Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa
File:                     7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa (raw, json)
Hash identifier:          PpGFbfqW+izsA3PDDgjsWKJy5AGzZtN5u17AgrODtDo=
Subject key identifier:   F1:29:A6:BA:27:5C:45:00:ED:68:C8:59:43:33:EB:BA:3C:1C:35:A6
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F4328584F146793AB89D569E6E34C85C0
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     16686
IP address blocks:        2620:49::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:93:ab:89:d5:69:e6:e3:4c:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=a8f26b32-d618-4d6a-925e-ff37e85cfacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:17:e7:3a:83:82:66:d5:90:11:74:5f:f0:
                    da:f1:9a:90:c3:6a:ec:13:9b:ca:d8:2a:4e:a1:e0:
                    63:91:93:40:46:3a:37:8f:46:e0:bd:b4:93:62:cd:
                    f2:d7:78:4a:c5:cc:87:e5:f4:21:5d:f4:f9:3d:f6:
                    14:f4:a8:9f:1c:ea:e3:dd:4d:b1:c7:7c:d5:54:a8:
                    82:92:c8:53:c3:04:61:87:aa:ae:02:73:69:f9:4f:
                    29:b6:e5:aa:b0:66:7b:fe:57:9c:1f:de:15:f1:6c:
                    73:61:19:39:96:7e:66:ed:90:fd:4e:0d:53:20:52:
                    68:3f:f8:9e:de:7b:4c:6a:11:07:50:f4:1b:bc:c5:
                    57:b0:87:25:f5:1f:b9:09:9d:f3:15:dd:94:0d:8e:
                    a0:c5:09:eb:32:c2:32:72:d4:d1:91:50:06:9d:7f:
                    e5:99:e0:be:38:b0:6c:dd:da:7d:a3:39:e5:0c:76:
                    f1:bd:6a:8d:32:8f:27:d0:a3:95:3a:6e:7e:f4:cb:
                    55:83:3e:84:9d:77:93:bf:b1:dd:e0:e5:d2:27:ec:
                    5f:66:6f:16:d3:11:ec:48:c5:df:39:7d:b8:36:a6:
                    f8:c5:40:d8:ed:7a:22:cb:b5:42:60:e3:51:6d:bb:
                    f6:0d:84:26:78:89:55:ad:31:26:01:e6:a2:9c:b7:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:29:A6:BA:27:5C:45:00:ED:68:C8:59:43:33:EB:BA:3C:1C:35:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/7ed0b9d0-0c7f-32e1-8116-6f8776bec31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:49::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:b6:5b:ad:4d:cb:bf:f3:0d:1c:d0:4e:4c:76:33:83:b8:
         77:d2:72:4f:8c:d3:20:ba:86:16:78:72:aa:99:df:8e:18:3c:
         c5:8e:79:02:f3:46:9c:95:7e:ec:1f:9f:fa:5c:51:5a:fd:6c:
         71:fe:1f:42:57:d9:de:df:58:c1:f5:32:8e:7e:f0:b8:4f:93:
         4f:33:26:62:41:8e:ee:f8:13:23:15:df:4d:94:4c:cc:d8:ee:
         ac:12:89:05:12:6b:62:21:ef:da:0a:ed:27:03:30:fc:69:27:
         9a:e3:31:5d:95:0a:db:cb:e3:27:9f:a2:ce:42:4a:3b:db:ca:
         d3:25:a6:17:e1:67:10:65:07:a1:97:fd:7a:96:2f:67:ab:3e:
         cf:95:4e:dd:10:85:f9:96:24:9b:a1:94:58:5c:74:99:32:46:
         04:29:af:49:ca:90:6d:d5:ee:ec:14:af:b9:67:9f:27:d6:d2:
         83:6f:83:7e:55:77:7c:c8:7c:20:7a:22:4a:16:c3:02:81:e4:
         3d:b1:a8:8d:08:21:f8:a1:ee:63:85:ad:48:ec:fb:9f:bf:74:
         c6:85:e9:9e:73:7a:7b:4f:c8:5b:db:4b:07:c6:dd:90:cb:f2:
         ae:d3:a3:57:04:d5:69:9b:56:56:8c:cd:e5:7c:5a:fc:67:20:
         cd:15:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:17:17 2026 by rpki-client