61:8c:3e:03:4a:28:
                    5b:d9:de:2a:1c:a5:cc:16:cd:b5:f3:22:5b:01:f4:
                    2a:fe:a5:70:94:7e:71:ca:94:d0:d5:50:cf:bc:9a:
                    47:33:8a:9b:e0:cc:b3:9f:d8:9e:b4:24:01:2d:af:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:30:C1:92:7E:F5:2E:33:51:E2:2E:37:CE:03:9D:F7:D0:23:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:cf:36:ab:45:98:ad:90:71:1b:5c:d4:9d:13:1a:d5:99:
         88:30:f8:b8:11:2f:cb:4a:c3:ee:c7:e4:0a:7d:ee:92:74:71:
         59:86:46:fd:71:84:f5:5c:78:d7:33:dd:83:de:59:c3:95:6d:
         c5:98:77:01:a1:65:b9:7a:54:b4:4e:a1:9c:a2:22:b3:0c:91:
         9d:ac:9e:c5:aa:d1:72:5b:1d:e2:ab:53:24:4e:a0:cb:e9:19:
         b0:86:86:67:d2:ad:3e:65:c9:10:87:7f:a5:3e:57:63:84:db:
         71:12:75:3c:ae:0c:b4:8c:86:06:8f:9b:6a:1e:3e:95:47:d4:
         66:f7:d4:25:68:38:7b:38:39:4d:29:d2:12:92:9f:1c:46:34:
         5e:31:ab:22:f0:5d:b7:ec:26:c1:9a:5c:54:56:bd:81:65:31:
         a0:4c:7e:c8:48:d3:ad:7d:a9:3a:f0:cf:91:15:38:e3:ce:08:
         22:fb:b3:a8:09:5f:8d:bd:a6:21:1b:c4:e0:56:4f:12:83:50:
         22:cb:9c:68:85:9f:b4:2d:ac:49:3d:53:4d:75:7c:bc:d1:dc:
         a3:0e:61:6b:e6:21:b1:cd:a2:cb:d7:09:47:01:fb:fd:8c:02:
         31:bd:07:92:ee:b0:5a:c1:c8:b7:b7:40:a9:b9:25:b5:34:e0:
         d4:27:05:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:05:45 2026 by rpki-client