Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/d7406b37-06c9-307c-a254-f9fd323a4884.roa
File:                     d7406b37-06c9-307c-a254-f9fd323a4884.roa (raw, json)
Hash identifier:          rWr+6fvb20hUpdWshr2FBNEqgF9OlSVn8aqfeanlQ4g=
Subject key identifier:   A9:DF:CD:67:96:D1:4C:6F:81:A0:B9:7F:F0:C2:15:A3:6B:DE:A4:CF
Certificate issuer:       /CN=e3bd1f87-8818-4b01-a7e8-514858edd50e
Certificate serial:       010D0C9F4328584EB2B1BA1191D8649E44BD2A40
Authority key identifier: 2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/d7406b37-06c9-307c-a254-f9fd323a4884.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     14618
IP address blocks:        2602:817::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ba:11:91:d8:64:9e:44:bd:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd1f87-8818-4b01-a7e8-514858edd50e
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=af50ebc9-2e7a-448a-943e-170478a4f6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:31:73:b5:1e:e6:dd:11:2b:d6:82:ea:a2:
                    79:a3:25:4a:69:9b:35:fe:28:74:78:77:b5:4b:c2:
                    bd:6b:08:a0:c4:53:3d:67:c2:65:74:b8:69:8e:b6:
                    11:03:17:23:a1:b1:4f:59:5f:a2:2c:dc:b4:7c:ac:
                    43:f4:c3:ea:10:b0:d8:74:22:7b:fa:f3:d8:d0:0a:
                    7a:52:ab:0a:56:a8:b5:c3:17:86:a6:b8:0b:f2:5e:
                    7a:ca:66:58:16:a5:3e:6f:9d:3b:a4:bd:6f:ea:ba:
                    3e:11:96:7a:5b:f9:41:80:f4:4b:17:59:47:38:c1:
                    d6:d3:56:a7:00:96:d8:85:b4:d7:57:70:38:8e:d5:
                    cf:ba:15:cd:38:5f:ca:c7:74:9f:4e:26:27:7d:02:
                    9e:f5:2f:73:e7:12:7b:0f:1b:d8:dd:b4:8c:e9:39:
                    6b:0e:1b:86:b2:1b:f9:0d:b4:97:71:92:75:0e:c1:
                    85:56:6c:8c:ef:3a:d3:5e:9d:4c:a9:3c:78:1e:af:
                    a7:96:d1:66:24:b1:37:d6:3c:d1:62:02:d8:22:df:
                    f0:2a:dd:8e:64:cc:6c:22:f7:76:7f:db:03:fc:f9:
                    84:ef:4e:57:c2:dd:d0:27:06:c8:2b:15:aa:06:ea:
                    42:ee:31:cc:19:3c:41:9b:c1:6a:28:23:12:aa:a5:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DF:CD:67:96:D1:4C:6F:81:A0:B9:7F:F0:C2:15:A3:6B:DE:A4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/d7406b37-06c9-307c-a254-f9fd323a4884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:a8:c7:b4:b6:ad:b9:6c:55:ef:85:5a:e7:36:99:93:7f:
         80:3d:db:f3:8e:3f:2d:c9:09:8b:c8:86:90:aa:a6:e6:b4:0e:
         d7:ca:e2:46:cd:ff:fe:b2:99:29:60:22:e5:b0:85:2c:d1:5e:
         9e:75:03:00:9d:02:62:2d:1a:cc:83:65:a5:62:1e:b7:99:28:
         45:3a:77:ed:3c:d1:00:5b:19:6c:8d:3f:1a:6e:c7:37:a5:7b:
         05:03:e3:90:c8:25:af:05:69:56:29:30:24:68:2a:3b:d4:1c:
         a8:51:10:47:00:05:ec:c8:3d:66:bd:1e:9b:ad:e3:b1:df:00:
         2f:99:8b:2d:ce:78:95:2f:d7:98:59:96:97:35:c7:4c:66:b1:
         f3:ab:7b:d9:f0:79:a5:9f:74:ea:0f:99:51:db:3b:90:4e:9b:
         79:fc:66:a8:0b:27:8c:10:59:9d:03:eb:97:c8:e5:55:16:fe:
         dd:ba:07:87:df:be:06:05:55:c8:f4:a7:b1:96:c2:82:db:7b:
         ed:f3:0e:5e:40:db:20:de:b1:4c:e5:d9:c6:5c:43:89:83:15:
         6d:ff:19:a7:3e:38:35:c5:7c:0d:bb:14:91:2c:45:6d:e6:94:
         2e:d5:6a:9d:00:eb:34:37:9c:16:c1:f2:af:c9:f2:d0:8b:11:
         8e:ce:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:38 2026 by rpki-client