Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/c5e7457f-be3a-33f0-aa0b-9815d4296e69.roa
File:                     c5e7457f-be3a-33f0-aa0b-9815d4296e69.roa (raw, json)
Hash identifier:          CHlewhdGhrpyoA9VIb7ms7kSE9vfNbfJBc5wqbC5yhk=
Subject key identifier:   16:44:5F:4D:14:31:BE:C9:82:ED:11:F2:00:39:CA:86:C2:D3:B7:BE
Certificate issuer:       /CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
Certificate serial:       010D0C9F4328584EA79A428A3AA9DB26376C2980
Authority key identifier: 09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/c5e7457f-be3a-33f0-aa0b-9815d4296e69.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19710
IP address blocks:        2602:f66d::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:42:8a:3a:a9:db:26:37:6c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cc54e0c0-23a4-42ef-b58e-158087e99ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b6:ae:90:03:67:e8:cb:7f:40:37:5d:73:00:
                    87:b9:34:08:e4:94:ee:f0:f8:59:9d:35:6d:1e:06:
                    ab:3c:e2:d5:9e:d0:41:24:57:fd:c6:42:3c:b9:80:
                    9f:c9:2f:96:a5:e7:24:30:6b:8c:e9:27:97:3b:1c:
                    96:80:70:22:64:0f:e4:2b:cc:3b:d8:a9:c0:cf:f1:
                    f4:de:7c:a3:27:9f:15:87:49:c2:23:e9:6f:95:31:
                    d7:aa:5a:46:d6:82:8a:b0:f8:6b:e7:aa:24:de:38:
                    ae:47:68:53:86:8d:7e:67:fd:52:85:46:ac:ee:24:
                    07:44:79:b5:f3:2c:08:7f:15:e6:2c:91:44:90:49:
                    73:8d:95:8f:e8:7f:b2:f3:77:00:a1:b4:b2:8a:42:
                    b5:78:8d:07:f6:a3:5f:0f:56:e1:da:10:76:19:25:
                    f6:65:86:d1:4a:bd:41:64:f1:69:2b:e2:d2:cd:5a:
                    68:12:86:9e:cf:1e:73:50:b9:55:54:6e:5d:ec:43:
                    1b:da:19:97:87:4d:e0:54:1b:37:d1:dc:c6:74:20:
                    80:99:88:9a:b5:00:57:26:3e:7d:e2:45:7a:ba:b9:
                    df:ba:74:4f:57:00:05:2f:db:9e:b5:06:78:2a:9e:
                    80:ce:d5:74:d7:f5:a8:6d:63:c6:3e:fa:73:15:18:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:5F:4D:14:31:BE:C9:82:ED:11:F2:00:39:CA:86:C2:D3:B7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/c5e7457f-be3a-33f0-aa0b-9815d4296e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl

            X509v3 Authority Key Identifier:
                keyid:09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:52:ee:8f:61:40:f3:07:d7:1d:e5:a9:b8:5b:87:a9:a6:
         18:13:20:b7:a2:ef:57:33:c8:24:1b:b6:cd:d3:d0:fd:8b:d3:
         d9:32:06:d2:1e:c3:10:c1:f4:ce:21:e5:d3:71:86:18:00:6a:
         1b:ce:e9:62:ef:32:cc:8c:f2:a4:c7:c2:2b:a9:fa:5f:49:03:
         7e:ed:2c:b7:bf:08:1f:12:75:8d:bf:f1:d1:74:c0:ee:42:c3:
         ad:63:b1:af:fd:61:a2:cb:bc:a3:aa:ca:d1:eb:4f:1b:c7:ca:
         d3:27:3a:9a:ca:33:89:14:40:ac:4a:86:06:c5:d6:86:15:37:
         f7:e5:9a:c3:e8:77:e9:e7:0a:19:f4:7f:02:94:5e:ad:0a:9e:
         86:69:d1:b9:87:50:16:48:36:ea:69:97:96:e8:ab:f0:6b:86:
         e1:0b:b1:26:1c:06:e6:33:9f:05:00:3e:df:45:3f:74:d3:d4:
         9c:32:13:d1:75:f1:4b:d3:be:6f:0a:89:6e:03:d0:40:41:93:
         b1:9e:6d:4a:cc:91:8d:29:9d:54:fa:2a:ef:4d:f7:4d:a4:ed:
         88:df:b4:64:1f:98:55:36:d3:b8:01:4d:b9:12:d4:a1:9a:60:
         bd:9c:4f:c1:3a:8a:47:a6:36:e9:a3:84:bb:f7:80:80:05:7a:
         38:dc:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:38:26 2026 by rpki-client