Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa
File:                     33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa (raw, json)
Hash identifier:          RCO2wh4m9eTshTUhPO8RCSQ26Ebu1cPjS2yw/bHIJ98=
Subject key identifier:   60:C1:3A:B0:13:27:68:C1:9D:1A:3E:32:53:79:A4:7B:4C:AE:DF:4A
Certificate issuer:       /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial:       010D0C9F4328584EED524031A97C93341B681340
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2604:f340:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:40:31:a9:7c:93:34:1b:68:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f13b05c9-223b-48cb-95f0-82b389bd0148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d7:85:83:28:cb:56:69:b3:f1:7b:e5:8c:32:
                    43:33:cd:cb:d0:5a:a0:0b:52:cc:07:0d:1e:b8:1d:
                    2a:58:3e:3d:92:5b:c6:d8:dc:68:c8:d1:53:aa:f1:
                    51:cf:36:e1:6f:3a:55:ae:93:58:c7:9d:44:a7:1f:
                    db:d0:ef:01:57:36:f0:0b:d8:41:9a:14:44:c7:93:
                    30:18:3b:ed:3b:98:b4:f7:a2:d9:a9:30:1b:f1:b1:
                    5b:d9:16:e9:cb:dd:b3:87:68:5e:c9:dc:42:38:a1:
                    88:31:9c:83:f8:c8:93:9d:e7:3e:9e:fa:a5:3d:cb:
                    06:ec:5b:f4:48:c4:6d:fe:8a:0c:c0:c3:77:57:33:
                    6a:39:46:85:c1:8d:62:c4:2c:ed:6f:26:8a:22:cf:
                    7b:15:40:43:d6:9b:70:12:7d:05:14:aa:e4:37:f7:
                    09:5b:e1:bb:37:07:19:60:81:43:15:cb:0b:82:0e:
                    67:23:d7:18:93:37:86:10:e3:43:be:ae:4f:c0:19:
                    9c:eb:d9:54:1f:b3:7f:e8:ad:b9:e5:46:75:0e:ce:
                    5a:15:29:b2:5d:65:c2:01:58:9b:a8:8b:49:5c:2c:
                    fd:3e:23:a4:4d:8a:7f:02:78:ca:0e:0d:92:9b:66:
                    eb:07:da:98:39:56:57:05:42:44:aa:ca:a0:15:e2:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C1:3A:B0:13:27:68:C1:9D:1A:3E:32:53:79:A4:7B:4C:AE:DF:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl

            X509v3 Authority Key Identifier:
                keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f340:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:06:85:92:d5:18:13:88:b7:22:58:9d:2d:59:95:54:77:
         61:65:23:fd:fe:e9:a9:80:b3:36:3f:f6:09:3c:94:ae:8e:51:
         76:54:9a:d3:c1:b1:dc:70:e7:92:fd:84:a6:bc:4d:b1:3b:5c:
         a9:64:c4:58:b9:16:b3:e3:65:94:c5:d0:3a:45:3f:2a:88:64:
         bb:01:73:68:20:26:a7:6f:42:d5:d6:e9:2e:16:e5:69:48:ca:
         c6:ae:0f:59:1d:7b:fb:1f:7b:b9:e6:bf:e1:6b:3e:f6:cd:6e:
         bb:c3:e6:1b:76:01:c1:40:6e:cb:db:7a:31:b0:bd:c2:ec:53:
         26:83:49:7a:94:3c:e2:f2:40:5b:64:a8:2d:97:a4:62:32:dc:
         21:b6:23:2f:98:2d:12:64:41:fe:7d:fe:a4:38:aa:8e:b9:01:
         6f:a0:60:8b:3c:ff:c9:bb:53:40:12:aa:3e:43:65:6c:97:a4:
         ef:50:00:9a:21:a7:ba:72:11:68:a1:fc:d1:8b:0c:ce:c6:88:
         1b:b3:92:4a:09:df:e0:00:08:58:87:5b:ed:8e:62:01:83:0a:
         b3:9f:b6:cc:25:13:34:b5:f9:3e:9b:7f:ce:09:15:eb:43:4b:
         82:fd:00:37:ba:f9:21:8d:06:b4:e8:ac:bd:2e:2c:87:ba:2e:
         98:97:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:34:40 2026 by rpki-client