Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa
File:                     25dbca42-1fd0-38ab-852a-2e2b01909293.roa (raw, json)
Hash identifier:          SFuLr7C30L6VASrIlR+PKbgOXYTGlFfDh40CCGN2sgo=
Subject key identifier:   A3:D9:4A:4A:43:F4:12:C2:3B:92:A7:B7:89:B0:14:3B:CE:06:F6:D6
Certificate issuer:       /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial:       010D0C9F4328584EE0C1F78FEC7E59F19943D880
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     64289
IP address blocks:        2602:2ea::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:f7:8f:ec:7e:59:f1:99:43:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=a11859c1-1ab2-4d1a-b1ce-103ac8313814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:32:dd:63:d0:16:1a:eb:bb:b6:d9:0f:e3:
                    f4:8c:4b:96:ef:5a:8d:95:8c:f6:c3:f6:9d:02:c8:
                    68:10:8e:9e:0c:a2:e4:d2:4f:03:7a:d2:cf:f6:89:
                    82:b5:bf:eb:61:ed:9e:99:41:b3:56:50:de:53:27:
                    07:44:04:80:1d:70:ef:e0:0f:7d:6c:eb:4e:3b:1a:
                    6e:75:48:af:58:24:7a:7c:95:6b:56:83:d8:a9:b4:
                    e0:2d:82:30:fb:0f:10:ba:c8:f4:8b:61:be:24:ac:
                    1d:e6:66:7a:a6:4a:a5:e5:85:ed:f7:db:96:61:3e:
                    25:70:5f:2e:40:79:64:0f:c0:8c:75:af:7e:0b:52:
                    cd:7e:b5:b7:1d:88:93:ec:1c:35:0c:36:f8:09:72:
                    4c:af:54:2d:c2:a0:bf:00:a0:c8:db:cc:df:3c:ea:
                    a5:4e:b3:1e:ae:4a:fd:92:f5:2f:d6:cf:f0:8f:4d:
                    fb:84:de:36:fb:90:91:e3:9a:55:0c:42:15:30:73:
                    f7:4e:aa:f9:94:bf:c5:7d:cc:f2:d3:ed:c6:c5:b3:
                    46:26:c7:f4:2c:5a:57:d7:0e:6b:76:42:a2:93:fe:
                    5c:79:d2:6b:b4:99:65:89:f8:d1:2c:f2:ef:96:f3:
                    9d:9f:64:d3:11:6b:98:e8:df:d9:b9:91:ad:1e:c7:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:4A:4A:43:F4:12:C2:3B:92:A7:B7:89:B0:14:3B:CE:06:F6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl

            X509v3 Authority Key Identifier:
                keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ea::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:a0:02:4f:3c:19:82:09:88:48:b8:7e:f3:5d:53:37:ac:
         0e:9f:60:01:e1:37:4f:6b:01:4f:f4:b8:fc:6a:32:85:95:5b:
         a8:30:0e:5a:54:06:f4:d7:40:38:8f:53:e5:8a:a6:01:31:de:
         c3:da:69:ea:cb:07:e4:c5:58:59:02:3d:4e:6b:c9:93:34:80:
         12:8b:3f:db:18:c2:60:da:f1:30:60:21:82:ee:87:4f:c8:17:
         31:ca:ca:14:e7:ee:77:57:d8:11:7f:9b:5a:ca:0e:9d:1b:d0:
         52:65:bf:78:98:6f:c4:ca:de:49:63:0d:03:ac:aa:3d:9d:9d:
         c4:d7:bb:fa:6f:30:f1:f9:b0:10:74:15:8c:7d:87:f8:54:6f:
         e7:12:26:fd:64:89:07:35:0c:b5:24:6b:06:5c:97:e8:9c:d3:
         79:cc:d0:31:96:ca:ec:4d:52:0c:21:d1:04:26:e8:f0:f6:fd:
         7b:bc:a1:78:57:92:62:47:c6:26:1c:0d:48:8a:c9:5f:eb:09:
         8e:32:0e:c6:47:f0:f5:f8:c1:47:e5:6b:43:38:b9:9d:8c:35:
         91:9a:c0:b0:d1:48:6e:cd:1e:78:94:04:5a:98:1d:49:1b:55:
         bd:a1:25:a6:81:8f:8a:cc:8c:5f:d1:c2:13:ca:ea:46:46:a6:
         45:16:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:41 2026 by rpki-client