Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa
File:                     01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa (raw, json)
Hash identifier:          63R4C79HsEuymmb8LXbPQFD+NPH9r5SADpMm5igupHg=
Subject key identifier:   49:3A:2B:5E:0B:0C:F6:1A:95:CB:86:2D:26:CD:E4:9F:B4:62:4C:EB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA6A039D04F8207035AF80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        2620:11a:c000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:6a:03:9d:04:f8:20:70:35:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=35277981-bd15-414f-b166-a3e89a696e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:41:fe:2c:dc:9c:33:86:cb:96:15:2f:51:
                    00:99:4f:a5:6b:76:2d:ef:a4:ec:bd:d5:09:10:b4:
                    55:d1:72:35:54:08:8f:3c:0f:68:66:66:41:ff:14:
                    3f:18:84:bb:0a:9a:11:14:16:d3:46:d2:56:56:e2:
                    c5:ab:d2:a5:e8:75:ba:a0:c5:91:77:a2:99:e2:a8:
                    13:13:c7:ed:5f:a9:39:20:07:58:0e:5c:5a:ae:d4:
                    aa:a8:61:36:11:19:33:a3:4a:b1:ae:d4:c0:3a:11:
                    91:5d:ac:b4:6c:52:e2:97:56:14:8d:3d:1b:35:c1:
                    be:29:11:e5:01:bf:f9:72:5f:13:01:0a:9d:74:22:
                    c4:57:f3:76:04:d9:67:8d:7c:0b:bb:9d:e7:57:00:
                    87:83:b3:0c:03:a5:c3:42:ab:2e:38:96:f9:af:3e:
                    8b:c4:71:c2:51:65:ef:97:60:f3:57:17:a1:7a:9d:
                    59:46:37:2c:f6:f0:34:ba:82:d8:6f:1b:04:6b:06:
                    06:aa:ec:8d:40:54:3c:91:3a:d7:09:e9:78:91:7e:
                    45:7b:ec:33:5d:c1:31:98:e8:57:a7:cb:56:ca:da:
                    87:96:9c:68:6b:b8:a3:57:0a:36:76:08:32:25:e9:
                    bb:49:d8:51:26:c6:0d:36:f8:45:c3:6e:24:53:76:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:2B:5E:0B:0C:F6:1A:95:CB:86:2D:26:CD:E4:9F:B4:62:4C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/01566a5a-9ee2-3889-9c18-acc17fb2bdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:a7:96:33:b4:3e:07:2c:ad:24:00:e0:3f:37:c0:73:b3:
         01:41:db:3c:d0:95:b3:3f:e4:35:23:9a:6b:55:f9:7f:c4:78:
         1b:d9:b4:65:3b:bd:2a:fb:e9:89:70:8d:12:65:e5:ee:cc:90:
         55:a9:da:34:16:be:cd:0c:d7:54:cb:10:db:6f:50:83:74:e6:
         55:e9:74:3e:03:0a:fe:ec:c8:a7:4a:1e:17:7a:70:c7:8b:be:
         60:14:4a:64:96:6f:d9:00:16:70:0c:be:85:74:e1:df:33:c1:
         d3:64:28:4a:60:ce:ad:b8:ef:08:cf:e9:e8:98:58:cf:2b:78:
         e5:c4:5d:d0:80:08:65:c2:3e:4d:a0:33:e8:15:35:d6:b3:be:
         09:71:19:71:2f:dd:20:2e:97:3a:29:cc:06:57:6d:d5:50:21:
         8a:6a:bb:a9:9b:76:38:53:0d:83:8f:4a:13:b0:34:42:cf:b5:
         0c:08:4f:16:d4:80:e4:03:16:13:e8:89:3a:32:f0:6c:db:27:
         33:7c:aa:3b:da:6f:e6:e8:4e:0e:a2:63:c4:33:ee:31:f7:65:
         fd:35:bb:f0:a6:87:f5:a1:91:e9:65:08:3d:5b:1f:7f:54:e0:
         05:7e:00:67:be:17:d5:9c:b4:22:3d:0a:ce:81:97:c8:54:aa:
         b0:0e:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:08:23 2026 by rpki-client