Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/5ea8a3cf-4472-3607-83db-c2add2d96b21.roa
File:                     5ea8a3cf-4472-3607-83db-c2add2d96b21.roa (raw, json)
Hash identifier:          cQNZvz+hkfzBaO+alNE/fFVxlQDJ6tL3manSI3hUaGs=
Subject key identifier:   01:E1:A6:91:F1:80:CC:A4:8D:66:71:C0:BF:74:AD:0D:ED:41:F2:FA
Certificate issuer:       /CN=a97ec683-752f-402c-9901-cad9c007976f
Certificate serial:       010D0C9F4328584EA792710DD41432871EB47880
Authority key identifier: D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/5ea8a3cf-4472-3607-83db-c2add2d96b21.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2602:812:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:71:0d:d4:14:32:87:1e:b4:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ec683-752f-402c-9901-cad9c007976f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=98d5e931-ff38-462f-b8d9-4199f2412e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:e3:be:50:45:e7:e8:e6:68:f0:45:2b:e3:
                    3c:2c:f5:22:c8:ea:06:1e:f2:6e:b2:1c:44:78:24:
                    84:18:8c:b1:e3:09:b3:e2:c4:da:96:59:14:39:85:
                    a2:ee:45:5b:b2:c2:27:75:19:2b:f9:2f:bf:96:23:
                    7c:38:92:50:de:5a:e4:58:29:82:91:8d:f8:b5:bb:
                    d1:a1:10:9c:76:59:0e:eb:47:ac:cf:ec:ee:69:10:
                    33:8b:04:b3:02:dc:f9:9b:4d:2d:43:74:7f:cd:94:
                    d4:2f:1c:f1:5a:34:f4:d7:9c:85:8d:21:1f:1c:40:
                    5d:37:38:7b:80:2f:de:02:4c:f8:8a:49:f4:5f:6b:
                    3f:ac:68:8c:05:2f:e5:6b:ea:54:a0:ad:55:6e:f7:
                    ea:02:4c:af:7d:80:34:5a:89:37:4c:ef:c9:79:db:
                    b2:bc:48:c8:2a:60:09:13:b1:1c:05:cf:49:4c:a9:
                    f5:bd:45:f5:31:5e:ae:70:5d:3e:35:b9:41:a3:d5:
                    b0:eb:58:10:8d:7d:61:68:ae:45:be:fb:75:63:64:
                    87:b0:97:93:96:e5:52:09:9c:dd:6f:b7:a6:1f:3f:
                    23:8d:f6:aa:26:cb:d2:30:8d:2d:a1:51:fd:38:3f:
                    fa:cb:6b:fa:e7:46:d4:03:c9:e3:4c:e4:1b:9a:b5:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:A6:91:F1:80:CC:A4:8D:66:71:C0:BF:74:AD:0D:ED:41:F2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/5ea8a3cf-4472-3607-83db-c2add2d96b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:4e:09:2d:55:1f:56:02:63:36:1c:0f:9a:f3:8a:52:e9:
         37:b0:74:b7:61:47:f9:01:bd:51:ce:57:a8:df:f1:6b:a6:88:
         7b:21:1d:d6:ef:56:ff:1e:d4:94:03:fe:74:49:90:a0:6c:81:
         15:54:6d:13:c7:56:45:a4:94:f2:52:a6:11:02:85:03:35:ac:
         32:1d:8b:c4:41:5d:2a:83:86:c3:3c:7b:d2:b5:9e:2c:f4:95:
         63:a1:e1:a2:cb:f4:14:70:d2:34:fc:da:75:4d:1c:23:1a:66:
         e9:c6:3d:64:d8:d9:1d:01:9f:2d:92:28:25:71:7a:09:2b:4c:
         94:02:4a:9d:be:90:34:7a:5f:06:04:38:01:30:03:e5:33:02:
         1a:f0:20:4c:04:ec:01:a6:c7:d7:f0:6e:3c:a7:0a:b3:6a:6a:
         54:1a:67:c5:91:de:2c:cf:f4:d5:8b:fb:27:37:2a:8a:99:a7:
         74:04:b4:c5:68:45:c5:5e:eb:8f:3b:e5:44:39:09:43:54:52:
         ca:33:75:68:d6:49:eb:52:9e:b5:d1:11:74:6c:27:6d:71:e0:
         16:0d:57:28:02:94:dd:f8:48:0f:08:dd:37:43:b2:c2:98:1b:
         62:4d:06:d4:c8:71:67:1f:a9:f2:ac:2a:6d:69:16:28:85:5a:
         b4:e5:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:33 2026 by rpki-client