Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa
File:                     656ee11d-0c87-386d-a956-31548ccbdf3a.roa (raw, json)
Hash identifier:          YSlfotem1OmjJA9UZOjvPY9Rw8SMr61o8m+BIVgdj4c=
Subject key identifier:   55:12:10:03:C9:B1:8B:22:D2:4A:97:F6:C0:C8:EE:87:3A:78:8B:D1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74FDF38ACC58D8B5136C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:4f:df:38:ac:c5:8d:8b:51:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=69e94129-6c44-4b90-af7d-2e7ea7bf1ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:33:89:07:f3:0f:6d:2a:90:c2:93:70:04:3f:
                    15:bf:56:ff:d0:28:f2:3e:6c:1a:fd:b9:73:f3:d7:
                    c4:35:2e:58:b4:3d:9b:f4:ef:f7:f7:4f:52:70:a0:
                    aa:4c:a8:78:69:cf:dd:54:0b:dc:03:e4:d4:d2:aa:
                    95:a9:e3:a1:ff:2c:06:da:a8:4a:db:5e:8b:a0:78:
                    df:86:dc:9d:66:7e:c8:01:0b:97:fd:f4:40:89:d3:
                    a6:e2:f8:9a:f1:22:c4:2b:a3:58:f5:d9:02:c5:c5:
                    1a:a5:a4:e3:04:7c:bb:2b:d5:71:19:81:e8:40:9f:
                    9e:b9:98:dd:36:45:b0:f3:bf:c3:65:29:22:7b:56:
                    7e:11:1f:8d:71:75:77:4f:e0:b5:f8:d9:4c:15:1b:
                    f7:ca:73:1a:c7:b2:2b:27:09:a1:c4:9b:ce:3b:ec:
                    f7:20:28:6c:1d:d5:fc:73:5e:25:94:59:2c:90:ed:
                    79:43:fa:86:92:b2:2a:1c:55:9d:61:e4:a3:c8:72:
                    fc:4a:1a:b1:cd:da:a2:82:be:a3:31:66:d0:55:4a:
                    ae:94:65:5a:94:76:77:13:1c:96:a4:ac:a3:96:6f:
                    a8:21:96:dd:51:aa:17:f0:34:3e:fa:91:76:60:5d:
                    91:42:9d:0c:86:9d:55:d4:4d:cc:3c:f7:33:24:14:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:10:03:C9:B1:8B:22:D2:4A:97:F6:C0:C8:EE:87:3A:78:8B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:0b:60:9a:7e:a5:58:82:c7:f4:fb:b6:ac:47:b8:8d:d0:
         bb:5a:05:ff:69:33:57:7b:30:1a:88:25:91:f6:18:2f:3b:d8:
         26:32:1e:18:fe:9a:cd:8c:e6:09:6f:2b:33:3f:8c:c6:38:04:
         af:9e:73:d1:bd:06:7c:55:4f:30:80:74:15:a6:76:da:09:9c:
         a2:ae:e1:5f:c3:5c:c3:57:db:27:fb:67:c9:bc:1d:f0:87:50:
         f1:7d:b6:41:43:4c:98:d8:02:f8:86:22:49:e3:a4:d7:bf:dc:
         f2:0c:7d:7a:9a:b1:92:d8:a2:db:00:e2:95:d1:32:a2:34:68:
         ac:07:d6:bc:3d:24:b5:dd:11:0a:bc:75:b7:68:f4:f7:3e:e0:
         e9:0d:ed:0a:bf:b1:8d:92:1c:73:bd:ca:a1:d9:30:db:ab:6e:
         43:92:39:6f:b7:31:ae:d6:07:9b:d3:de:2f:3d:e7:4f:ca:08:
         4f:66:9d:d9:13:5f:5e:27:43:4d:3f:ad:1c:f3:b8:31:3b:7e:
         79:32:ec:c6:fe:e5:46:b0:bc:ee:b5:03:bc:ff:3d:b0:56:47:
         22:eb:8c:b1:d6:38:95:47:fb:aa:db:3c:ec:7d:60:b7:c7:8c:
         54:ff:d3:fa:9c:bc:de:5f:46:fb:0a:ef:9e:75:1c:54:61:5e:
         9a:11:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:26:33 2026 by rpki-client