Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
File:                     a113376a-69b4-3631-b2a6-f93305a0611a.roa (raw, json)
Hash identifier:          MD/RdPndXOu1h31oVbryDyMuumw0va+1iFNyylGLsgA=
Subject key identifier:   1A:C7:2F:53:2C:AD:08:66:6F:66:09:AC:B5:41:8B:B6:85:58:C2:38
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584F82ADCC27260695F8DD2F6F80
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     206434
IP address blocks:        2602:f7a7:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:cc:27:26:06:95:f8:dd:2f:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=68570946-3293-4332-ba2f-ce370af69840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:fd:04:e2:95:25:ae:92:41:44:ee:27:83:
                    51:66:85:27:14:a5:c6:2f:65:3b:7e:f6:d8:d5:98:
                    aa:e5:53:c5:85:c9:57:fc:3f:03:34:42:4c:dd:61:
                    d4:32:cc:2a:c0:a2:cf:66:26:b1:b0:07:6c:a0:3b:
                    7f:bd:37:c5:74:f4:22:1a:7a:75:58:cb:81:e3:b1:
                    0d:30:06:e3:f7:b6:ff:4f:d5:81:a2:6f:8d:fb:fd:
                    52:34:01:36:8a:53:02:8b:54:fc:1d:3a:70:3c:9d:
                    43:ad:73:ee:2a:bf:ec:44:e9:63:8b:79:3d:ab:5c:
                    73:65:3e:54:0b:60:65:c4:72:f3:29:bd:06:67:50:
                    19:6e:02:6c:39:9e:55:21:4b:ca:ff:94:fc:a3:b0:
                    bd:b9:40:71:bf:ea:99:90:a3:fa:4f:10:9f:3a:8d:
                    03:03:b0:f4:78:48:b3:c8:43:7e:81:97:a9:8b:6d:
                    16:f4:70:79:f3:b1:e8:72:cc:94:0b:a7:7a:b1:44:
                    da:78:9e:8a:4d:26:fb:22:63:dc:52:8b:ee:34:7a:
                    3d:9c:ae:bc:d9:04:9b:6d:61:cb:75:e6:a3:6b:bd:
                    d2:2d:9f:af:49:a1:f2:4d:83:3c:a9:5a:e6:d4:ee:
                    84:9e:24:f9:5b:ce:e0:d8:e3:a4:83:27:71:43:0c:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C7:2F:53:2C:AD:08:66:6F:66:09:AC:B5:41:8B:B6:85:58:C2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:38:40:7f:b6:fc:33:5d:a3:cb:77:8b:55:fc:ab:fc:58:
         4a:66:94:36:31:45:66:72:5c:ac:09:07:3a:0c:67:be:85:64:
         e0:b8:32:e0:c0:d6:88:14:7b:69:55:72:b2:83:f2:5d:ee:8d:
         52:69:20:af:cd:41:21:df:99:34:df:38:a6:74:58:df:3a:69:
         4e:3b:8a:43:ce:d1:56:6e:a3:de:1d:1f:20:bd:7c:f1:9f:d7:
         c8:7d:2f:d2:14:38:32:e3:41:11:6e:69:26:f5:05:9f:6c:3c:
         fc:a9:fe:3d:d4:03:77:27:f1:cf:c0:bb:1d:54:cc:4f:4e:c7:
         12:71:ed:2c:3d:53:20:98:43:3f:27:34:14:a9:8b:1c:f2:2c:
         10:e6:83:67:06:8a:27:4f:4c:7e:ec:c9:51:92:91:01:00:fd:
         ec:4c:e8:7d:a9:ad:22:86:7a:a3:49:ab:6d:3d:1e:f9:78:55:
         39:ff:61:f0:56:b1:7d:87:78:62:fd:30:44:d6:e5:d0:02:ca:
         b1:e7:f2:ca:53:51:cc:6d:4c:ec:01:f4:8a:6e:34:0a:14:2b:
         ca:c0:8a:37:ad:98:5b:ed:1c:22:37:3b:db:8e:34:f5:cb:30:
         83:f3:a1:52:17:f2:25:60:ed:7e:19:28:a4:1b:eb:d6:01:3e:
         62:24:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 21:13:11 2026 by rpki-client