Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa
File:                     c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa (raw, json)
Hash identifier:          QNJaymulCes/ghTDEDxIDbeXAtkYqoloeJ/+rK47iYM=
Subject key identifier:   CD:5B:94:52:91:4E:7A:D0:A2:59:79:68:6E:5E:38:CB:01:0A:F7:83
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584F03A7EAC57EE43AB3E0C1A700
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16839
IP address blocks:        2606:3600:115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:ea:c5:7e:e4:3a:b3:e0:c1:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=7ba74ee4-23a1-4aec-86b5-742168ee2ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c2:29:93:66:74:9c:7f:b3:87:30:88:14:00:
                    e0:dc:96:70:38:d1:12:61:14:8a:04:db:8e:f3:25:
                    e5:9c:66:35:40:8f:e8:f1:f6:bb:62:6b:ee:2d:4c:
                    62:39:0c:38:e0:32:56:b0:17:a8:24:50:43:5e:35:
                    c4:ca:dc:cb:5f:34:12:ba:f4:86:2c:26:b4:12:d3:
                    f4:a7:a5:97:86:0e:26:9b:17:be:bf:67:eb:82:d7:
                    19:b5:60:30:32:92:9b:18:25:77:fd:cb:19:72:68:
                    be:8c:ce:b0:23:d9:e9:36:e0:30:69:01:27:5b:0d:
                    6b:e3:96:2a:cd:76:59:3f:3f:b8:62:fb:2d:4a:b2:
                    da:23:32:08:7b:dc:1d:06:1c:98:cc:81:aa:e3:83:
                    db:34:33:14:ef:4a:0e:2a:70:15:2b:cd:a6:67:20:
                    84:35:5f:9d:27:09:ee:27:57:be:66:e8:30:8d:fd:
                    98:b9:ee:5b:e9:d2:dd:fe:c3:f6:5e:8c:df:0f:63:
                    a3:b9:06:ed:d4:be:2c:b6:46:b5:b1:39:c9:d6:dc:
                    b3:66:d7:12:af:c0:32:56:59:f2:61:71:97:f3:95:
                    51:aa:0f:3b:c9:d7:bb:5b:3f:63:92:48:d7:fa:90:
                    61:bf:98:c9:f6:b8:ef:c2:22:f4:01:c6:1d:1b:b6:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5B:94:52:91:4E:7A:D0:A2:59:79:68:6E:5E:38:CB:01:0A:F7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c73db137-a203-3a43-b5a7-6051c0e9dfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:115::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:1b:96:77:49:17:a2:e0:87:01:b3:0a:44:29:8f:5c:ee:
         9c:77:e3:ad:af:b0:fc:dd:18:d2:2a:95:04:a4:2d:0c:dc:dd:
         36:e5:d7:10:c4:d0:f1:ce:5a:d0:6c:9b:57:15:b1:f8:e7:5c:
         e0:82:a5:47:b9:ca:71:17:f0:e3:3c:e9:1a:f2:64:7c:3c:d9:
         b6:3b:db:42:4b:62:d7:44:3a:a7:de:83:ee:b5:74:cb:94:43:
         d2:f8:e2:07:a9:5f:5a:b7:f5:a0:9f:3e:8f:1e:d1:6f:6f:9a:
         2c:ec:28:c6:2f:47:a5:15:76:c3:34:45:9e:82:70:75:2d:42:
         a3:62:13:cd:e9:52:81:49:20:28:eb:c8:ca:5f:12:b9:6b:2d:
         b3:ff:41:01:c6:a5:2b:8e:17:21:06:1e:5f:59:5c:a3:0a:91:
         be:1b:c6:8c:02:50:b2:84:6c:9c:c5:4e:83:39:ae:8a:2a:e7:
         8b:b2:26:57:92:1a:71:ad:50:2d:75:2c:b5:23:82:4a:c0:d4:
         50:40:1d:43:f8:d2:44:94:4d:38:e2:54:35:88:e1:f6:56:bd:
         60:7e:c0:ad:32:ad:6e:f8:3d:4a:45:6b:a4:23:78:9c:59:72:
         36:ee:e3:24:c8:89:c4:57:ba:be:54:ee:23:ed:9a:8e:b8:51:
         32:10:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:09:15 2026 by rpki-client