Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/165e6164-f111-3f7a-863d-553a951fa411.roa
File:                     165e6164-f111-3f7a-863d-553a951fa411.roa (raw, json)
Hash identifier:          Ipkuypa+s8iq6qqNmBUscEFf2BLthNG5Oyot1WA1zqk=
Subject key identifier:   61:68:D2:2F:CE:57:6B:46:03:EB:78:14:AC:5B:6F:5E:95:BF:57:06
Certificate issuer:       /CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
Certificate serial:       010D0C9F4328584EB14C3FF1624CA0D4DE174980
Authority key identifier: 67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/165e6164-f111-3f7a-863d-553a951fa411.roa
Signing time:             Sat 01 Aug 2026 13:00:12 +0000
ROA not before:           Sat 01 Aug 2026 13:00:12 +0000
ROA not after:            Fri 30 Oct 2026 13:00:12 +0000
asID:                     393941
IP address blocks:        2620:11f:d000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b1:4c:3f:f1:62:4c:a0:d4:de:17:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
        Validity
            Not Before: Aug  1 13:00:12 2026 GMT
            Not After : Oct 30 13:00:12 2026 GMT
        Subject: CN=c3b39e60-1660-47b1-862a-43b3acd99fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:40:62:c6:cc:0f:c4:7b:55:39:3d:8e:95:
                    29:0f:4e:0a:a3:25:05:09:61:8b:fb:c7:91:b8:96:
                    d2:28:f0:12:79:dd:78:ad:75:c6:ea:bd:92:20:24:
                    66:5e:af:b3:43:a3:b5:5e:07:c1:d8:ea:56:ed:e1:
                    d3:a8:49:07:63:10:40:d7:b1:26:2a:dd:fb:b9:71:
                    61:f4:3d:45:b2:bb:3b:a9:1b:5b:6b:d1:55:39:bd:
                    b8:a9:25:a2:99:cf:c7:0c:6d:27:5c:63:ee:87:e4:
                    64:35:71:df:96:d7:ba:03:33:67:e4:be:fb:b3:a2:
                    1f:c0:31:17:97:6e:86:56:c3:30:47:ba:ec:1b:f1:
                    48:91:29:64:0f:02:3f:99:25:de:70:2a:b0:c0:f4:
                    3f:a8:1f:38:0e:a0:6c:98:f6:9b:74:5d:da:c3:2b:
                    e0:81:4e:53:97:48:bc:65:af:68:63:8d:80:5a:29:
                    ac:cc:13:30:01:5e:c1:62:99:2d:59:8a:59:2c:9d:
                    a1:ca:83:5c:23:37:12:04:36:8a:3d:e8:97:67:db:
                    44:52:5e:0f:7f:8f:9c:65:8d:15:a9:cf:89:eb:d3:
                    60:e1:e5:95:bd:a0:c6:a1:98:b3:b9:b5:2d:e7:1e:
                    35:36:e7:f3:43:d2:9b:8a:a2:3f:87:61:0d:db:ff:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:D2:2F:CE:57:6B:46:03:EB:78:14:AC:5B:6F:5E:95:BF:57:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/165e6164-f111-3f7a-863d-553a951fa411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl

            X509v3 Authority Key Identifier:
                keyid:67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:39:12:7f:70:f5:11:99:99:6c:ee:9c:6c:3b:76:47:de:e7:
         53:16:33:05:45:8d:a3:c6:9e:e7:b5:31:a8:16:6a:88:21:bf:
         84:d4:e7:65:3b:8b:2b:28:e2:cb:a7:0e:ff:ee:91:4e:0e:81:
         b4:9e:b3:6b:f6:37:a4:8a:fd:55:4a:87:d2:3f:d7:2d:6a:30:
         b8:d9:fd:1f:bf:d5:48:95:ab:fb:40:ab:c5:98:e1:03:3a:cb:
         62:d7:9b:60:82:6e:3e:6b:a6:06:39:24:0f:eb:f4:6a:40:14:
         8a:f8:42:50:33:48:4b:de:a5:bb:15:af:82:f0:e2:45:d1:50:
         c8:34:f3:3e:45:28:00:a2:60:49:48:1e:b0:fc:72:31:18:2f:
         db:b8:64:a0:ab:e7:b9:12:11:fa:7e:95:b7:76:f5:30:a4:5e:
         b8:3f:ba:12:15:d5:c5:2b:dd:2a:2f:74:54:77:66:cd:11:b5:
         50:11:2c:28:59:f1:ee:8f:e8:83:a7:ee:04:c5:7a:19:3e:f8:
         d1:d7:55:e0:1a:d5:de:d7:fc:34:46:4f:01:38:e3:ee:b9:48:
         19:05:1b:e8:aa:67:de:dd:d1:f4:7a:a8:31:f0:4d:c2:79:d7:
         41:95:82:3c:91:8b:35:ea:eb:ae:39:68:79:97:31:d4:5f:f1:
         23:7f:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:49:43 2026 by rpki-client