Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa
File:                     dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa (raw, json)
Hash identifier:          sk3qkEqkkvFjsdFLtm9GqNbbC/B5GH4GC3xY+ZvC9oU=
Subject key identifier:   8E:27:8A:58:74:2F:A9:6A:CE:D4:E8:D9:5D:16:AE:ED:FE:2A:2C:8A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B94738E885A2009250A6AE0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        2605:4300:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:73:8e:88:5a:20:09:25:0a:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=a2ec5b28-c851-4385-9c01-29acca280b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:42:82:88:7b:03:79:7b:db:d7:59:40:22:
                    2c:e8:d2:8a:7d:ea:61:57:26:ce:bd:1c:67:7a:ee:
                    82:fb:c9:de:7a:56:a1:1b:81:55:d4:9a:98:50:3d:
                    ee:9e:bb:69:32:10:52:03:f2:6b:18:25:37:64:6f:
                    11:41:8d:47:3e:fe:d2:c1:82:b1:42:b9:88:e7:ca:
                    8e:94:72:e0:da:b7:a0:e0:65:20:95:a3:7e:64:3b:
                    e4:4f:c6:e8:90:dd:a9:b2:c6:de:2f:87:38:ed:8b:
                    38:66:34:b5:6a:5c:04:7a:69:4e:de:75:bf:6b:27:
                    36:51:f0:57:cf:a4:18:b4:1f:87:a9:f7:b8:50:82:
                    59:42:7a:4d:49:17:f3:60:06:a8:e0:1b:5f:74:1e:
                    92:37:37:d9:a4:c2:41:7c:57:01:bc:38:15:7a:cf:
                    35:c7:52:e8:94:3d:79:a1:09:73:ab:39:b0:23:b1:
                    7a:e7:8e:8c:64:d5:25:81:a2:9c:fa:d2:9b:e1:66:
                    c1:b4:c5:9b:3e:f6:7d:57:bc:4a:98:41:f6:1c:0e:
                    3b:5f:75:ca:ba:17:cb:91:f0:aa:0c:d4:bb:01:0f:
                    85:bb:24:bd:54:63:35:21:f9:ad:0e:c1:58:0e:57:
                    03:91:8f:51:0b:38:57:7b:26:a2:de:89:b3:da:b4:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:27:8A:58:74:2F:A9:6A:CE:D4:E8:D9:5D:16:AE:ED:FE:2A:2C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7a:16:e1:f9:5b:c9:29:fa:43:30:41:35:5d:aa:d7:04:85:
         82:4c:3d:44:ce:98:65:7e:2e:07:83:d6:0e:52:f5:fb:aa:0a:
         87:d0:78:dc:34:cd:ae:27:0a:4f:9c:60:25:3c:98:e7:91:78:
         31:85:23:78:87:ce:a9:41:60:c6:1e:f0:c0:65:b3:4e:3f:24:
         8c:10:ec:eb:89:32:45:3b:c3:50:7e:01:2a:b2:ba:ce:ae:0b:
         a9:a4:d0:e0:13:0c:b4:22:3c:7b:98:f3:5e:5d:ba:0a:ea:42:
         44:3c:54:3b:58:ab:1d:52:83:90:1f:52:17:87:4e:c9:0d:bc:
         2b:be:78:19:cc:1d:17:2c:9e:c3:00:3f:7a:c3:03:81:c0:49:
         7b:82:6b:3b:18:20:5d:cf:02:38:57:cd:32:78:1c:4d:c1:a3:
         9b:a7:d0:7c:27:88:04:55:e3:d4:9e:a7:5e:4f:88:fb:9a:68:
         42:dc:b5:b6:71:52:19:1e:98:72:c0:4d:ba:2b:87:29:9c:31:
         d8:da:1f:37:67:67:b4:ef:b8:14:4c:d8:b3:4f:66:e1:bb:47:
         1a:0c:90:cc:11:01:c5:87:df:9e:ab:55:75:4f:87:ca:ac:26:
         2c:2e:e5:51:6e:2a:03:f4:6c:d8:34:6f:38:01:e3:cd:3f:6b:
         df:5e:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:36 2026 by rpki-client