Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/52831a0c-29bb-307a-a992-f3c12342fc26.roa
File:                     52831a0c-29bb-307a-a992-f3c12342fc26.roa (raw, json)
Hash identifier:          PiMjNVhfDO6dUCXcCMEAGnA2HlNxP3MFpxOWY2SsSj8=
Subject key identifier:   C3:8F:03:44:03:5D:C0:7A:7E:22:11:D4:D0:6B:F2:FE:66:DA:B8:29
Certificate issuer:       /CN=97b601f7-3a05-408c-a0f4-e54bf926b696
Certificate serial:       010D0C9F4328584F0D6CE94E9D11BB970BE4843C
Authority key identifier: CE:44:E5:87:17:80:18:EA:25:A2:2C:A5:FA:82:56:C4:AB:CB:1C:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/52831a0c-29bb-307a-a992-f3c12342fc26.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     17095
IP address blocks:        2620:c6:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/97b601f7-3a05-408c-a0f4-e54bf926b696.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/97b601f7-3a05-408c-a0f4-e54bf926b696.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e9:4e:9d:11:bb:97:0b:e4:84:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b601f7-3a05-408c-a0f4-e54bf926b696
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=b29bbff2-d544-4a0a-a8d1-6cb4229657a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:07:e2:56:ee:50:d4:f6:68:91:8b:b0:88:
                    8b:15:5d:f2:17:f0:0c:61:16:45:5b:9a:9b:f4:56:
                    3b:fb:79:0b:16:92:82:4a:36:8b:45:96:04:a3:02:
                    5b:f3:c0:c2:63:e5:f6:3b:60:73:9e:53:b5:55:67:
                    10:19:a3:80:f4:cb:f3:d9:ef:18:31:df:68:5e:67:
                    6e:7e:b1:c6:8c:be:98:9a:6d:bf:2f:34:66:54:e6:
                    ed:8b:08:a6:1c:89:d8:59:30:35:c8:99:e6:ad:89:
                    f3:39:02:b4:5d:43:fe:2d:26:3f:c2:22:42:e4:dc:
                    cf:99:fb:79:1e:79:41:34:ee:2a:e3:69:ef:41:09:
                    22:f2:4f:2c:c7:25:b2:5b:13:76:44:ab:3b:a7:29:
                    ab:55:b3:e9:a0:e8:ee:d0:10:79:04:68:bb:58:64:
                    87:b2:c1:05:51:d4:47:db:4e:21:96:44:75:b0:60:
                    37:53:fd:be:b0:7f:8c:74:65:a8:47:3b:93:35:fb:
                    d3:07:e8:b2:da:ee:46:d8:61:3b:50:cd:62:bc:17:
                    33:ec:66:d3:c7:f9:21:4e:77:c8:ba:f5:14:b5:c5:
                    81:ca:5f:bc:57:2a:05:67:65:a9:ab:6c:a3:0a:aa:
                    d8:f8:04:b6:af:eb:3d:22:af:22:fa:74:6e:c3:0e:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8F:03:44:03:5D:C0:7A:7E:22:11:D4:D0:6B:F2:FE:66:DA:B8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/52831a0c-29bb-307a-a992-f3c12342fc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/97b601f7-3a05-408c-a0f4-e54bf926b696.crl

            X509v3 Authority Key Identifier:
                keyid:CE:44:E5:87:17:80:18:EA:25:A2:2C:A5:FA:82:56:C4:AB:CB:1C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c6:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:a7:ff:a3:4d:85:a5:75:49:3d:97:73:13:65:05:91:2f:
         91:f9:2d:31:3b:53:ec:67:7d:25:c5:50:57:ab:06:3f:11:4a:
         4c:24:c9:66:8e:53:b8:9d:ce:52:1e:83:e9:23:73:27:cf:1d:
         bb:75:a4:27:20:62:bc:02:13:76:3c:ae:75:97:fc:17:90:6a:
         42:fb:94:71:74:e0:da:4d:82:21:a7:85:a8:06:5e:a5:e7:b8:
         64:62:88:f3:a7:c3:63:1a:70:5c:93:09:2b:db:7e:15:02:2c:
         81:4d:d5:de:a3:b5:29:31:01:c3:74:2b:fa:d2:e1:e4:71:4a:
         eb:36:4d:38:fe:ac:84:21:37:f4:ec:cd:e0:bb:1f:bf:54:5f:
         6b:e1:0c:d3:85:e3:90:12:44:d8:20:33:92:07:17:da:1a:c4:
         1c:07:78:25:9f:3a:58:ff:2d:34:16:b0:b7:b6:cb:b5:e7:56:
         a5:59:9c:b2:be:02:6b:e4:b5:eb:5a:fc:db:69:0b:51:29:fb:
         47:20:b1:4c:c7:ee:45:5e:df:f7:ee:66:52:b6:5f:f7:bd:b1:
         99:1c:12:dc:c2:05:1e:8e:32:42:77:9e:7c:19:60:98:b4:f2:
         6f:45:f9:45:ec:c5:80:b8:cb:d4:75:ae:43:69:c4:78:34:8d:
         d8:67:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:37:17 2026 by rpki-client