Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a2328d6d-dc98-3180-b744-6ba5123d887a.roa
File:                     a2328d6d-dc98-3180-b744-6ba5123d887a.roa (raw, json)
Hash identifier:          qw0qaxhxLIuQ1s2bXSZ8iV64AdzNZqRtyNpx3RINouY=
Subject key identifier:   5B:EC:30:A0:C0:5E:AA:C8:BA:9B:5D:A6:43:7F:91:E9:3B:83:71:FE
Certificate issuer:       /CN=a4f253af-de59-456e-9354-4078d22e8677
Certificate serial:       010D0C9F4328584EB57C4657253EA6CEE67090C0
Authority key identifier: 81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a2328d6d-dc98-3180-b744-6ba5123d887a.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396982
IP address blocks:        2607:4240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:46:57:25:3e:a6:ce:e6:70:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f253af-de59-456e-9354-4078d22e8677
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=b5285c1e-9690-47a5-899b-1d31bce9ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:b6:46:e9:33:2a:14:e6:55:68:1d:ff:25:
                    4b:40:8a:a8:e7:0c:d8:2a:db:e5:90:7d:77:c1:bd:
                    a4:fd:18:50:16:00:63:67:6e:bf:d7:ea:7c:32:53:
                    ba:fd:7a:58:15:21:85:d5:ce:ae:0b:42:07:68:ab:
                    bc:6e:4e:0c:08:7f:a3:e3:99:f3:27:d4:80:67:f4:
                    10:31:55:4e:b5:14:b6:3e:e6:06:7a:54:9c:6d:07:
                    87:07:14:cf:87:f6:2f:25:d3:4b:8a:e9:b0:9f:e5:
                    69:5e:98:90:07:f8:3a:c4:77:28:6c:52:51:24:e0:
                    8c:9e:dc:21:f4:37:0f:a9:4f:95:a1:e2:d4:c5:e3:
                    20:67:41:50:e6:2d:d1:b6:33:5d:f9:74:5c:c2:cd:
                    e3:a8:e1:f7:84:30:2d:ee:7c:6d:99:50:3f:31:c6:
                    d5:18:bb:08:f1:2f:f8:54:54:66:7c:c1:c8:1b:82:
                    0f:12:a8:6a:2b:fa:59:9f:50:9c:cb:e3:0c:25:65:
                    8d:0a:39:d0:41:29:54:12:81:af:a5:ef:69:1a:a3:
                    00:c0:aa:24:3f:43:3f:4e:ae:ea:da:4d:2c:8c:8c:
                    e9:f1:9a:22:18:c6:12:52:89:73:01:bd:4a:49:34:
                    8a:63:a2:a8:6e:30:f5:e2:bf:39:a7:a7:c9:70:c7:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:30:A0:C0:5E:AA:C8:BA:9B:5D:A6:43:7F:91:E9:3B:83:71:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a2328d6d-dc98-3180-b744-6ba5123d887a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl

            X509v3 Authority Key Identifier:
                keyid:81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4240::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:e0:74:c4:5d:a8:ed:c9:2f:2b:8b:6e:2b:17:22:02:47:
         65:28:5d:8e:d9:ed:55:3b:67:a3:6c:b6:fe:a7:c2:aa:5e:c5:
         52:23:20:25:17:0f:aa:34:43:e6:d9:49:e0:3f:74:fa:ca:33:
         ae:8f:e0:a9:14:58:32:8e:9c:d5:49:a2:1e:a3:73:cd:a1:5b:
         6e:c3:e7:70:31:0d:18:d1:42:a7:fa:42:e6:d6:84:72:c9:40:
         ca:f1:f2:b4:3c:45:55:fe:11:a1:a2:d9:d3:d4:f2:6e:1d:32:
         82:74:0f:7e:54:d6:29:06:38:86:42:9f:78:4d:50:f4:01:e9:
         be:11:31:e3:85:e2:0e:01:4e:19:e2:d1:8c:df:0a:2e:a6:c2:
         ac:db:c7:fa:a3:f0:c0:d6:f4:2e:35:69:c5:93:eb:5d:5a:bf:
         09:df:b8:c9:63:0d:34:ca:32:00:a9:a2:fc:40:1b:cd:4f:56:
         96:fa:09:18:78:3b:17:60:f4:76:e8:cc:d0:9f:98:99:4b:26:
         cb:9a:15:fc:df:85:61:4f:a7:8b:98:e3:c2:59:ff:98:26:7d:
         68:b7:38:af:9f:6a:f8:43:4f:4e:72:83:88:4a:0e:0f:0b:37:
         90:05:4f:e1:94:de:9e:45:d3:6c:09:7a:76:0b:f6:7b:13:2d:
         4d:7b:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:15:44 2026 by rpki-client