Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa
File:                     064bb556-40a8-3b7a-9c55-3217f244b17d.roa (raw, json)
Hash identifier:          rKEIoqLSU5Qg2bhaka8C9YPMiVUpLTo3t+jUVvT+lPY=
Subject key identifier:   5A:56:0E:B2:82:E0:78:DA:6D:B2:0B:9E:38:E2:A5:8B:CD:D5:E7:F3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75AB2ED230F9B9EBA8280
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     205544
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5a:b2:ed:23:0f:9b:9e:ba:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=57ef153e-fb44-40a8-8578-fa8ab76fd435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:8b:ee:8e:64:b0:e1:49:0b:5a:7f:d2:a6:
                    b1:2c:e8:29:b9:86:b0:8d:e6:d1:97:9d:4c:0e:91:
                    93:d8:a9:42:6a:ee:e0:1b:90:a2:42:cf:46:06:62:
                    00:f0:2f:28:d1:9b:5d:ec:2c:f4:d0:23:d5:26:1e:
                    d1:40:b3:61:d8:c4:9b:e6:10:cd:cc:49:13:fe:57:
                    24:2d:ff:35:00:9f:a8:4d:9e:18:c8:5c:5a:98:4c:
                    6e:84:6a:68:46:ff:2a:fd:48:30:32:b5:be:50:ff:
                    21:36:d3:2e:e3:8a:11:3a:b0:c2:c1:3f:28:79:b2:
                    ba:19:fb:cb:ff:38:81:fb:2e:5e:db:eb:7c:10:6f:
                    f9:fe:99:8b:81:4e:bf:6f:4d:d3:f6:18:1f:98:1a:
                    e7:c5:99:0b:3a:cf:00:64:54:77:cc:69:33:df:aa:
                    5a:b6:2c:1f:e2:e0:8f:4b:a5:3a:ed:13:ff:23:34:
                    34:8d:c7:15:99:9a:da:81:36:93:91:03:23:7c:a7:
                    b9:66:48:e7:1a:0e:a4:49:e5:8b:91:a1:dc:f4:db:
                    05:ee:03:b3:2b:28:2d:2a:52:88:74:40:09:eb:02:
                    2f:aa:33:6f:83:51:14:c2:84:d8:08:fc:79:b4:53:
                    d7:08:31:66:a9:3e:20:16:e5:58:80:4d:c5:4f:2b:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:56:0E:B2:82:E0:78:DA:6D:B2:0B:9E:38:E2:A5:8B:CD:D5:E7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:85:bd:97:7e:c9:61:49:b9:e9:9b:16:77:6a:8b:0b:75:cd:
         5e:de:e1:38:c3:c4:cc:a0:4b:3c:45:51:eb:a6:61:a0:cf:6e:
         5b:16:6a:4e:e5:0c:95:0e:83:73:30:15:70:c4:fb:d9:ca:22:
         78:fd:ed:76:76:29:ef:f6:3a:e5:fb:ef:d4:82:d9:76:44:ff:
         d8:2b:55:03:c2:54:98:16:52:b0:f7:e6:9f:df:c1:3e:bb:0e:
         c0:82:01:78:58:5c:18:68:82:96:5d:b3:66:76:38:bf:35:f3:
         9f:06:5e:11:e5:86:70:e1:51:84:37:54:c5:22:05:9e:50:b9:
         36:1d:8d:6c:68:97:be:88:50:e1:9c:b8:9d:15:90:f7:49:c8:
         a1:7c:35:6c:3f:29:4d:2a:e1:f6:af:b3:1c:65:69:07:a5:ff:
         ca:bd:3b:1e:c6:42:7b:c8:b4:21:23:e7:9e:cb:f8:a9:f4:ee:
         12:2a:bd:88:d2:6f:52:82:27:c8:b6:71:9c:ca:68:56:7f:c2:
         30:d5:95:8e:af:c5:5b:cd:2e:89:11:1b:08:d2:cf:a8:18:e6:
         31:e8:c1:c2:d9:24:65:20:f9:cf:1d:7b:1c:a6:07:f0:e2:d3:
         b0:c5:61:3d:74:e5:a5:dc:35:1a:33:25:17:9f:ba:cf:d1:c4:
         53:21:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:13:56 2026 by rpki-client