Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa
File:                     5fefe850-00d7-3861-8700-f8eb3f16a12b.roa (raw, json)
Hash identifier:          NMml7HTRmdNu99MI6Fpyw6NsryQQbwr6gpJ3AdOV5to=
Subject key identifier:   E1:4C:C4:29:F3:1F:DA:15:C7:C1:84:63:9D:72:85:C9:18:52:98:C9
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328584EDC91ECC5D4B2037B58F34240
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     16584
IP address blocks:        2602:fe54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ec:c5:d4:b2:03:7b:58:f3:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=d2bd977a-6603-4ef6-a94c-89c3f9d98358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:98:9c:13:85:21:c0:8a:e9:c4:3a:02:9e:
                    f8:79:12:c0:71:fb:45:11:c5:a0:04:10:14:92:ef:
                    c8:32:05:c7:76:1a:37:e8:d3:66:70:ef:1e:7f:e9:
                    12:89:f6:16:1e:0f:a2:36:c6:e0:c4:57:ea:97:0f:
                    13:b9:77:e6:6a:e4:7a:46:f9:f5:64:38:82:0f:d1:
                    ef:87:76:bf:44:59:ee:b9:6f:41:e2:a2:93:2b:ff:
                    2f:93:80:70:77:7d:18:18:5d:20:44:14:58:2d:a6:
                    92:49:d8:f1:84:95:30:93:e2:8c:98:83:68:d1:8c:
                    3f:e4:6d:1a:e0:17:af:dc:00:a7:61:82:8c:04:cb:
                    d4:be:89:30:03:44:f7:1d:f4:b6:bc:ba:c4:9d:fd:
                    80:c5:2b:d3:ee:f6:bf:d7:ec:ca:1c:2c:70:c4:6d:
                    d8:bb:61:7a:b5:40:39:91:34:23:c7:4f:af:15:36:
                    94:43:da:6f:69:26:88:16:d4:ce:9b:3d:94:f5:99:
                    76:7f:19:ad:b9:10:c1:18:4d:fd:35:3c:73:4d:22:
                    4c:f1:16:c7:3f:5a:75:f3:ec:9a:e1:8d:c8:2e:39:
                    40:07:82:81:6c:2d:4b:42:6e:19:01:0a:cd:be:ca:
                    78:0f:74:a1:83:15:03:8a:6d:a8:5b:a9:4f:8f:5f:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:C4:29:F3:1F:DA:15:C7:C1:84:63:9D:72:85:C9:18:52:98:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe54::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:c9:38:1e:bc:06:43:b2:b9:a9:c0:3b:c3:b7:4e:5d:a8:
         11:db:36:e6:75:95:da:86:22:d3:42:fb:b0:a8:18:55:dc:38:
         c4:f5:ba:41:8b:64:f9:d9:00:e0:28:2b:fe:1c:dc:d3:ad:45:
         69:e9:aa:3d:1a:f0:b6:ff:e8:d7:3d:b0:bb:86:bd:8e:3f:f0:
         cd:5a:01:d4:e3:a5:97:f9:17:76:7a:9a:46:6f:3f:3b:64:6f:
         60:07:bd:a6:8f:65:51:e3:ba:8d:9b:fa:bf:6a:c9:29:61:63:
         88:d8:8e:dd:5f:56:c7:eb:42:29:81:8f:d9:44:6b:76:7e:1a:
         0b:32:fa:d8:99:eb:a5:46:e0:1b:84:fc:77:e0:20:23:1c:45:
         2c:6c:73:a5:c0:de:00:7d:3e:57:38:f4:b7:8f:b4:39:80:cd:
         31:4d:bc:b6:2f:aa:6e:e2:cc:fc:fc:e6:0c:71:a4:db:07:8d:
         a1:17:d0:4c:a8:8e:91:d4:11:eb:50:88:ba:ad:56:0c:63:55:
         c3:d5:9b:23:26:11:89:b1:b0:97:36:3e:e3:b5:1e:f8:f2:6b:
         11:37:11:52:ab:31:07:14:4b:f0:cb:6d:69:33:e6:10:1f:31:
         68:dc:43:0f:cf:35:05:f0:b8:06:24:47:c9:be:1f:27:cf:e6:
         fc:a0:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:42:23 2026 by rpki-client