Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8b2e445b-8765-31b3-b75e-898434dda7ed.roa
File:                     8b2e445b-8765-31b3-b75e-898434dda7ed.roa (raw, json)
Hash identifier:          8JAl7pQBYU7Z0JVYN9+082X58RtAiPhKCK2Mm34SuUM=
Subject key identifier:   F9:96:ED:DF:51:2F:29:E6:75:68:C6:59:1E:A9:B9:ED:86:7B:B5:3D
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584ED864866BF93C7D6C80D89B20
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8b2e445b-8765-31b3-b75e-898434dda7ed.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     395092
IP address blocks:        2607:a680:21::/48 maxlen: 48
                          2607:a680:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:86:6b:f9:3c:7d:6c:80:d8:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3d2d3f25-042b-4ee3-b1b6-03f52bf1e822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:fa:6b:59:10:81:0a:df:14:37:62:5e:4e:
                    6a:b7:6a:e2:5f:3d:b5:b2:83:91:fe:9a:2e:db:54:
                    7e:f5:82:38:60:c4:1a:6e:75:c1:62:98:1a:5d:4a:
                    78:87:16:e4:45:a1:95:69:1d:9e:67:15:27:22:94:
                    00:24:f8:a5:ba:44:74:82:eb:06:47:f5:08:af:8c:
                    92:81:fa:ab:b3:3d:95:e3:a7:a0:39:8d:6a:1d:fc:
                    58:2a:51:c4:4f:0f:05:d4:87:e8:96:56:95:00:0b:
                    5e:74:14:26:ed:c4:e1:41:a9:d5:06:70:12:7f:bc:
                    5a:1f:d2:61:bd:fd:b3:57:a4:28:4f:78:8c:74:2d:
                    55:3d:ee:20:84:a5:41:69:41:d4:b3:71:3a:e3:3c:
                    f7:51:11:68:06:bd:c5:db:b6:a2:a8:9a:c5:ac:54:
                    a9:ad:11:3a:a4:15:6a:76:61:17:a8:2c:0f:35:41:
                    7f:fe:ec:60:d5:69:9e:01:81:c2:1d:b7:6e:5f:45:
                    e1:a7:ec:c9:2a:39:9d:06:8c:2f:e6:69:98:7d:b4:
                    d5:d7:93:19:00:c6:18:7e:b0:ee:5a:0f:a2:1f:83:
                    0b:ba:42:78:84:94:3b:45:74:7d:3c:bf:8b:56:fb:
                    4a:5e:5e:1f:a8:00:14:8b:bb:9d:56:8d:31:8e:0e:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:96:ED:DF:51:2F:29:E6:75:68:C6:59:1E:A9:B9:ED:86:7B:B5:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8b2e445b-8765-31b3-b75e-898434dda7ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a680:21::-2607:a680:22:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:87:91:92:08:ee:05:9f:3a:4a:15:5e:c0:38:c0:47:12:bd:
         b8:11:b9:fb:db:0f:72:f6:0d:69:10:34:1b:fa:56:4e:92:81:
         cf:f7:ef:7d:43:2f:a0:a8:24:dc:a8:d0:0a:89:5d:28:72:38:
         17:79:e5:63:c5:ec:70:b5:71:29:8b:9c:21:9b:51:f7:db:11:
         36:b0:51:71:ca:9b:f2:6a:62:c8:13:65:94:b7:eb:bd:77:7a:
         dd:d7:3f:70:ee:74:6c:88:4b:0a:84:89:8b:49:e3:c4:89:dd:
         5c:4b:38:33:84:76:60:b2:8a:48:33:65:26:e4:8c:05:5a:1f:
         73:06:4c:83:f1:50:fe:4b:56:ed:5f:37:de:1f:03:e5:09:a9:
         09:59:97:6a:40:18:de:c3:84:b9:82:28:2b:1e:9c:7e:68:84:
         e0:3a:a9:9e:98:a8:96:81:0a:90:6c:38:b4:69:73:eb:a4:de:
         aa:8d:69:0c:1d:e0:54:d1:38:d9:13:41:af:5d:5f:9e:c0:10:
         65:ce:f1:15:35:13:8e:ac:7a:47:4a:ba:6d:df:68:a9:50:16:
         e2:95:f7:71:d7:bc:1b:6f:7b:26:61:9c:dc:21:10:72:05:1e:
         5b:d4:ac:8b:b0:31:08:24:8c:90:65:7f:3c:f9:e4:f5:64:e0:
         66:12:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:44:25 2026 by rpki-client