Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/82c5a722-bb32-3be3-9847-80754347fe30.roa
File:                     82c5a722-bb32-3be3-9847-80754347fe30.roa (raw, json)
Hash identifier:          bq+xBJhTeUn5LIbm40qh80MUv56pTCimR/9UT4LkTC4=
Subject key identifier:   85:E8:A1:45:C1:20:91:B2:00:CB:CA:DB:5B:C8:60:7F:BB:70:F2:AF
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584EA8EC3886CBD78E6B58930B80
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/82c5a722-bb32-3be3-9847-80754347fe30.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     40806
IP address blocks:        2602:f4d9:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:38:86:cb:d7:8e:6b:58:93:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=5e7fae1d-87a5-4bc5-9a3c-631013768928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:ef:55:fd:c8:b9:1f:59:e1:87:63:5a:01:
                    28:cc:ec:59:ce:ef:d1:a5:39:4b:5d:c2:ce:9a:96:
                    5c:2c:4a:1f:44:1f:f7:2b:8e:bc:58:60:84:75:b0:
                    74:45:45:12:7a:c7:9e:bc:3e:cc:8c:3b:2f:76:45:
                    db:11:b4:ba:45:94:87:8f:a2:f5:4f:c9:71:41:5d:
                    85:2c:30:4d:80:27:d7:96:f6:01:a1:54:d0:71:7d:
                    24:0f:d8:5e:78:2c:ea:16:82:12:42:9d:8d:5d:12:
                    f3:49:a9:23:75:dd:78:c7:23:05:60:66:04:ee:11:
                    8c:81:5a:07:9e:f1:bc:82:99:04:58:43:d8:92:bb:
                    31:f8:49:b3:9a:d0:1e:91:ec:c9:65:36:f5:cc:56:
                    2b:3b:99:64:94:e1:52:a4:2b:1c:43:04:a6:6f:5e:
                    56:27:6d:80:5d:80:f5:ef:6f:17:91:c2:82:68:68:
                    d6:9f:5c:73:77:5c:65:3c:8b:4a:f4:d8:c8:94:d7:
                    dd:63:be:dd:3b:04:88:5e:85:91:5c:fe:34:2d:39:
                    88:d5:14:74:9e:94:94:b7:71:a0:dc:f3:50:e2:27:
                    d9:f5:76:b4:70:a1:c1:20:93:ce:6b:96:e8:17:d1:
                    ed:7e:fa:03:0d:9e:da:6f:b5:f6:10:f5:98:5d:a9:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:A1:45:C1:20:91:B2:00:CB:CA:DB:5B:C8:60:7F:BB:70:F2:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/82c5a722-bb32-3be3-9847-80754347fe30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d9:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:66:9f:66:fe:46:4d:d1:39:89:00:3a:63:49:43:cf:d6:
         cc:d3:8c:00:00:73:3e:7a:a6:87:23:2d:8a:6e:4f:3b:49:66:
         4a:f4:32:23:1e:ae:0d:7e:ff:a2:89:a4:a5:d5:c5:b0:6a:86:
         6d:c8:a9:5e:8b:32:57:d3:b8:68:3e:51:69:a5:93:9b:bb:29:
         2b:5b:14:e0:78:d5:e4:56:89:cc:fe:4d:42:28:d9:0b:f5:16:
         2a:32:51:7c:cc:cb:e4:84:ae:5b:48:91:ae:56:c1:82:89:6b:
         f6:e3:11:e3:88:00:45:29:9b:2c:2c:b4:df:19:e4:54:45:b3:
         04:8a:6a:05:5a:e9:d5:c6:a9:f1:29:0e:98:c6:7b:ef:66:97:
         d9:10:05:12:95:04:f6:02:60:3f:b6:f8:d7:86:b3:6e:f7:7d:
         47:c9:53:ba:4a:bc:45:14:80:b2:1f:72:41:48:c1:58:9e:06:
         35:76:cc:13:bc:04:f8:1c:47:0e:68:3d:77:83:47:20:69:95:
         96:d4:a9:f7:c4:f7:24:a9:2b:5e:c2:c8:f3:ad:86:8d:a1:c1:
         07:2b:5a:69:25:91:c2:9f:93:23:ac:e1:8e:19:a4:f5:1f:05:
         3f:b2:26:31:20:28:cb:13:5c:f3:11:51:e1:a2:d4:1c:a5:9b:
         15:91:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:24 2026 by rpki-client