Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/92220c6f-b279-3813-91b1-4cd295ee61e3.roa
File:                     92220c6f-b279-3813-91b1-4cd295ee61e3.roa (raw, json)
Hash identifier:          i8uBryYJ9Bw5jtIJIGAS8JXRjuPzP62hMAH4K/1sZuU=
Subject key identifier:   24:54:5C:0E:E4:01:A6:39:53:F1:33:88:AF:06:01:FC:74:32:E7:08
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EBC7719FC4BFF79DD3114D420
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/92220c6f-b279-3813-91b1-4cd295ee61e3.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     12025
IP address blocks:        2607:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:19:fc:4b:ff:79:dd:31:14:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=0f2459ae-b39e-4936-8e0b-2d33b2deb026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:08:ba:d5:f3:2c:ed:86:e5:2e:50:da:a3:
                    fd:d1:bd:d4:2b:23:20:78:66:a6:94:91:23:a9:55:
                    42:62:f0:6b:02:52:b5:2b:82:01:b2:f1:01:ae:f6:
                    cf:5f:e3:1b:c5:ce:63:0e:7c:2d:c6:40:65:c5:30:
                    8b:ea:22:af:6f:da:65:f4:8c:9e:90:c4:08:8d:50:
                    37:49:c0:41:93:02:87:0a:c0:2c:b9:1d:d2:ca:b4:
                    f7:e1:fb:b8:f2:68:74:af:94:4c:e5:7c:ec:3f:0d:
                    d2:82:6f:39:58:e9:25:c8:e4:c1:eb:d0:e3:34:04:
                    75:8d:a4:61:2a:b4:aa:f4:a7:d2:99:c6:2b:e7:e3:
                    65:95:dd:c2:00:58:f3:3c:df:56:40:9c:97:84:c3:
                    53:ee:6a:d4:71:d0:9b:22:14:ab:b7:73:fb:45:ed:
                    b7:a6:2f:b9:b3:05:44:b4:15:f1:dc:33:e4:b8:7b:
                    e6:6b:9b:c0:75:06:c7:ad:ac:99:a5:d5:7c:38:fe:
                    c8:7b:e1:25:e0:ea:e5:9d:a3:b6:b2:15:d8:b4:9d:
                    e9:02:db:33:4b:47:3d:b8:f3:52:0d:ba:10:c8:b7:
                    60:92:85:02:cc:fd:e4:8d:f9:09:ff:cd:db:df:0f:
                    cb:c4:ee:44:49:b1:ea:4c:77:12:46:54:f4:7d:78:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:54:5C:0E:E4:01:A6:39:53:F1:33:88:AF:06:01:FC:74:32:E7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/92220c6f-b279-3813-91b1-4cd295ee61e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:49:20:e9:62:e1:86:20:4e:3d:5c:27:1c:65:61:34:88:27:
         11:ca:9a:65:9a:14:ae:31:88:4a:57:43:88:a1:a0:e4:f6:55:
         6e:fe:ff:76:b5:22:a3:3d:29:08:16:d6:40:1a:c3:9b:e7:1c:
         e7:4a:f2:8a:f0:96:ed:c5:0f:b1:9f:14:f1:dd:66:76:7f:87:
         81:f7:55:50:80:ba:d7:0d:d8:89:b6:7a:20:5c:04:bd:8c:92:
         1f:56:d7:63:07:39:0b:46:1e:e1:ca:70:b7:63:a4:0f:19:b7:
         d7:87:dd:f7:98:29:81:fb:3e:0a:d0:0f:40:39:d8:6b:77:29:
         19:bb:76:de:c1:ee:52:4f:94:84:03:db:2a:00:bf:4b:59:2a:
         41:8f:61:db:1e:dc:c4:09:5b:64:c3:69:58:1f:89:66:a5:90:
         02:1b:1a:8e:a9:8a:01:f4:75:39:a9:be:98:d9:37:8d:2a:f2:
         de:dd:8b:5b:4f:c9:19:f4:40:b5:97:59:7e:26:fa:aa:1c:fe:
         e1:d0:2d:e1:12:93:37:b4:57:ca:85:ba:1e:7d:a1:25:e0:e8:
         c0:d7:b0:3a:08:31:9b:d4:d0:2d:b8:1d:68:f4:c6:46:ef:7b:
         c4:6f:01:a1:41:0f:c3:f4:d0:9b:42:a3:4c:3c:9a:89:c2:89:
         f9:b4:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:14:44 2026 by rpki-client