Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/d7309432-39a1-3403-a013-e634f65cd8f0.roa
File:                     d7309432-39a1-3403-a013-e634f65cd8f0.roa (raw, json)
Hash identifier:          dj+t9kW4WQz1vwwnV7SFYAps4d9zO0l5cEWzId1va84=
Subject key identifier:   8E:C4:18:6E:66:B5:E1:D5:BD:C0:BF:2C:5F:8D:0B:4B:B8:15:7C:04
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328584EE42353776E94E949AE836280
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/d7309432-39a1-3403-a013-e634f65cd8f0.roa
Signing time:             Wed 19 Aug 2026 18:04:00 +0000
ROA not before:           Wed 19 Aug 2026 18:04:00 +0000
ROA not after:            Tue 21 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:53:77:6e:94:e9:49:ae:83:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Aug 19 18:04:00 2026 GMT
            Not After : May 21 04:00:00 2030 GMT
        Subject: CN=927588dd-5d4f-40f7-b469-cfc38d36aad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:ff:7b:be:81:89:61:fd:a0:78:57:18:24:
                    f5:67:cf:44:1a:39:ba:80:f5:1c:8d:b7:b6:eb:84:
                    c6:de:9d:76:ed:ce:43:8f:64:2c:af:79:8f:26:c5:
                    41:86:aa:c7:05:38:1c:c7:16:26:f5:22:e7:5b:de:
                    01:51:dd:18:e9:64:23:6f:b9:d6:5c:28:81:8f:18:
                    6e:8c:75:9a:69:40:ae:85:d8:94:72:7c:2c:23:3b:
                    75:24:a4:cd:47:2d:37:91:d7:eb:7b:2a:eb:d1:d4:
                    96:3f:80:0a:38:4d:30:6a:b9:d2:ba:c3:96:10:8b:
                    a5:5c:5d:e7:12:dc:bf:fe:fc:a0:55:9c:f9:77:dc:
                    cb:32:fd:90:8a:4e:5e:79:82:9d:16:4a:43:55:e1:
                    41:39:ce:8a:e2:2c:b2:68:4d:5a:0a:e7:00:e4:ec:
                    b0:01:77:89:3e:7d:5d:c6:49:91:6d:71:61:71:09:
                    a0:31:3e:2c:e3:1f:d4:fd:14:89:5e:2a:31:9f:58:
                    1a:8f:29:3b:ad:42:3c:e2:41:ad:90:1d:33:23:dc:
                    21:a6:4b:61:f6:fb:79:bb:ab:a2:53:b8:5a:8c:7c:
                    96:80:4b:fc:fa:76:9f:c8:07:4c:7d:cb:23:83:dc:
                    81:46:14:5c:9f:13:c6:18:55:07:1b:b7:7f:6d:32:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C4:18:6E:66:B5:E1:D5:BD:C0:BF:2C:5F:8D:0B:4B:B8:15:7C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/d7309432-39a1-3403-a013-e634f65cd8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:da:b3:07:83:f9:3c:d3:23:12:e5:9b:22:87:47:62:c4:ce:
         38:d7:0f:c4:b5:00:d8:5e:7f:e2:7b:66:01:fc:23:df:67:05:
         66:86:25:e0:80:eb:bb:1b:8d:fc:ed:27:b5:f0:1b:72:b4:69:
         eb:c2:01:1b:71:36:16:57:e9:e2:56:19:a5:3e:ad:fb:7e:1c:
         2e:aa:35:5d:69:54:a2:a9:93:9b:64:c1:ef:97:95:bd:ed:d4:
         db:a8:b0:46:9b:db:ee:79:cc:4f:15:49:e7:1c:4d:3c:20:b8:
         5e:70:23:9e:6e:99:3f:ed:6c:1b:d6:d7:91:24:da:31:86:79:
         49:de:fc:34:60:b0:84:17:fa:45:ab:03:b8:cf:82:79:8b:95:
         6d:f8:18:5a:9a:17:49:25:9c:ae:2b:e9:54:dc:27:c5:e5:a3:
         d8:c3:a7:26:dc:8f:4f:f1:97:4b:c9:cc:6c:30:bb:88:b2:c8:
         8f:c8:7a:95:a4:75:4b:13:db:75:59:5c:b3:34:db:ba:d6:fa:
         bd:28:a9:7a:5f:db:f6:fb:1e:bd:7a:1b:db:fe:32:55:7e:c4:
         27:a2:05:dc:38:7e:9b:5d:ef:70:55:5d:b5:fc:b6:c3:1f:a7:
         fa:14:8b:74:be:35:41:38:84:9b:f7:26:9f:03:da:a3:2a:3a:
         74:b0:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:40:18 2026 by rpki-client