Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/f8edff48-a8cc-3c81-ae29-1c7b9bbd5ae2.roa
File:                     f8edff48-a8cc-3c81-ae29-1c7b9bbd5ae2.roa (raw, json)
Hash identifier:          GFW8f6t7bzm2u1Pck/qmjdNYaIeEkrsx24aMjn9isns=
Subject key identifier:   71:5E:84:4F:3D:2E:2F:E3:D2:1E:53:6C:AA:C7:C7:99:8F:92:C4:E4
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584EFB47632C718F35F8434B40C0
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/f8edff48-a8cc-3c81-ae29-1c7b9bbd5ae2.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     61112
IP address blocks:        2602:fa4f:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:63:2c:71:8f:35:f8:43:4b:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=4058aa3f-90ad-4a61-a93c-481456645a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:3d:32:2c:70:d4:f6:12:49:40:ed:74:9c:
                    60:ea:be:78:d2:f3:b0:14:2d:e2:79:11:ac:58:42:
                    39:31:26:a1:e7:0f:21:b7:46:e4:b7:65:65:f3:d8:
                    5b:ab:85:c8:7c:0b:e3:d9:e9:ef:9a:b9:76:b8:b0:
                    9e:5f:0a:1c:a6:31:21:d0:e7:08:bc:69:7b:90:38:
                    1f:e7:0d:13:ec:ec:e0:ee:0f:3c:6c:25:d5:a1:31:
                    af:d8:df:a5:47:5a:3f:b4:1f:3d:da:5d:24:69:88:
                    dc:5b:7d:82:e6:48:6d:65:13:17:c4:8d:30:aa:7c:
                    64:37:18:63:57:a1:d4:77:7c:aa:7d:b7:b3:f0:82:
                    29:9d:08:21:53:1a:1f:60:d2:6b:dd:60:3f:d0:02:
                    2b:8e:81:aa:18:46:c2:2d:13:3f:c1:9f:26:2c:22:
                    b0:22:68:fa:1b:a7:13:c6:06:ac:13:2a:c9:21:43:
                    09:72:a2:87:c2:32:2e:b8:3d:48:e0:32:36:b4:29:
                    24:37:64:c1:12:a4:4f:d3:77:5d:28:a8:7b:bf:71:
                    7f:c3:a0:e7:86:1f:24:a1:fd:4a:04:22:b2:f7:95:
                    7a:33:d4:56:82:f6:56:7e:ae:94:02:21:ce:26:ec:
                    42:bf:a8:90:8d:4d:ae:dc:13:81:5a:c3:f0:0b:a8:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5E:84:4F:3D:2E:2F:E3:D2:1E:53:6C:AA:C7:C7:99:8F:92:C4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/f8edff48-a8cc-3c81-ae29-1c7b9bbd5ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:02:5b:1f:8d:15:6f:a1:69:13:06:78:d8:58:eb:3b:a7:
         69:ac:40:2f:91:76:ec:98:e4:61:00:92:24:ad:5c:77:1f:54:
         41:fd:0d:3d:c1:77:ba:ae:cb:25:10:3f:1f:e3:1a:5f:d5:13:
         5f:99:4c:2d:6d:28:6f:fb:79:12:5f:d2:d2:5d:49:5a:e3:2b:
         b1:2a:05:c2:5c:84:67:da:10:14:22:d4:dd:b2:f3:5f:8a:c5:
         7b:7b:d4:94:c3:d2:5f:15:cb:72:41:7b:25:75:51:a5:85:0f:
         4f:4b:c2:ff:83:45:c3:77:99:72:88:fd:2f:20:46:98:4c:b2:
         88:92:6d:62:b1:52:a1:0d:5a:b5:54:35:c0:18:ab:98:9d:a9:
         20:9b:ef:ee:22:94:53:a4:6c:0a:ce:0c:fa:4d:96:61:e6:01:
         80:f8:06:b2:9d:25:18:04:8a:b4:2c:0a:69:c6:56:67:ad:ff:
         21:0d:e4:eb:0a:1d:12:86:21:d2:8a:c8:89:ec:3b:47:a8:fd:
         1b:46:e9:49:28:9f:f5:f1:62:d0:b2:f3:48:ba:6b:c6:91:98:
         94:84:3c:a0:51:b3:59:88:1d:ed:b7:3d:20:c0:8a:02:4d:ed:
         7f:48:12:52:19:28:97:a6:77:bc:94:76:df:ca:dc:03:cd:92:
         63:eb:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:57:10 2026 by rpki-client