Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa
File:                     1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa (raw, json)
Hash identifier:          RmVMrkyNLL+fZ1xSwbu4NfXP4fo+SkKM5x1e4gF+lgc=
Subject key identifier:   79:C9:F7:D3:63:6B:2F:7A:8E:EE:DF:A9:F5:F2:EB:0E:E9:33:BC:09
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F4328584EDC91F187F077B5639568B640
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2620:104:6003::/48 maxlen: 48
                          2620:104:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f1:87:f0:77:b5:63:95:68:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=6a181984-9ac2-4ed5-84ab-3a6ef1574dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:a1:76:15:20:de:f6:5c:1e:67:7e:0c:ae:
                    7d:fc:02:e4:b3:d6:9e:e4:f9:6a:1f:04:f9:b0:b7:
                    d5:b0:9e:68:db:39:10:3c:a1:33:57:57:aa:26:ce:
                    99:c7:71:95:7b:54:b3:6d:5d:6b:48:f5:56:49:ae:
                    f6:a5:c3:0a:7a:ec:eb:5c:d8:fd:7b:e8:06:37:b1:
                    f6:fe:e4:88:1d:3e:cf:aa:ff:f3:74:3c:b8:fa:e9:
                    d4:bf:7e:5a:22:15:a6:45:75:7c:76:61:ca:cb:41:
                    dc:3b:40:bb:dc:0c:d7:f5:82:98:22:a2:00:ac:f2:
                    3d:1f:5d:f5:7b:3f:42:75:ff:6b:db:29:86:60:f5:
                    2e:49:43:b1:de:8c:99:99:e7:4c:a8:42:35:c5:97:
                    ca:a9:cb:2b:e2:10:0f:b7:58:f3:ba:9d:d0:8e:ba:
                    00:69:8d:ae:4b:40:de:63:26:a7:31:e1:f2:6d:24:
                    69:78:80:20:9c:ce:73:cd:78:87:8e:b2:cd:f5:79:
                    38:96:87:13:5b:4e:f4:3a:ac:dc:33:84:5c:28:c2:
                    bb:f0:9a:b1:ab:ed:8d:9f:cc:a2:7d:3e:ed:d9:3c:
                    a4:a5:12:0e:cf:23:2c:fd:9e:b0:2a:f6:35:4b:cf:
                    60:2a:6e:65:09:23:01:1d:ab:33:1f:0f:26:d3:1e:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:F7:D3:63:6B:2F:7A:8E:EE:DF:A9:F5:F2:EB:0E:E9:33:BC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:6003::-2620:104:6004:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:b4:35:c2:5d:9c:e2:98:8f:3c:cf:b4:3f:9d:1f:f6:f5:
         9b:81:90:ba:15:ff:44:a0:eb:0a:f1:93:34:76:f9:92:d8:bc:
         bb:03:0d:4a:18:eb:cf:af:c4:6f:5d:80:c2:07:5d:8b:ba:a2:
         34:5c:f3:15:76:ee:15:14:88:b4:8a:a0:53:8d:39:60:7f:a3:
         a6:e1:a7:4f:36:f5:d6:c0:22:ff:99:79:3a:22:2b:71:14:0d:
         01:72:df:ea:e9:59:2c:14:7d:ba:29:cd:7f:2a:fd:41:b9:0c:
         ce:f7:38:01:27:24:ca:23:d5:af:e4:d9:a2:be:43:8e:fd:12:
         ab:c0:7d:92:24:1a:c3:4a:03:7b:41:b8:a4:0a:dc:2f:a1:6e:
         10:6f:bd:2b:25:b4:e0:59:eb:5f:53:0e:44:df:94:4c:09:36:
         36:2f:da:88:4d:2d:3a:25:26:a0:c5:d8:c1:d9:97:92:74:b9:
         ac:93:80:57:a5:75:34:13:7c:ff:3c:2b:a5:54:2e:5e:5d:f0:
         30:43:2f:ee:02:33:09:b0:7b:06:6a:7d:ff:a6:f3:75:bc:06:
         8d:ba:3e:63:73:b7:6d:a6:b4:cf:89:19:47:e2:c0:ef:aa:2f:
         0f:10:b7:c7:e6:5f:a7:05:6e:4f:bc:7e:fb:95:9d:32:bd:10:
         5c:26:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:51 2026 by rpki-client