Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5286fd4-cf6e-3518-9bf9-ae45f011cf84.roa
File:                     f5286fd4-cf6e-3518-9bf9-ae45f011cf84.roa (raw, json)
Hash identifier:          KX+o4zTXabJd8oxTXtVZJXcGDBgbWE4tOR5tub71eds=
Subject key identifier:   6E:D1:CF:8D:F8:CF:C4:A8:7F:F8:DF:D1:22:0C:D3:68:5E:5F:49:82
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF9E207F9A95E9F9912F2DD80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5286fd4-cf6e-3518-9bf9-ae45f011cf84.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     54253
IP address blocks:        2600:200e:4000::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:07:f9:a9:5e:9f:99:12:f2:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=d9c766fd-66d5-4dc1-9fee-49baf1ee05a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:ef:19:ad:05:7b:69:e0:3a:80:9f:01:6c:
                    7e:79:64:98:f3:e5:22:b0:78:c3:be:0e:12:c6:f8:
                    ca:cc:13:c8:c3:fe:c9:e3:75:a5:fb:03:49:f4:f6:
                    5b:e4:ae:55:97:dd:20:36:a7:14:6f:be:ca:b0:0c:
                    cc:5c:16:ac:e5:10:76:b3:23:b6:df:02:15:b4:e4:
                    9a:d6:df:d1:63:88:cf:96:11:f3:de:dd:f0:ff:45:
                    c1:fe:3a:7d:c4:6d:ef:68:99:c0:c0:a4:29:7d:c9:
                    9f:3b:74:22:51:e9:4e:bf:08:9c:bf:71:f6:b1:47:
                    2a:d4:34:47:fc:67:0e:0b:ac:48:0d:74:8c:4e:3e:
                    97:0f:10:01:b3:b6:07:90:ed:78:cd:22:99:c2:61:
                    8d:c9:c3:e5:c0:7a:b4:ce:22:9c:74:33:0e:cc:7d:
                    94:88:53:f7:ec:cb:a5:60:7a:f7:f1:46:91:99:77:
                    15:05:10:7b:f4:bc:14:08:47:06:58:f2:de:ee:09:
                    3d:a4:1c:a3:10:9b:63:16:88:05:4c:29:c8:af:fd:
                    b6:c3:b5:20:cb:dc:ab:10:b8:56:34:15:34:7a:e8:
                    61:9f:64:56:3d:af:6e:01:cd:94:7b:97:ad:f9:66:
                    0d:2e:cf:52:60:30:69:85:20:40:2d:8d:86:ea:6e:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D1:CF:8D:F8:CF:C4:A8:7F:F8:DF:D1:22:0C:D3:68:5E:5F:49:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5286fd4-cf6e-3518-9bf9-ae45f011cf84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:200e:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:3c:c0:33:c6:46:96:75:ab:8a:33:dc:87:98:37:7d:07:
         98:b5:c0:87:b5:82:f9:1d:0d:84:75:97:9a:c5:ec:cd:e7:38:
         08:a1:6d:aa:f3:99:5f:7b:7d:94:d0:31:c3:9c:43:92:be:98:
         ec:5c:e0:5f:ad:cd:fd:5c:a4:66:06:0f:22:cf:e7:3f:5e:ca:
         52:fa:3c:0f:aa:2d:f1:73:37:f9:2c:21:84:3c:de:d7:7e:26:
         6b:04:00:1a:62:ea:34:b6:80:2c:ca:fa:e9:ba:6d:d1:0c:57:
         1f:24:14:5b:03:44:27:7a:19:b3:7f:1e:2a:8e:89:8c:3b:c8:
         92:6a:13:f5:55:27:d6:de:07:86:6d:29:91:7f:73:da:b9:74:
         4f:e6:0b:96:ff:dc:fb:b2:01:56:25:03:17:d8:44:32:a5:69:
         24:16:56:4f:f5:66:6b:12:6b:83:7f:57:f4:e8:83:e8:d3:bf:
         d0:76:c1:42:7e:06:8c:c4:4c:6d:e0:ff:50:d9:2f:24:8f:1d:
         fe:21:5e:32:bd:56:75:a5:77:e7:57:eb:f2:b4:3d:55:11:e6:
         46:89:e2:ef:81:71:51:d0:24:c5:02:22:a9:51:6e:e2:5a:ea:
         83:cb:d3:92:52:1a:01:69:4a:60:68:b1:ce:a1:95:5e:7a:2b:
         81:42:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:01:27 2026 by rpki-client