Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
File:                     e50dcace-be5f-3f1f-9cfe-4047144e8682.roa (raw, json)
Hash identifier:          mhe48EQFyHf4+NX1EFRJsK6V9Sq+/7PXCYAkdm5uIRQ=
Subject key identifier:   3C:A3:59:C0:F4:9C:57:F3:89:83:B6:20:52:D3:9A:23:70:15:90:F4
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584F1897BF4D9BC5FA5B0626D440
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2620:8:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:bf:4d:9b:c5:fa:5b:06:26:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=423a5242-6dac-4e71-9c7f-8581019ee9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:11:dc:5b:13:6c:e7:e1:e6:dd:75:23:eb:
                    f6:fa:6c:78:95:70:da:df:f7:24:8e:15:df:6e:3b:
                    6a:ea:c9:ed:95:7b:d1:48:d3:48:e6:c0:a4:c1:dc:
                    b6:bd:4f:6b:77:fa:6c:ee:bb:d0:09:9d:6a:4a:77:
                    f2:78:c6:df:29:d1:1c:88:57:cd:ba:04:c8:58:78:
                    d2:0c:7b:4d:ea:2c:81:fa:d9:e5:fc:de:ed:e4:b8:
                    ae:f9:76:7e:a3:4f:b5:9f:24:ae:a5:66:ea:de:76:
                    ab:1e:27:f8:31:e9:3a:46:be:61:2b:8b:59:33:9e:
                    15:08:21:e2:cb:7d:b2:de:8f:93:bc:72:32:b0:f2:
                    d2:08:dc:c6:e1:38:b0:ba:63:00:ff:25:dd:b6:b2:
                    27:ac:cf:ee:0c:21:30:e0:21:af:db:52:98:f8:78:
                    57:83:51:f9:26:ae:2d:54:98:16:07:0e:26:23:ea:
                    39:21:e9:c4:dc:25:ba:d8:2a:74:0a:f0:f7:c6:71:
                    92:d1:7a:53:88:00:7a:30:b3:6b:fe:a1:10:8e:48:
                    88:b1:62:9d:0e:1f:d4:f9:f1:97:71:7e:00:d0:7e:
                    46:55:f4:35:80:9e:f5:b4:38:38:50:ee:e5:dc:d6:
                    a6:72:84:1a:5f:0a:78:4e:b7:9a:94:59:9b:e7:c1:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:59:C0:F4:9C:57:F3:89:83:B6:20:52:D3:9A:23:70:15:90:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:4300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:86:63:ce:a6:be:2a:7c:f3:b8:a3:2e:7c:56:94:d4:30:6d:
         06:85:3e:c9:a5:c9:2d:6f:79:9b:a7:55:0b:4e:4e:5e:53:0f:
         9d:1f:74:51:38:67:85:79:aa:cc:ba:6d:2f:91:4f:b8:36:f2:
         e0:e3:e0:1d:1d:1c:f0:69:6d:78:56:79:c4:a6:8f:3b:6b:b7:
         fe:86:02:dd:2c:56:89:3e:4d:9a:db:d9:ad:1a:a0:43:29:d6:
         14:61:68:61:7b:c2:2a:58:e3:d7:c6:ed:38:21:53:0e:5e:3a:
         4e:80:a1:4b:f0:83:e8:da:67:e0:31:bc:d3:5a:e1:ab:8c:b4:
         e1:1b:91:28:34:74:c4:c4:b9:bb:9b:83:6e:13:75:6c:54:89:
         12:d3:ae:33:c1:3e:dd:c7:d2:ff:2f:0e:34:b1:55:19:b1:07:
         67:92:7c:b6:82:3b:da:95:35:36:b4:5d:65:0a:24:d8:14:08:
         b2:70:8d:e4:54:ed:7e:3d:10:bf:59:3c:df:95:3a:23:97:2e:
         df:55:de:cd:fb:8d:72:0f:15:88:bf:0c:0d:0f:e7:f0:30:c8:
         a9:a3:ec:e9:37:bf:bf:49:54:71:9d:91:08:39:65:fc:b5:a2:
         74:29:69:e0:e9:85:69:0a:13:61:31:bd:29:d0:51:6c:df:22:
         5a:25:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:21:37 2026 by rpki-client