Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/f98154b2-0451-38b6-bb84-cf214057b830.roa
File:                     f98154b2-0451-38b6-bb84-cf214057b830.roa (raw, json)
Hash identifier:          RdULopO1OZ6xNAxErL7ttgVOI2vPD/utTIY0pRoghjU=
Subject key identifier:   BD:E5:AC:B1:1C:C9:AD:36:04:0F:EA:C1:87:A2:21:CF:B2:07:A6:F5
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328584EE4235488A20DBBA28A799C40
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/f98154b2-0451-38b6-bb84-cf214057b830.roa
Signing time:             Wed 19 Aug 2026 18:04:00 +0000
ROA not before:           Wed 19 Aug 2026 18:04:00 +0000
ROA not after:            Tue 21 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:54:88:a2:0d:bb:a2:8a:79:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Aug 19 18:04:00 2026 GMT
            Not After : May 21 04:00:00 2030 GMT
        Subject: CN=f42a6319-f3c9-48bb-b457-956913bebf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:fd:c2:ba:92:18:87:d6:22:60:88:49:69:
                    57:2a:51:51:b2:e1:01:9c:6e:ed:22:18:3e:3b:b4:
                    a4:1d:1f:70:bf:d0:73:2f:17:08:4e:6c:a0:07:55:
                    8b:a3:6c:2e:73:fb:c1:c2:0c:61:80:8e:05:74:bd:
                    75:45:61:2d:54:d0:34:f6:8f:a3:22:b5:52:ef:15:
                    87:29:ca:0a:b2:8d:91:f2:83:15:26:fa:89:97:18:
                    b8:c4:c6:ea:f5:e1:df:6e:ba:f3:32:73:a1:53:e1:
                    26:b3:10:a5:1e:fc:81:7f:b4:d7:ba:97:6a:7c:52:
                    ce:33:0a:a8:31:24:04:d0:f1:7b:fb:d1:99:2a:bb:
                    10:07:33:8f:af:84:15:ae:51:2d:e5:fd:af:d9:f2:
                    8d:70:1a:df:d2:21:11:b3:0d:17:b2:d8:f2:cf:8f:
                    3b:25:f8:55:e4:27:39:bc:ee:0d:db:d8:8d:2f:42:
                    ba:03:6e:a1:6e:cc:8c:61:71:ca:5b:2d:bc:50:e9:
                    53:97:03:70:b5:13:6f:85:3f:fa:95:27:43:ab:d2:
                    ce:cf:80:93:4d:f5:35:9f:19:61:7c:26:f9:b6:e7:
                    8b:0c:e0:02:af:7f:6f:d3:b5:94:a4:e5:bd:fe:d1:
                    3c:04:b5:df:90:f9:64:03:b5:af:02:ce:18:34:3a:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:AC:B1:1C:C9:AD:36:04:0F:EA:C1:87:A2:21:CF:B2:07:A6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/f98154b2-0451-38b6-bb84-cf214057b830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:2d:f5:86:5e:2a:57:b0:5a:ed:08:39:e9:f8:fd:c3:e2:
         18:77:e1:c3:28:e9:8f:60:28:c4:dd:9b:5f:a4:64:fc:69:70:
         21:2f:5c:0a:83:aa:da:2e:30:f8:a7:97:49:e4:85:06:2c:2d:
         43:ae:b2:fe:3b:80:84:dd:6f:f9:92:7c:7e:96:62:94:3e:a4:
         65:8b:62:9a:56:f5:0a:ab:aa:3b:33:7b:f8:48:ea:5b:98:d2:
         df:93:c3:47:07:5d:be:af:47:36:1f:78:4a:20:ea:96:ad:d1:
         45:3d:5c:6f:4e:e6:d5:9c:f4:85:3f:57:ac:26:db:ec:92:62:
         40:14:04:46:fb:93:e0:bc:a2:4d:ad:80:a1:92:1d:24:b1:e5:
         8d:10:03:a6:42:8c:fb:ce:2e:82:7a:a8:21:e9:52:b8:f7:b1:
         65:95:da:ac:02:b1:fa:53:7e:d5:e1:7b:80:31:ef:c3:ab:ae:
         dc:73:c9:66:4a:9d:10:71:14:33:1f:ee:62:34:28:e1:e4:11:
         fa:dd:73:41:97:7a:83:2a:71:60:33:89:ac:a7:83:c7:87:97:
         1b:79:85:3c:91:fa:08:1a:1e:21:97:9e:da:94:59:51:a7:a7:
         ec:5d:52:72:55:47:97:73:df:29:47:0f:89:99:ec:ed:79:bf:
         f3:6a:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:41:43 2026 by rpki-client