Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
File:                     5987ee65-bf63-3846-a21b-41263b681a6b.roa (raw, json)
Hash identifier:          g0ixh20QxcGb8jSyenHph85JeiBhDgbglArshPFYcY8=
Subject key identifier:   74:25:06:51:39:88:A8:88:CC:8A:FD:04:2B:D5:F4:3C:C7:A0:0E:E7
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584EB2B1C2DB4A280423ED8C8700
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     19518
IP address blocks:        2602:2e5:666::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c2:db:4a:28:04:23:ed:8c:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=9b630b5f-3bff-4d78-b969-203e892da87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:74:92:9a:61:88:55:c7:db:63:23:1a:c2:
                    0f:e2:b0:0b:0a:f4:f0:72:40:8b:9d:bd:c7:cd:71:
                    26:ce:3c:15:7b:73:f3:4f:01:e1:ba:f6:1a:74:a7:
                    73:06:9f:78:0b:d0:0f:61:1e:8c:c0:c0:1b:49:47:
                    54:0c:82:d9:fd:f9:d0:2f:4e:17:37:15:eb:17:52:
                    6a:1b:5d:0a:61:d4:d5:00:ec:b9:aa:1c:ef:82:f0:
                    24:e2:02:67:63:57:25:28:cb:56:69:b2:0c:c1:7a:
                    91:00:86:4e:a2:26:89:64:81:2a:f3:3f:1d:87:2e:
                    57:f4:ae:ab:0c:d7:69:e4:69:2a:5e:d3:fc:0f:97:
                    42:64:03:34:30:9d:c4:87:94:65:73:26:c6:cb:b3:
                    d7:9f:94:b3:9a:03:90:b1:30:bf:8e:33:57:96:89:
                    0e:65:9c:22:81:af:17:68:93:4c:c0:9b:a5:e5:b1:
                    4a:1f:06:63:d1:6d:42:6f:a5:e0:ec:69:b3:cd:eb:
                    80:4d:76:97:86:26:59:d8:07:ec:70:09:ed:39:54:
                    01:bc:d6:61:4e:c3:0e:af:cf:2e:dc:8a:30:f6:f9:
                    6f:40:39:27:14:5c:b2:d7:eb:ca:13:78:96:69:4b:
                    11:b4:e6:10:9f:3a:7a:79:44:9f:50:ec:c9:87:18:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:06:51:39:88:A8:88:CC:8A:FD:04:2B:D5:F4:3C:C7:A0:0E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5:666::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:ca:0b:45:0e:54:a4:1a:f9:b9:03:c3:02:4f:85:13:33:
         88:d3:2c:2f:3b:f0:a6:80:49:de:e4:03:a1:53:d8:32:6b:a3:
         60:8f:43:d0:88:d3:02:e6:30:66:b5:70:18:a8:da:4c:c6:4f:
         8a:43:9b:26:aa:28:dc:7f:0d:5f:17:e5:0c:53:3b:f9:54:ea:
         eb:ef:ed:25:36:96:c2:1c:f0:c5:7a:af:d4:6b:b0:36:71:6e:
         e1:c6:5d:46:49:7d:62:02:71:30:8f:95:d0:2b:de:f9:06:f7:
         34:ff:5c:97:c0:09:09:9b:de:a6:c5:71:d0:ec:b5:af:4e:5f:
         88:4a:5b:33:76:37:fd:06:50:6a:6d:0e:14:01:48:76:4e:a6:
         5d:d2:0e:a4:a0:de:d1:26:f4:3e:7d:64:f7:60:5c:a7:ab:2b:
         90:06:8c:44:59:23:a4:81:08:3b:16:1a:f2:26:da:c5:b6:f5:
         db:c5:30:ba:8b:0a:2d:d6:64:87:80:7f:3b:0f:a9:ba:55:af:
         10:da:0b:5e:c8:28:19:aa:75:d3:ee:03:01:31:45:2b:a3:f6:
         d2:75:5b:61:e9:af:5f:3f:14:4e:44:c1:ba:22:09:b7:a5:92:
         46:08:5e:de:3f:4e:a7:cd:01:a5:71:ea:f9:d1:5f:21:ab:ae:
         c7:3e:43:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:08:39 2026 by rpki-client