Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
File:                     5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa (raw, json)
Hash identifier:          rGvyyHQ6q9LX9oSEcGki46ZFDsUW9hOdIkhnmozZAnA=
Subject key identifier:   A2:8E:77:D4:25:43:AA:C3:BF:6C:C1:D9:82:AE:2D:AF:DE:BD:87:C1
Certificate issuer:       /CN=22ce2863-e26f-47ca-8b36-16048be7f337
Certificate serial:       010D0C9F4328584F0242270D21F834B76E139380
Authority key identifier: 26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     398931
IP address blocks:        2620:af:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:27:0d:21:f8:34:b7:6e:13:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ce2863-e26f-47ca-8b36-16048be7f337
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=1e5af072-ef5b-47e4-9479-1cf90f0fde06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:f5:e8:be:d7:b7:9d:e5:24:59:64:60:7c:
                    13:df:81:5b:bb:59:5d:35:f3:02:61:d1:5d:f7:5c:
                    bb:8e:eb:be:fa:0e:88:1f:aa:d2:9f:b7:f0:5d:0e:
                    dc:46:ae:49:97:e2:0d:fd:18:9d:c6:5d:83:36:53:
                    27:a4:d7:3f:17:6e:e5:d7:bd:21:54:56:0a:98:05:
                    af:b5:9c:da:b6:c7:aa:30:21:94:c3:bd:64:50:da:
                    93:ef:55:6b:40:68:b4:82:5e:3e:04:49:a9:14:f5:
                    fe:85:69:fa:ed:5c:1a:43:ca:4b:9f:6c:cf:5e:af:
                    36:ed:a3:12:de:73:31:a9:c6:25:fb:29:d7:06:00:
                    98:ee:46:a7:4a:82:d8:dd:1b:30:a3:ae:56:bf:2c:
                    43:f3:17:8c:3f:e4:e4:41:86:df:42:2f:94:89:ff:
                    91:86:54:1b:fe:34:04:06:20:b8:34:a8:59:4a:97:
                    ac:13:b8:39:d3:a3:22:dd:ae:99:83:91:ff:90:06:
                    39:b6:9c:3f:1e:3d:fc:09:7c:05:60:1a:24:0d:67:
                    21:8e:7f:66:13:5f:95:08:ed:91:e3:07:ec:b9:b5:
                    69:91:06:40:81:b4:8d:0b:0e:8b:c5:ae:97:78:69:
                    5a:15:1d:96:c2:d2:b0:39:43:53:12:aa:fc:5f:ab:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8E:77:D4:25:43:AA:C3:BF:6C:C1:D9:82:AE:2D:AF:DE:BD:87:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl

            X509v3 Authority Key Identifier:
                keyid:26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:af:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:d1:41:08:ba:65:52:9f:6c:4b:4e:af:ae:d4:ae:89:93:
         20:38:88:de:39:3a:b9:be:f1:1a:9d:62:ce:ef:7a:f3:78:1a:
         fa:33:50:ff:bd:50:88:5d:a3:49:d9:b2:67:44:42:e1:12:fb:
         ed:87:cc:e2:2b:9b:e9:4b:53:cf:1c:15:a6:ca:5a:e8:9b:dd:
         6d:7b:5b:5a:f9:ea:48:25:87:c8:fc:6b:fe:ba:15:f8:12:a4:
         3a:85:25:6b:f4:78:e5:db:9b:a7:c3:10:62:df:4c:b1:3a:1d:
         fa:28:e9:66:ca:ce:b2:5d:d8:25:bc:6c:5f:53:2c:69:be:bf:
         c6:30:db:08:1f:15:8b:ec:ff:2d:f5:80:3c:1c:93:bd:d6:18:
         5c:53:1d:9d:47:ac:77:7f:8e:58:f4:7f:2e:c6:2b:8a:cd:65:
         59:8b:6a:10:f6:6f:aa:6d:ea:74:e3:8f:1d:cf:6d:a1:d5:38:
         89:51:4f:0b:50:e4:1f:9b:80:5d:a1:b6:84:fc:71:9a:e8:81:
         8b:19:6c:d9:c3:12:0f:e6:7a:cf:77:54:1e:80:3c:3b:aa:a0:
         0c:90:b5:cb:9a:63:6f:c3:09:88:dd:4a:01:50:d6:77:6d:71:
         28:a4:0b:2a:da:f2:2e:8e:3a:7d:5f:3b:30:f2:f3:96:a9:0e:
         5a:82:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:04:21 2026 by rpki-client