Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/2b66ead1-3e2d-3073-9d25-6176a3ac655a.roa
File:                     2b66ead1-3e2d-3073-9d25-6176a3ac655a.roa (raw, json)
Hash identifier:          mCy63Pw4XGWBQLMC0+jTPe1TmJEtgaCZmxl/VPGH90U=
Subject key identifier:   1C:65:0E:35:C0:E7:BF:BB:03:6D:E9:18:33:EB:63:85:70:14:E5:F8
Certificate issuer:       /CN=27856758-5ea9-463e-969e-eb2a87a469d5
Certificate serial:       010D0C9F4328584ECBD1D22A8E3AE274AC586DE6
Authority key identifier: B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/2b66ead1-3e2d-3073-9d25-6176a3ac655a.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     64233
IP address blocks:        2620:ef:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d2:2a:8e:3a:e2:74:ac:58:6d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27856758-5ea9-463e-969e-eb2a87a469d5
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=5b6bb2be-2891-41d2-82e2-657dbc7df11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:59:72:09:97:b8:2f:30:30:c8:b1:58:84:98:
                    9c:8d:b4:27:ba:cd:f9:3d:c9:65:49:e8:aa:5f:5d:
                    38:7d:ea:89:45:3a:28:81:ac:4d:b6:c6:41:24:b2:
                    00:50:26:2d:e9:dd:81:eb:0a:27:01:22:52:de:cd:
                    5a:21:ac:b2:ad:d7:d2:ec:27:04:4e:e2:b2:89:67:
                    1c:52:9b:5a:dd:cc:15:29:bc:c3:48:c6:85:48:5d:
                    d2:9d:c9:76:81:23:9f:e5:da:97:b1:85:3a:dd:88:
                    8a:94:ea:c8:f8:f1:e9:81:fa:ed:16:00:bf:d7:c7:
                    bc:a3:cc:d8:c4:c8:f2:31:62:38:39:4b:f4:3c:cc:
                    a3:21:c3:99:c2:22:e3:c3:47:75:b3:0e:52:c4:0a:
                    c9:54:44:22:d2:c2:38:2a:8a:1f:76:d9:87:c2:f8:
                    20:41:8d:c2:f6:74:57:08:8c:17:87:40:a0:b9:fa:
                    13:a2:7d:4c:57:3b:c8:b0:da:41:f5:06:8f:a0:5c:
                    24:8c:0e:f9:86:58:44:2b:27:b8:57:2c:a6:13:e2:
                    82:b1:02:05:47:50:1a:c9:65:c2:89:59:2c:94:cb:
                    f7:ee:1f:a8:67:9b:c1:cc:9e:40:6a:64:76:d6:e3:
                    6a:66:57:6b:4c:d1:57:ad:61:f1:f0:7e:fe:c8:b4:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:65:0E:35:C0:E7:BF:BB:03:6D:E9:18:33:EB:63:85:70:14:E5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/2b66ead1-3e2d-3073-9d25-6176a3ac655a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ef:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:93:5c:fa:53:51:29:cd:88:ba:ec:22:b0:6a:4c:13:a5:
         ab:c4:86:00:cd:e1:84:a8:6c:1e:d0:ac:3d:c9:34:6f:56:2d:
         6e:cc:3b:c4:f7:76:3c:f2:02:a5:35:02:ef:85:37:e4:bf:d1:
         ce:3a:15:d6:bb:df:9c:57:24:d1:83:3d:d5:0b:ea:7f:c9:46:
         f1:4d:8d:7a:c0:f0:7e:1a:b3:50:7e:b6:81:01:76:ed:7f:5a:
         8c:68:42:12:f1:4c:43:55:83:e2:68:76:d3:ad:d1:6b:7e:4d:
         87:3d:6f:41:70:a4:1e:7a:5e:be:2d:22:26:a4:64:29:21:6a:
         40:63:f8:a0:85:ee:ba:ac:25:06:28:3f:99:12:37:e6:cd:54:
         c5:78:07:34:c2:70:bd:ef:b8:58:87:5b:5f:96:2b:7e:4c:54:
         2d:d0:a6:13:e8:72:42:c8:95:ee:9c:a2:e8:73:97:9d:85:9d:
         01:f1:ad:d0:01:0f:e0:cd:bb:0a:be:7c:61:2a:53:05:08:79:
         b6:13:b2:5f:41:ae:45:c7:29:df:b2:2e:28:0f:59:a6:fa:8e:
         69:db:62:22:82:2f:ef:1c:5b:53:85:1d:82:ba:93:c3:e9:10:
         f0:6e:f8:3d:bd:e7:e5:10:52:7c:28:a9:b0:46:65:82:bb:2c:
         cd:5d:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:59:34 2026 by rpki-client