Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa
File:                     2a45a639-abe6-396e-9150-a4cae7672b65.roa (raw, json)
Hash identifier:          r/xYdfuvtpbhYa14rApQXluyQPdMFZwS+l1czysbu/s=
Subject key identifier:   78:24:A3:E4:2E:46:11:73:CE:EF:FD:7B:B3:A3:5F:07:66:67:FC:6C
Certificate issuer:       /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial:       010D0C9F4328584EEEB75B79292D145125E91680
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     11004
IP address blocks:        2602:fa66::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5b:79:29:2d:14:51:25:e9:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=cf2883da-63cf-4a4a-a84f-aa86aba723e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:c1:83:05:e0:2c:76:3b:fc:7f:ec:51:f9:
                    de:f8:5a:93:d6:dd:39:a7:bf:23:51:1e:fe:62:70:
                    cf:47:9c:7e:b0:8c:26:ec:5e:60:67:73:24:84:34:
                    54:1e:13:a4:2f:66:87:17:ea:ca:ea:78:37:15:25:
                    d1:a2:c4:4b:11:ef:15:0e:a4:f0:35:0f:fc:5c:39:
                    2b:99:e3:c2:84:44:c9:18:11:43:21:4b:c0:a2:d4:
                    9a:96:e6:9a:9e:d2:eb:0c:1f:4d:a6:4a:74:7a:4b:
                    d0:cc:3d:4f:74:ff:aa:aa:01:1f:58:88:1e:70:04:
                    6a:62:4e:c7:62:f3:a4:81:57:8e:f9:01:cd:cc:81:
                    ad:e1:33:ca:1d:21:ef:83:92:58:e5:9c:47:aa:2e:
                    82:00:ca:32:62:cd:2b:13:27:f3:fa:d8:cb:f8:cc:
                    ee:7e:b8:db:fe:a8:fc:fd:bd:5e:4f:b9:b5:0c:b4:
                    7e:de:46:2b:d1:05:7d:0f:23:7a:53:ee:cf:d7:85:
                    f7:c5:16:1f:38:7c:83:56:53:c5:d4:fd:8d:55:21:
                    cb:26:e9:30:83:bc:60:5d:f0:4e:ed:17:b3:1b:ac:
                    b2:20:23:64:de:43:98:8b:8f:2d:50:53:ee:4b:01:
                    5e:2c:5c:8e:c6:7a:f6:82:e6:18:70:e1:d8:30:e9:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:24:A3:E4:2E:46:11:73:CE:EF:FD:7B:B3:A3:5F:07:66:67:FC:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa66::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:5d:cf:51:75:6f:f2:af:70:52:93:d3:cc:49:fc:af:13:
         3c:21:01:4c:60:c5:5e:69:8a:8e:b5:10:68:af:b6:18:19:10:
         f0:9d:39:3b:74:d4:17:cb:ee:b9:8c:74:e6:af:ee:4b:c2:af:
         cb:6e:12:0b:43:ab:02:1a:bc:e7:5d:e2:6d:30:e4:fa:9c:10:
         50:9f:ba:4a:7a:39:0c:20:1f:ee:88:28:88:b8:99:53:71:bf:
         b1:b1:26:23:f8:4c:7a:2b:79:5c:56:78:35:44:1e:34:1c:f9:
         02:42:67:91:98:01:ef:26:1e:97:21:49:8f:5d:97:a1:85:5f:
         bb:b3:7e:21:4b:fe:41:03:ee:6f:4b:cf:d1:61:91:0a:47:ec:
         55:4b:ca:06:a5:3d:b3:e4:f4:3a:84:5d:ab:62:3a:41:6f:07:
         26:01:9b:51:f6:a2:1a:10:28:cb:85:e2:14:1d:a7:00:f5:65:
         2d:29:9f:f9:91:90:3e:fa:f8:a5:93:9a:e2:51:52:a5:0b:87:
         ad:a8:5e:0a:22:f3:bc:4e:37:a4:14:ac:71:8d:84:3a:92:bb:
         00:24:81:8e:0e:81:a7:0b:60:cb:91:5d:c2:67:f7:f6:02:a0:
         38:a3:66:f5:31:04:b0:d0:7a:f7:1d:0b:2e:c1:44:8b:6a:e0:
         4b:4b:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:42:30 2026 by rpki-client