Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/23040b45-70ff-3f26-82f6-12f1953542bc.roa
File:                     23040b45-70ff-3f26-82f6-12f1953542bc.roa (raw, json)
Hash identifier:          iDe1rD+95ru8qiwyPpPvnVN2F/WYeM0akRtoLvOSF7I=
Subject key identifier:   6C:BD:9C:EF:1A:46:F2:E5:E9:5D:5A:71:32:FE:17:68:0C:7D:F0:17
Certificate issuer:       /CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
Certificate serial:       010D0C9F4328584EB57C44D04751EC6CC18D5600
Authority key identifier: CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/23040b45-70ff-3f26-82f6-12f1953542bc.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     11876
IP address blocks:        2602:f9de::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:44:d0:47:51:ec:6c:c1:8d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=e542c30f-de76-4692-8e1c-9581663b4d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:64:46:73:2e:b1:cc:d9:3f:6a:1b:d2:a7:
                    b7:c8:62:20:b1:cf:a6:0c:e9:33:a2:a1:ac:58:98:
                    f3:55:3d:56:80:f0:bb:a0:50:11:de:d4:bb:b2:47:
                    4d:fe:ea:32:e9:ea:58:e3:1e:cc:dc:ae:be:e6:91:
                    c4:8f:26:34:37:8f:75:8d:3c:ea:87:e0:5a:53:a8:
                    9c:5d:7e:02:25:20:cd:0d:18:81:62:89:b6:36:ac:
                    a4:fa:ce:aa:bf:6b:ed:c4:27:c8:c2:f9:2a:99:bb:
                    eb:3c:6f:2d:41:ce:df:ad:c9:29:0e:f1:0f:e7:f4:
                    19:88:d6:91:97:37:21:51:91:bd:c6:9f:21:f6:df:
                    47:4e:60:90:80:03:c7:a7:67:dd:92:19:8a:77:99:
                    c8:b3:83:6e:d4:2f:53:84:5d:94:29:05:04:a0:cd:
                    26:31:80:a7:39:e5:46:80:d6:85:3a:05:4d:96:5c:
                    c4:da:dd:cc:49:c5:c9:14:8d:42:14:17:ca:37:34:
                    4f:fc:ec:9f:07:9e:10:b6:84:b4:1a:ca:5b:b4:6b:
                    9e:67:a4:ae:dd:66:5b:a8:1b:06:92:9a:51:5c:ba:
                    3f:c0:95:dc:2d:40:c7:81:ad:9f:cf:05:1d:02:8d:
                    1f:bc:87:9b:fe:e0:c6:83:4a:10:3f:97:15:7f:be:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BD:9C:EF:1A:46:F2:E5:E9:5D:5A:71:32:FE:17:68:0C:7D:F0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/23040b45-70ff-3f26-82f6-12f1953542bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9de::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:33:86:04:62:47:91:f2:ee:23:35:7c:a3:c0:b2:26:6c:aa:
         5d:ec:c9:00:5d:34:c2:63:ea:51:0f:9e:34:a5:f4:c3:05:33:
         8e:39:3d:ed:82:94:75:89:6c:fe:38:1e:7c:a3:46:dd:18:f1:
         f0:a1:f7:df:e4:7e:57:e7:e6:08:d9:dc:ce:b7:db:17:52:ed:
         61:9b:4a:39:0d:0a:1d:ee:d0:3e:1e:1c:1d:73:3d:9c:6c:3e:
         10:bd:f7:da:30:4f:a4:14:52:ba:30:4d:85:75:19:ad:8f:d6:
         81:11:f5:35:34:ed:05:82:96:b2:c3:8b:7e:a7:2a:91:9b:b0:
         3b:2c:10:77:10:31:f7:d2:97:ae:c7:e8:b0:d2:1f:b1:c1:26:
         18:24:9c:94:c8:c4:33:cf:a2:4c:8e:b2:3a:62:7c:b9:a9:39:
         cc:b4:5f:e2:ca:e0:84:11:2d:aa:61:ee:d8:47:3b:b1:4b:9c:
         f7:dc:ca:a7:26:30:93:70:ec:30:c0:77:f9:65:c1:8b:4c:5b:
         1b:7f:d6:8e:65:eb:a1:fa:2b:09:97:53:f8:80:81:05:d3:0c:
         0a:5d:93:d5:2c:1b:c8:d5:96:6c:d3:16:84:a5:59:0a:84:b0:
         65:d2:27:8e:5a:8b:48:75:43:27:4a:32:c8:d6:68:e3:3c:55:
         e5:29:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:51:14 2026 by rpki-client