Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/30d67eb1-78ed-3728-b94d-b57f6e6df245.roa
File:                     30d67eb1-78ed-3728-b94d-b57f6e6df245.roa (raw, json)
Hash identifier:          B/USXgbFtrAQ+lyxRGl+EH2NKwaPKshXrq0WU4Lwt/4=
Subject key identifier:   ED:D0:A9:A0:72:58:0D:E2:5D:B9:7D:CD:78:FE:60:3A:E4:C3:FD:3C
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584F82ADA9C36FED00A9D9DA7900
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/30d67eb1-78ed-3728-b94d-b57f6e6df245.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     216123
IP address blocks:        2602:f7a7:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a9:c3:6f:ed:00:a9:d9:da:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=c2204083-9e97-4e3e-bd68-8b507257f531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:16:ea:4c:5e:6d:7a:4d:a6:19:1d:00:72:
                    a6:1f:f0:1a:6b:e3:8c:33:27:9d:2d:8e:10:bd:f7:
                    43:90:2e:58:43:97:fb:90:88:79:a4:99:0a:a1:e1:
                    59:77:61:b9:af:5e:1e:82:b2:2f:a0:e6:8b:2d:92:
                    4f:6a:19:cd:60:94:7d:13:72:cc:33:01:1b:8a:a5:
                    ae:07:31:e4:9f:d6:82:80:a6:43:e9:b8:0b:72:7d:
                    56:30:b9:53:cd:28:5b:a9:60:73:b6:c8:fb:61:c6:
                    2a:8b:40:1e:bf:0c:9a:b6:b0:79:1c:d8:27:c9:ed:
                    99:7f:4d:e1:c3:5b:0a:86:93:43:da:35:7c:cc:08:
                    07:5d:65:b3:02:90:71:3b:69:a9:d2:aa:8b:67:d7:
                    36:9e:c8:d9:02:56:fb:08:c2:d6:fb:23:02:7e:bf:
                    a8:e4:a7:a8:8c:57:0a:e1:bf:78:af:0f:3d:f0:de:
                    c9:ff:86:81:9b:8a:13:6f:e4:1f:c0:c5:de:e6:a7:
                    06:ae:be:3b:fd:92:b4:52:10:86:d8:f0:c7:04:7c:
                    05:cc:b4:ca:fe:a0:0a:ff:d6:2b:3c:24:0d:4d:bf:
                    52:e7:a9:02:ea:47:cb:57:22:30:1e:7f:33:41:66:
                    c7:4c:1a:b2:81:40:c2:12:a8:1d:c8:b1:73:b6:f5:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D0:A9:A0:72:58:0D:E2:5D:B9:7D:CD:78:FE:60:3A:E4:C3:FD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/30d67eb1-78ed-3728-b94d-b57f6e6df245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2b:94:72:b5:b3:47:51:bb:1c:e7:4a:13:ac:dd:f3:61:e8:
         9a:63:22:08:0f:d0:b4:fd:79:e1:00:22:cb:c3:77:7b:d4:d7:
         66:0b:16:a1:be:5d:31:e3:da:f5:d2:35:4b:41:a0:be:1d:a7:
         9f:5b:86:32:75:42:3b:4c:ca:1f:20:01:ff:f4:1d:02:5e:6a:
         91:c6:30:d8:cf:6c:f3:76:7d:3f:5f:25:7e:f9:17:e8:62:44:
         ae:8d:e0:6a:6f:7a:6c:14:39:4a:b0:4c:de:eb:8e:2c:ce:89:
         59:9c:68:0a:e0:9f:ab:80:2b:c8:42:05:1e:9f:03:b4:4d:94:
         3c:af:0c:17:36:ba:03:e0:27:82:bf:44:24:6e:4c:85:89:31:
         81:87:e8:29:bb:66:e2:d6:1c:20:72:1c:97:e9:ce:96:2f:6d:
         bf:a4:f7:ca:84:62:44:0f:8e:d9:9a:07:45:f6:63:3a:ae:90:
         04:12:9c:31:26:ea:80:c5:bc:8a:4f:c8:de:75:12:11:61:d7:
         82:fa:d0:b9:b6:ca:d4:99:a3:a7:18:88:fd:3a:f5:40:e7:e6:
         2d:82:b6:31:be:0e:a2:fa:6b:13:bc:61:1d:4c:35:52:1f:4f:
         e8:cc:de:9d:e4:be:25:22:9e:a4:1b:27:dc:52:fe:f7:04:cf:
         02:24:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:17:18 2026 by rpki-client