Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
File:                     a113376a-69b4-3631-b2a6-f93305a0611a.roa (raw, json)
Hash identifier:          8dyMxyTw2iq/GQCnNBGTUZYrmjw5t9Xrg5KCSCOa+Io=
Subject key identifier:   C7:6E:A4:34:76:FB:CC:7B:10:63:14:36:F4:2B:60:97:A3:3E:A2:A0
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584EE0C2193D7A46CDAA3CC0F880
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     206434
IP address blocks:        2602:f7a7:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:19:3d:7a:46:cd:aa:3c:c0:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=db3d8300-dc09-457f-9b90-f1b9851decbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:2c:b4:c4:a3:e8:fb:07:45:a8:ca:7c:f6:
                    d8:b3:90:2c:e2:e3:64:cd:b1:98:34:f5:1c:60:36:
                    94:3e:ec:10:7f:91:07:78:99:3c:dd:e0:d4:6c:95:
                    6b:69:73:2f:d0:da:95:68:21:48:c8:c8:61:cc:59:
                    2b:4d:86:a5:06:fb:cb:ba:ef:f5:93:71:1d:9a:d5:
                    a9:80:0a:a5:ed:e2:4e:a2:a3:bb:d7:92:3a:87:78:
                    7e:b8:4c:ab:0a:5b:61:dd:d0:fc:f3:e1:90:a0:56:
                    76:73:08:83:80:bc:a8:6f:0d:b0:fc:5b:4b:e2:35:
                    4e:f2:67:9e:06:4a:8e:11:56:54:d4:11:dd:07:32:
                    45:aa:c0:3c:84:a3:ca:86:ec:58:13:46:b4:85:26:
                    d3:53:58:40:16:05:65:dd:ed:80:45:2b:0c:06:93:
                    05:b0:1e:d2:70:36:ac:70:38:92:a4:f8:e1:2c:20:
                    aa:b1:e1:d6:5d:26:9b:24:5d:38:3c:c5:3a:2e:7b:
                    c7:e1:7f:72:c0:2e:e0:ee:19:88:1d:34:66:96:05:
                    72:68:8c:0a:b2:e6:e9:10:2c:d9:cc:d6:df:a3:9d:
                    e8:c8:4f:ca:8f:43:a3:e0:1d:19:0b:a1:2e:36:c9:
                    b5:cf:9b:98:1a:44:4e:c6:1f:61:c1:fc:c0:a6:4c:
                    5b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:A4:34:76:FB:CC:7B:10:63:14:36:F4:2B:60:97:A3:3E:A2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:a5:19:36:af:af:cd:19:8c:a2:53:1c:e6:23:73:0e:36:
         42:b4:da:35:6d:14:06:4b:c7:3c:9d:c6:ae:9f:3b:8e:0b:4c:
         76:36:47:d1:ea:95:c5:a9:27:a2:25:47:1b:1e:5a:e3:c0:55:
         48:7f:be:84:47:74:fc:3d:2f:9c:e8:69:c0:2d:c7:2a:72:34:
         0e:3a:c8:b8:a5:76:b0:07:4c:03:6d:e3:11:2b:48:bc:f1:c0:
         1e:2a:8e:0d:45:1a:36:ca:1f:f1:ee:cd:62:3d:5a:85:dd:6b:
         e0:d5:f9:60:62:e4:d9:d1:9d:46:d3:cd:7b:0f:50:da:6e:c1:
         fb:78:73:f4:3f:bf:83:9f:a7:ca:25:a6:e0:6a:24:f3:40:0e:
         b9:18:c7:1e:8f:dd:f1:64:4d:ee:f5:12:73:ab:f2:fc:a8:7c:
         f3:78:6b:0c:65:b0:c9:bf:1b:d8:76:c9:8f:67:57:67:aa:49:
         a2:0d:59:3e:90:b7:24:81:de:9e:40:c7:8c:63:1b:2b:95:c8:
         46:95:5b:80:92:63:d1:fc:f9:99:58:0a:8e:8b:b1:a8:d8:2b:
         23:e4:8b:68:e2:e7:28:d5:7f:35:0f:68:32:da:e5:75:ec:2a:
         19:6c:b2:d0:68:22:68:f9:f9:45:5a:56:96:e0:ee:ef:20:16:
         fa:67:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:08 2026 by rpki-client