Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef/e63e809e-3ef8-3713-9044-bf172cb02caf.roa
File:                     e63e809e-3ef8-3713-9044-bf172cb02caf.roa (raw, json)
Hash identifier:          u+AwAf1cmyPRdjS5MWcpjzntoJpDiaZyXgrEnj7WMtg=
Subject key identifier:   23:B4:76:11:AC:96:50:66:F9:0B:84:93:9E:77:21:A7:FA:5C:05:A3
Certificate issuer:       /CN=71548571-52fd-46fd-acc2-2e8c4903caef
Certificate serial:       010D0C9F4328584F0D8A110D63EC2F588C5A8040
Authority key identifier: 78:05:22:E2:90:DA:B4:1D:6D:6F:E8:8E:44:76:EE:47:F4:D5:A1:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef/e63e809e-3ef8-3713-9044-bf172cb02caf.roa
Signing time:             Thu 03 Sep 2026 13:59:09 +0000
ROA not before:           Thu 03 Sep 2026 13:59:09 +0000
ROA not after:            Wed 02 Dec 2026 14:59:09 +0000
asID:                     63154
IP address blocks:        2620:11d:2000::/40 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef/71548571-52fd-46fd-acc2-2e8c4903caef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef/71548571-52fd-46fd-acc2-2e8c4903caef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:8a:11:0d:63:ec:2f:58:8c:5a:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71548571-52fd-46fd-acc2-2e8c4903caef
        Validity
            Not Before: Sep  3 13:59:09 2026 GMT
            Not After : Dec  2 14:59:09 2026 GMT
        Subject: CN=1ec38b7d-a426-4703-928b-47f6cbb32d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:31:10:58:94:2c:9d:b0:3d:39:0e:ef:bb:be:
                    c8:99:10:2e:0d:c5:23:dc:cf:19:e9:e3:30:e6:ec:
                    6b:2a:80:e0:83:82:62:52:54:1f:6a:85:50:8f:bd:
                    2f:5f:05:64:3a:45:af:dc:ef:80:1e:72:c3:32:61:
                    87:e7:47:70:c7:2c:ba:62:00:39:90:37:0e:f2:37:
                    e9:0d:b0:56:cb:45:86:fe:95:81:05:8d:25:0b:4e:
                    d4:05:9e:7e:7b:c8:08:af:cb:6e:8c:58:cb:fa:22:
                    d2:3a:48:1d:89:00:85:c6:e2:25:8b:a4:45:3b:dd:
                    37:b0:0d:ee:97:58:71:67:fe:9a:62:9f:af:d9:2c:
                    6d:b5:79:d3:26:e1:ac:6c:39:89:f2:c6:7b:d1:2b:
                    a0:48:e8:30:d3:ff:d0:8e:07:f2:44:d3:08:06:da:
                    c8:a7:b4:40:ea:0f:1c:08:c1:8c:8c:d2:6c:7d:e0:
                    ec:ba:1b:fb:96:77:63:f6:2a:8f:43:cc:fb:6f:e9:
                    a5:7d:f1:66:1c:18:20:af:de:8e:a7:bd:a7:46:f9:
                    c4:d6:f9:ed:8c:f2:c0:77:8b:e9:83:b7:e2:b1:23:
                    04:91:7c:2c:22:8b:a8:e9:1b:83:09:f8:02:49:b7:
                    fe:63:e3:ea:bf:0f:45:82:42:5e:65:cf:d1:fd:83:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B4:76:11:AC:96:50:66:F9:0B:84:93:9E:77:21:A7:FA:5C:05:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef/e63e809e-3ef8-3713-9044-bf172cb02caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef/71548571-52fd-46fd-acc2-2e8c4903caef.crl

            X509v3 Authority Key Identifier:
                keyid:78:05:22:E2:90:DA:B4:1D:6D:6F:E8:8E:44:76:EE:47:F4:D5:A1:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/71548571-52fd-46fd-acc2-2e8c4903caef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11d:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:f3:91:44:56:b9:b2:15:1d:6c:d3:09:67:c6:ea:ad:7c:
         da:12:a6:2f:72:46:7b:92:10:fc:25:d5:29:6e:63:dd:ad:23:
         23:c4:76:91:98:26:c0:9c:01:e7:75:fb:9a:04:e9:18:bc:cb:
         8d:07:02:40:b3:9c:3e:49:3c:27:c4:d5:bb:7d:d0:ce:50:d9:
         fe:56:6e:4a:c7:77:cc:9f:b8:97:30:b0:14:c2:d3:ef:fe:f1:
         d9:93:04:8b:93:d9:95:99:c7:d2:f8:70:ff:59:7a:43:cf:ba:
         49:0c:03:a2:3f:ae:c9:4b:ae:44:00:9f:7d:26:66:cc:41:f1:
         da:46:8b:04:a1:93:2d:01:97:04:c5:f7:55:9b:b2:13:d8:c2:
         c7:17:31:ba:7d:2a:69:4e:90:87:63:10:b5:6a:a8:db:1c:8c:
         0a:32:a8:df:28:2c:5e:4a:55:cb:4f:69:8d:36:f1:42:0b:b2:
         13:3c:cc:98:d3:28:dd:d2:f9:87:bf:be:88:e7:35:68:a3:62:
         55:9d:4a:74:d1:ec:28:a9:eb:54:73:8d:b2:37:32:8d:f2:d0:
         db:e9:de:f6:54:77:ce:73:02:15:a7:55:40:f0:94:d4:b8:a6:
         c5:87:9e:5e:11:b8:66:ab:a6:54:b4:a5:15:0d:01:db:03:04:
         e9:37:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 05:29:25 2026 by rpki-client