Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
File:                     ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa (raw, json)
Hash identifier:          VAzOIGk557hJU7a40M3bO8xbBjHRDWRLprBC9mFVMOc=
Subject key identifier:   6C:A6:3D:B0:70:50:DD:24:EF:D0:8B:C2:57:B1:4E:6F:43:68:C8:AF
Certificate issuer:       /CN=679b1148-0358-4232-b827-4a6006838da6
Certificate serial:       010D0C9F4328584F02422572C0DB854C8F2AA340
Authority key identifier: 85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     8075
IP address blocks:        2602:801:600a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:25:72:c0:db:85:4c:8f:2a:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679b1148-0358-4232-b827-4a6006838da6
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=cc18861b-4902-4610-9556-f23e4f3c9c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:38:24:1c:6d:65:8d:ff:87:4b:8a:bf:9c:
                    1b:a6:5f:ea:39:7b:1c:d2:a2:8f:a3:78:97:4a:d3:
                    d9:95:9c:43:76:ce:be:84:e9:b6:a4:7b:a3:bd:53:
                    62:4b:78:be:ec:76:87:a5:5a:69:6c:d2:cc:0c:62:
                    b3:0b:e0:66:f2:df:60:06:53:17:48:db:2a:2b:f9:
                    4f:bc:3f:9c:f6:21:b4:c9:75:43:c3:e0:73:8e:3e:
                    d3:84:43:df:0b:89:f2:e3:ae:ee:ad:96:f1:68:2b:
                    72:3f:ff:26:83:4b:99:ff:b3:e8:4d:b1:55:48:f2:
                    df:be:df:21:b4:d7:fc:72:0f:fd:a1:bb:5e:b8:56:
                    8f:74:95:3f:44:c3:89:0c:21:61:04:db:5b:5a:f1:
                    4c:e8:71:52:b5:b4:14:8d:69:ea:d0:6b:7d:36:33:
                    86:1b:17:f0:0e:e2:10:8d:ee:16:07:d4:16:1a:47:
                    48:78:e3:78:2d:03:65:81:a9:89:5c:3c:8a:b8:9f:
                    f1:cb:46:92:92:57:5a:c3:64:60:eb:59:bb:b9:71:
                    4f:99:e9:b5:3f:9c:65:55:f0:e8:ab:87:44:69:c3:
                    eb:b8:ac:c8:32:04:ad:f7:a7:d7:d1:ff:a4:f7:da:
                    8b:74:2a:43:07:ae:6e:80:02:0d:e3:a2:c0:8c:db:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A6:3D:B0:70:50:DD:24:EF:D0:8B:C2:57:B1:4E:6F:43:68:C8:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl

            X509v3 Authority Key Identifier:
                keyid:85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:600a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:25:55:3e:6c:76:50:e7:41:92:5a:fa:7c:5f:ac:a3:71:0b:
         ad:1e:af:fb:e6:3e:74:29:bd:5e:f7:86:19:57:c1:4d:32:3c:
         6c:8a:48:e1:f3:81:e0:b5:57:70:14:f8:78:d6:36:08:b4:44:
         92:ef:26:1d:ad:3d:19:70:48:b8:1f:c4:fe:84:a9:39:55:d4:
         3a:b3:45:e6:88:66:21:b0:de:19:f3:d3:14:c8:04:91:58:83:
         27:43:38:ee:10:8e:2a:14:6b:e8:db:c3:20:e2:74:5b:a8:85:
         6a:d7:dc:63:8e:b3:fe:8e:f4:3c:ae:41:4f:44:ba:ef:47:d8:
         11:f8:24:b1:a4:18:40:94:a9:c7:8a:5d:cd:8c:66:0f:00:87:
         4b:d1:b1:e2:98:db:ae:66:df:e7:af:df:47:d9:05:40:c2:b6:
         8b:eb:d0:cc:fb:3b:a5:02:7a:60:9b:5e:df:2b:43:07:22:2a:
         41:98:2f:67:98:71:90:cd:c1:1d:2a:cb:a1:26:c2:a8:e9:13:
         9e:fa:18:e2:24:bc:dc:df:13:50:61:f0:32:4f:b1:4e:c8:a1:
         fd:bc:a6:c4:59:e2:b5:f8:b1:ab:ca:4f:ef:e6:98:09:1b:63:
         c8:5b:dc:dc:d5:1c:31:9f:a9:e1:10:0a:26:c7:dd:08:7a:94:
         42:5c:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:29:54 2026 by rpki-client