Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/20a1d198-4087-3854-9030-d83914ba49e0.roa
File:                     20a1d198-4087-3854-9030-d83914ba49e0.roa (raw, json)
Hash identifier:          T8UgZyPDelscEMvUca3PB0JBB+BmUvUz5Z3s5sLqZaA=
Subject key identifier:   CA:A3:29:F9:31:8D:DA:55:75:70:78:33:D6:9D:14:9B:2D:BC:E6:80
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F4328584F1CC79E61A05E8EBD9E3F4140
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/20a1d198-4087-3854-9030-d83914ba49e0.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     10753
IP address blocks:        2602:ff49::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9e:61:a0:5e:8e:bd:9e:3f:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=42d83482-d337-4bc8-aeb8-f079a1d4c534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:37:b9:4b:b5:0a:71:2b:0b:7a:6d:33:36:
                    95:5d:8c:e1:0e:e4:1c:7d:21:d2:56:4d:1c:dc:27:
                    50:83:6f:d4:3d:ce:01:64:30:a6:6a:b0:35:6e:b0:
                    32:fa:08:bd:45:ee:0f:ad:01:42:0f:d0:eb:0a:80:
                    b8:f5:4e:d5:0e:8c:d4:b9:b5:ad:be:9e:25:c6:1b:
                    02:3d:7f:d8:09:5a:f5:14:35:68:42:b5:2c:ac:71:
                    5c:f5:cd:41:cc:6c:10:d9:5d:92:ef:e6:ce:3e:d1:
                    08:fb:fd:7a:bb:78:28:42:9c:d6:a3:46:80:af:89:
                    a8:ac:03:34:5a:ac:0b:cc:29:a7:a0:06:de:88:9d:
                    d0:d9:ad:22:b4:c1:0a:1d:ca:29:9b:7f:bc:a1:bd:
                    63:1e:c0:2e:77:c6:ba:2f:db:51:99:8f:3c:12:e2:
                    6b:02:25:9a:d3:e8:e7:02:d7:d2:c1:19:59:20:d0:
                    19:39:27:69:e1:18:ce:e5:83:1d:39:49:8d:02:7f:
                    06:9f:6f:0b:de:51:68:2c:0f:50:5f:55:ee:72:ca:
                    28:7c:23:b4:12:71:62:76:bb:f2:53:16:32:64:5e:
                    8f:d4:a0:53:92:48:61:90:5e:8f:03:0d:47:01:d2:
                    b6:7b:ed:5b:23:cc:db:ca:dd:b1:2a:71:d5:9b:8a:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:29:F9:31:8D:DA:55:75:70:78:33:D6:9D:14:9B:2D:BC:E6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/20a1d198-4087-3854-9030-d83914ba49e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff49::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b1:cd:62:95:79:6a:df:dc:27:36:58:9c:31:6d:c8:53:c2:
         66:f6:2b:a2:e7:de:c3:6f:d7:25:c5:e2:db:39:6e:19:63:27:
         3f:8d:f9:cb:3c:bf:ac:7a:90:14:7e:6e:4b:e2:cb:48:5d:ea:
         ca:48:98:ed:a7:1e:38:92:f1:3f:43:4f:69:2a:b1:32:ee:e4:
         27:ec:da:c1:3c:e0:e4:6b:01:f1:10:22:d9:57:79:ae:b8:35:
         dd:23:ca:8f:9e:6b:67:64:57:a9:6c:ff:bd:7d:45:c6:23:69:
         7b:60:cd:06:12:a4:69:21:31:86:85:65:b6:07:95:a1:e4:5a:
         76:41:cf:7b:17:f7:17:f6:1a:02:64:3c:ee:3e:4c:5b:40:8a:
         11:2a:17:3f:fd:eb:9a:87:bc:62:3b:05:2a:97:f7:17:1c:0c:
         3a:d9:7a:23:f5:d3:54:80:bf:68:0e:6d:4e:2a:48:5d:cb:f3:
         ee:14:04:86:ac:67:c0:36:67:80:21:fb:a3:32:b6:d2:3b:b7:
         f0:5a:fc:01:2a:32:d2:00:cd:a3:2d:f7:42:3c:b1:44:24:fa:
         5b:06:ad:b5:13:e8:17:09:51:65:71:0d:ce:89:81:1d:d1:72:
         a0:bb:64:a0:25:eb:39:e9:a6:13:f5:f5:ea:4c:13:55:97:09:
         ea:db:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:03:51 2026 by rpki-client