Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa
File:                     f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa (raw, json)
Hash identifier:          W7GWHFTdXmt68dFDLdtMGUWgR0lIzZvioK4KHkQPIkI=
Subject key identifier:   67:1F:35:D6:06:8E:2B:81:92:DB:A0:4C:5F:0D:B3:5D:B3:48:0A:EF
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584ED9C769AB076C628B2F0CF900
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     36692
IP address blocks:        2620:119:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:69:ab:07:6c:62:8b:2f:0c:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=78326539-a6e5-408e-a3e3-67a72510893b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:e0:79:06:4f:04:d7:37:b8:d1:99:d9:c2:
                    2a:6c:ce:60:60:67:e4:ad:fe:25:fb:82:48:08:24:
                    6d:5b:5b:c4:eb:c2:59:7d:8e:e9:18:54:ed:6b:18:
                    6c:ca:45:e3:9a:43:fd:81:f4:ec:35:6b:30:f9:24:
                    31:84:85:41:2d:1a:fe:39:e1:d6:1d:29:bb:61:ab:
                    1a:c0:b3:f4:b5:13:d1:39:44:8a:98:19:f7:5f:9e:
                    96:ec:93:2f:85:f2:b0:6f:f7:54:69:e0:af:b1:a3:
                    fe:24:5c:5c:33:d2:8e:61:dd:56:8f:c0:4b:f3:3e:
                    a7:72:37:5f:7d:e1:b6:34:dc:dc:10:14:6e:d4:91:
                    05:3f:88:31:e8:fa:4b:39:38:f2:a1:28:52:ae:7d:
                    5a:9b:6e:fd:a6:a6:50:4c:76:b0:8d:2f:90:10:97:
                    82:cd:88:df:9d:f9:50:5d:c0:ad:e2:5e:59:ac:d5:
                    e1:d7:17:5c:0f:0a:c2:12:46:17:e9:fc:24:f9:de:
                    c6:f3:fc:be:ad:7c:08:60:ae:d9:05:7a:ca:70:ee:
                    2e:27:f0:53:26:9c:05:80:20:a8:53:56:53:7a:6d:
                    89:47:55:38:07:b9:a2:8d:07:01:3c:64:0d:ac:1c:
                    1f:fd:b8:6e:d2:9e:e9:10:36:e7:bb:8f:38:f7:14:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:35:D6:06:8E:2B:81:92:DB:A0:4C:5F:0D:B3:5D:B3:48:0A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f7392e60-2adc-39ad-91aa-a31fc8bba9a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:3f:3f:26:e3:c2:b5:79:35:37:26:a5:86:47:16:e9:51:
         09:65:60:47:72:43:5e:27:f8:4b:fa:ea:d2:64:f4:dd:3e:1d:
         60:47:14:13:ac:ec:fa:09:54:25:72:c8:0b:db:b4:c4:4a:4f:
         32:5d:41:e9:15:db:8d:ed:25:53:1e:67:36:fd:6a:9f:8d:51:
         27:2e:82:ec:2b:e9:40:c3:cd:9f:0a:22:6d:1d:ac:fa:47:2e:
         4e:01:c5:0e:2a:dd:cf:11:0c:1a:b1:80:12:e1:7f:b9:51:9f:
         bc:50:dd:85:ef:61:91:c3:99:db:93:7e:57:ce:d1:ad:ec:27:
         c4:a4:30:23:1f:2b:8f:75:6f:71:05:77:a7:98:54:35:f0:6d:
         66:2c:a7:d1:de:37:f6:85:f9:8c:dc:a0:eb:5e:66:59:f9:4d:
         b8:94:06:ff:40:0c:5d:25:ec:c2:6e:18:a6:5c:b1:86:aa:a7:
         38:c8:2b:df:56:f5:83:ac:79:24:30:30:2d:8b:63:1b:57:0b:
         6c:d4:a7:a3:46:81:79:f1:e7:d5:ad:19:3f:51:03:48:ec:89:
         bc:7d:cd:63:58:b5:45:ea:d5:1d:a6:52:3f:16:40:c6:c0:b5:
         f4:99:7b:44:69:5f:80:27:17:18:37:44:b0:49:44:b4:81:14:
         9c:df:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:33 2026 by rpki-client