Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/d83ec3a4-9a28-3ea2-80bd-d398d4f503f9.roa
File:                     d83ec3a4-9a28-3ea2-80bd-d398d4f503f9.roa (raw, json)
Hash identifier:          tnjAHo0GiY1t0qsAa0gYRHZ87wjGCh1j+API4UjZ1SI=
Subject key identifier:   23:D4:95:B5:66:7C:EB:44:C6:68:83:BE:C1:21:5D:4A:78:39:E2:C5
Certificate issuer:       /CN=664e4c51-f7b5-453e-a7b0-8081a6404662
Certificate serial:       010D0C9F4328584F1662C8A889C366A68AF95C80
Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/d83ec3a4-9a28-3ea2-80bd-d398d4f503f9.roa
Signing time:             Sun 06 Sep 2026 18:02:16 +0000
ROA not before:           Sun 06 Sep 2026 18:02:16 +0000
ROA not after:            Sat 05 Dec 2026 19:02:16 +0000
asID:                     398578
IP address blocks:        2602:ffa6:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:16:62:c8:a8:89:c3:66:a6:8a:f9:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662
        Validity
            Not Before: Sep  6 18:02:16 2026 GMT
            Not After : Dec  5 19:02:16 2026 GMT
        Subject: CN=b266acdb-917f-4c2b-9d0a-b10d8b5da364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:35:36:d5:0a:52:dc:f5:4f:11:c1:5a:07:
                    18:20:68:0a:de:14:ee:b4:3c:ac:78:c0:93:0d:46:
                    b7:fe:d1:a6:14:55:3a:42:e4:1b:8d:fa:43:8a:a5:
                    02:99:59:b2:72:8e:93:ba:a7:8d:69:7f:d9:79:95:
                    95:ca:0b:60:d2:34:30:e2:6b:21:f1:85:72:67:4e:
                    2f:61:b7:dc:4b:0e:e9:fa:8b:05:03:b3:85:7d:7b:
                    97:80:52:43:06:ed:77:b5:66:21:da:e2:d0:dc:24:
                    ad:2f:44:3a:c1:76:b6:38:e5:fb:2f:88:1f:04:43:
                    26:0b:60:4b:e0:39:d4:5c:17:53:c7:22:0e:22:05:
                    02:de:c0:96:ee:5d:dd:46:b4:38:3c:af:2d:1c:c0:
                    39:27:8c:21:99:b0:e1:81:6b:b8:c8:c1:2e:23:a0:
                    05:f1:03:56:a4:9c:31:9a:7c:16:18:e5:e8:4b:b1:
                    90:fc:99:f7:23:ae:98:f0:12:4b:bd:8f:28:ff:e0:
                    30:26:3e:48:4a:7e:7c:18:76:79:2b:94:8e:02:a9:
                    9c:ad:3d:b9:19:83:10:bc:3c:0c:2d:c3:94:3e:9f:
                    5e:12:e3:31:da:fe:54:af:c7:c1:c6:30:c7:c0:f0:
                    d3:3d:10:89:7d:49:cb:7c:47:68:b3:d1:cc:e6:a5:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D4:95:B5:66:7C:EB:44:C6:68:83:BE:C1:21:5D:4A:78:39:E2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/d83ec3a4-9a28-3ea2-80bd-d398d4f503f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl

            X509v3 Authority Key Identifier:
                keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffa6:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:9f:23:ee:95:cb:2f:00:ef:5e:c5:ed:1a:9e:0c:1d:fc:
         8b:57:97:e3:02:50:7e:34:22:0b:86:36:2a:04:36:db:43:4c:
         c0:0d:74:46:1e:4e:57:e7:59:b2:ea:c1:c5:c2:40:66:f3:39:
         e4:70:62:33:1c:89:92:d7:4b:e8:d7:e7:bf:9b:80:d3:d0:83:
         99:18:b9:84:74:8c:08:ed:b8:a5:b7:ff:46:49:8d:5a:de:88:
         1d:97:f8:84:64:1d:55:3c:8e:f9:7c:07:59:7d:dd:03:d4:67:
         5f:df:e9:1f:cf:ad:ba:7f:5e:f4:93:d2:e6:9b:89:6f:84:70:
         05:89:41:1e:92:36:e4:ae:24:a1:5f:6c:2c:08:33:a9:b8:bc:
         de:96:23:2e:2c:dc:35:80:79:22:01:7e:6a:34:26:23:2f:e7:
         74:dc:d3:d0:65:4a:17:54:cf:88:30:51:3b:af:ff:5e:cf:2f:
         1d:a6:f4:12:36:f7:00:a0:70:dc:c0:2f:5e:c6:b2:6f:06:8c:
         10:d1:7d:47:8c:dd:a3:cb:f8:c2:a1:76:08:53:5a:d5:26:2c:
         16:f8:27:55:33:a2:cc:cc:12:f2:39:d6:61:e3:88:69:48:bb:
         a5:dc:08:48:23:8b:0a:a2:fb:a2:2f:a2:04:c9:67:0f:96:fa:
         03:e5:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:53:08 2026 by rpki-client