Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/266b72c7-068e-3e59-931f-459ec4f0f705.roa
File:                     266b72c7-068e-3e59-931f-459ec4f0f705.roa (raw, json)
Hash identifier:          +1PE1bjOX0Fxn0dyDuTVhUeLG18U2E36Pjvhu1EO67c=
Subject key identifier:   53:F5:6F:9E:7C:99:D6:E6:59:D6:D4:95:E8:CF:2C:76:E2:7A:3D:2D
Certificate issuer:       /CN=48c4aba6-5e67-450a-b4a4-647523380d01
Certificate serial:       010D0C9F4328584EEA874BA67A39C18F64A31F80
Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/266b72c7-068e-3e59-931f-459ec4f0f705.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        2602:f5df:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:4b:a6:7a:39:c1:8f:64:a3:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=bfd13428-2001-46e7-8e23-2d00ba563630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4b:11:55:6f:a2:b9:79:bd:5b:57:35:4d:ef:
                    36:75:93:30:0c:e7:f2:fc:32:34:12:7d:21:c9:a7:
                    8b:1a:b3:c2:9d:f0:c9:c3:ec:5f:72:85:0c:6e:f3:
                    34:03:1e:0c:da:cf:96:33:15:75:7f:51:6d:7d:cc:
                    8c:fa:77:98:82:b4:33:c6:fe:51:eb:88:08:3f:8f:
                    77:4e:5e:cc:43:fc:08:3b:b8:4a:aa:71:79:74:82:
                    51:80:8f:07:e6:f0:49:3d:d2:e5:e3:e9:d1:dd:32:
                    dc:36:b0:ec:a5:1a:99:d3:67:43:52:37:2e:2e:30:
                    31:a9:b7:6b:62:39:c9:27:7a:aa:f2:17:f1:dc:42:
                    39:a5:92:de:50:cd:16:19:30:ac:69:b8:08:ee:8e:
                    e2:f8:c8:0a:72:fa:8f:15:3e:95:13:b5:94:8e:e4:
                    b6:1e:00:47:4f:70:61:54:da:ff:8a:c1:8c:ae:54:
                    89:6e:07:89:b9:0f:f5:42:0e:c0:18:c0:8a:3c:50:
                    f4:34:5b:91:22:1c:3b:2d:d5:1d:e3:73:41:b4:5e:
                    41:3b:54:c7:42:2a:38:61:50:bf:01:17:03:98:ce:
                    39:d0:cd:c3:53:3a:9f:85:93:3d:23:dc:53:ee:59:
                    8a:ed:41:85:2e:fa:a1:b0:4f:da:c9:f2:5e:71:2a:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F5:6F:9E:7C:99:D6:E6:59:D6:D4:95:E8:CF:2C:76:E2:7A:3D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/266b72c7-068e-3e59-931f-459ec4f0f705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5df:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f2:b9:76:26:c6:a2:5f:2c:82:ce:f2:12:d8:af:d1:22:c4:
         2c:c8:65:50:0e:89:23:5f:f9:85:e0:f1:53:d7:62:7e:04:f2:
         21:03:d1:b1:93:92:97:d9:dd:07:aa:76:f9:29:5c:26:dc:5c:
         f1:6b:ff:97:64:02:e4:c4:e9:0f:b2:7c:68:fb:be:28:0f:88:
         25:e7:c9:00:f9:2b:76:44:bc:16:1d:a3:fe:8d:10:0c:43:8f:
         43:c6:b5:6e:30:0b:20:70:af:b7:e3:ac:6e:6e:58:9d:dc:77:
         0b:da:9c:f3:ab:12:77:2d:b9:7d:7a:12:84:08:9b:8c:7d:81:
         aa:16:1b:e5:42:1d:5c:28:44:ff:7d:9f:b4:8a:e9:5f:42:7e:
         be:b8:56:41:4e:98:2e:c9:ff:12:8c:a0:c2:a2:73:e2:1e:38:
         9d:a8:92:40:99:43:27:53:c2:52:9a:a9:78:8d:9a:fb:10:7c:
         0a:8a:22:ae:6c:96:a8:b8:82:63:03:4e:6a:69:50:40:42:82:
         98:c2:f2:19:47:ab:0e:b6:01:49:74:a8:87:2f:5a:0d:68:57:
         ca:ed:91:9b:cf:0b:c0:cd:48:18:01:52:eb:c3:3d:7f:ef:40:
         69:06:c1:2c:57:a7:72:96:d0:67:10:de:2e:90:9a:16:42:37:
         b8:fa:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:43:38 2026 by rpki-client