Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/99da7bb1-bfcb-3ceb-b0fb-497883bdf257.roa
File:                     99da7bb1-bfcb-3ceb-b0fb-497883bdf257.roa (raw, json)
Hash identifier:          vETQRzGKLNI+VuJXT+5L7JNrQJSm04z8BWvv6fspYkI=
Subject key identifier:   23:65:60:38:FA:14:FE:5F:3C:7F:11:80:F7:4A:0E:4F:B4:BD:EC:41
Certificate issuer:       /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
Certificate serial:       010D0C9F4328584EFC2BC7D109CFFB3A60AE6520
Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/99da7bb1-bfcb-3ceb-b0fb-497883bdf257.roa
Signing time:             Fri 28 Aug 2026 08:40:26 +0000
ROA not before:           Fri 28 Aug 2026 08:40:26 +0000
ROA not after:            Thu 26 Nov 2026 09:40:26 +0000
asID:                     49592
IP address blocks:        2602:fa0a:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:2b:c7:d1:09:cf:fb:3a:60:ae:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
        Validity
            Not Before: Aug 28 08:40:26 2026 GMT
            Not After : Nov 26 09:40:26 2026 GMT
        Subject: CN=b5988fe9-5878-4a1e-abf0-7b7c527c2938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:05:69:8d:4c:ce:77:4e:ab:61:51:ca:a3:
                    23:2e:e0:5a:cd:25:5e:8c:e7:11:41:8b:76:ad:49:
                    32:c2:1f:24:71:97:73:03:bb:c0:39:71:ba:7a:72:
                    b2:3a:7e:d4:d6:2a:8d:54:2f:8f:4b:70:0a:88:46:
                    06:79:d2:ea:97:09:e5:4d:f3:12:b0:45:41:45:11:
                    60:32:d1:04:47:ba:e5:f9:1d:93:83:e1:10:0d:b9:
                    5e:c0:73:0f:df:29:49:1b:b3:5e:56:fa:8b:5c:95:
                    0c:ac:cf:3b:ea:f8:9c:7e:31:39:7d:43:4d:d6:0c:
                    9e:a3:ab:a5:78:74:2d:9a:0c:62:f0:c9:5e:f8:a5:
                    d4:5e:68:da:fa:4a:93:f1:ff:b7:05:62:c3:66:2b:
                    48:47:cd:a5:b9:ad:1a:06:d3:37:3b:f6:3a:76:09:
                    14:49:60:71:e1:76:35:8e:d6:58:07:9c:d2:c2:d7:
                    c5:12:23:fb:3c:83:3d:1b:94:9c:04:cc:bc:19:bc:
                    e5:9e:c6:b3:e6:3a:2d:b8:67:2a:e2:e8:47:49:2c:
                    bd:1b:ae:e6:7f:b1:df:7d:3b:e6:dd:3d:7a:87:a5:
                    e0:12:3e:e9:1f:3b:4b:60:be:ed:dd:51:da:04:7b:
                    c8:0d:d6:07:ee:2e:03:c4:bd:19:48:90:61:9e:a4:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:65:60:38:FA:14:FE:5F:3C:7F:11:80:F7:4A:0E:4F:B4:BD:EC:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/99da7bb1-bfcb-3ceb-b0fb-497883bdf257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl

            X509v3 Authority Key Identifier:
                keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa0a:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:86:ae:e9:c7:02:d4:69:ee:be:56:17:35:90:a1:7e:ac:78:
         f6:6f:f3:be:4b:6d:3f:2c:b4:31:e2:50:66:84:43:8d:7d:31:
         0d:e0:0e:3c:25:94:81:bc:89:3f:cc:8c:ed:cf:31:42:a1:37:
         09:47:44:4b:65:ca:d1:e9:42:20:b1:7c:b5:0f:0a:2c:73:ac:
         9f:8c:8e:d1:cd:a2:cc:43:00:f5:fe:90:a8:5b:ec:6a:04:d6:
         3b:c7:ca:9b:32:52:84:0d:6b:8a:e5:0b:62:1b:cb:6f:69:93:
         64:fb:56:af:ac:4b:34:e6:f4:1a:43:a5:6c:e0:dc:bb:13:28:
         07:0e:95:3f:60:f4:21:9a:6d:58:68:cf:34:47:d9:39:39:6f:
         c5:75:f6:29:5c:8a:b4:6c:0e:e1:78:92:84:7d:08:86:4a:0e:
         dd:2a:ea:22:c7:f8:0a:77:59:35:78:1e:11:dd:3f:49:84:9d:
         20:cc:19:d4:3d:74:a7:a1:63:13:28:50:d4:f3:0a:35:d9:7c:
         ff:ff:6c:2d:ec:d7:8c:ec:c5:c3:39:d6:fb:a9:bf:c8:c1:61:
         bf:48:87:cb:a3:24:cb:33:66:50:e9:49:c1:f8:94:bb:01:47:
         d8:cf:9b:88:e5:5a:78:dc:79:05:1e:09:4f:01:ef:c4:f6:f0:
         89:78:4e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:40 2026 by rpki-client