Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
File:                     ee4cc7b7-5280-3913-ba01-72e16a155541.roa (raw, json)
Hash identifier:          Dk/WlbWa+487Lzxxnn+qiPLVtVzNunrvhuNm/D3/t94=
Subject key identifier:   D8:96:1B:9C:B9:A2:12:6F:13:CE:87:42:A6:23:A2:9C:11:B5:70:72
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F4328584EEEB75C0D1BD5B3ABBC65E0AA
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2620:c3:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5c:0d:1b:d5:b3:ab:bc:65:e0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=42a20f11-c135-4ea6-b7cf-1f2134df8776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:66:ec:f1:37:62:40:ca:c5:74:11:09:05:
                    02:05:57:38:53:9d:48:cb:1b:0e:b4:f5:b4:3a:f3:
                    8c:6c:ec:53:9d:18:4a:1d:3d:94:0a:50:74:97:b4:
                    d1:c5:14:d1:28:2a:d2:6c:29:cb:84:31:b3:e0:54:
                    7b:c8:4f:dc:ff:e8:fb:33:66:39:e4:32:8e:ee:8b:
                    c8:74:40:24:72:5a:76:29:23:2e:c3:9c:07:c9:f3:
                    1e:3c:f2:41:f4:92:6d:0b:3f:94:a0:c9:87:10:9a:
                    48:de:ac:60:1c:0b:4d:e4:84:55:fb:e4:4a:65:e5:
                    39:e1:bb:3a:76:dd:57:e8:7c:43:8f:1d:9a:02:51:
                    bf:72:87:66:13:c4:a6:0c:b7:08:52:3b:1a:03:51:
                    e5:79:1a:53:bd:a4:d5:ec:60:b1:ce:dc:89:8a:06:
                    d8:a4:1f:97:b8:44:4d:63:42:7e:92:3d:2f:86:15:
                    23:4d:c5:8f:cc:eb:52:83:d0:ad:80:db:bc:29:94:
                    7b:57:49:4c:3c:21:8b:69:1a:5c:ad:9b:f1:fa:9e:
                    5c:c2:78:5c:3e:36:3a:fa:3a:52:26:7d:52:2a:ea:
                    74:6c:36:28:8a:4e:24:3f:ac:5b:60:83:c8:65:7c:
                    c5:c4:7a:06:4a:20:07:fe:87:5b:93:b8:15:48:d0:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:96:1B:9C:B9:A2:12:6F:13:CE:87:42:A6:23:A2:9C:11:B5:70:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:43:4f:91:e3:a0:0a:1c:c2:7a:1f:bc:b8:41:b4:bb:dd:a6:
         63:d6:a3:b7:f0:af:53:be:13:8d:50:70:4e:bd:d3:99:02:47:
         6b:48:14:35:11:c5:53:f7:7f:5e:07:9f:01:ee:a9:6d:6e:c8:
         10:2a:f9:03:c7:a6:89:40:c7:c6:db:c3:8a:45:55:1a:6b:57:
         05:a3:fc:1f:a2:c5:6a:e9:d3:9b:84:69:56:91:ee:19:b8:f3:
         8f:0d:d9:92:87:48:79:cd:44:21:75:e8:c0:7b:d7:76:05:05:
         0f:48:56:f2:cc:32:71:ce:7e:a2:0f:ff:9f:ab:9e:fd:b5:4f:
         7b:c2:59:d5:5f:58:35:af:21:37:4d:ae:18:56:1e:0d:2a:27:
         83:8b:8e:df:12:19:b1:bf:78:f9:b7:3c:d8:c4:f9:d0:82:34:
         e7:b5:8e:f4:e9:6f:dc:27:ea:00:82:2c:1c:15:a7:40:f8:aa:
         a7:b1:79:96:b3:01:99:02:c7:1c:22:3f:48:8b:0f:87:96:29:
         91:16:6c:3f:80:43:1d:30:39:94:ff:69:24:ff:89:e9:52:56:
         87:7f:e4:a0:0d:59:43:13:5c:d9:19:93:70:a5:a8:f3:62:64:
         0e:ac:03:d2:55:6e:d4:b6:f0:60:0b:de:db:9c:62:a4:76:e8:
         1b:f8:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:11:29 2026 by rpki-client