Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/49075642-fe34-3d5c-8a1e-733f8006d1ac.roa
File:                     49075642-fe34-3d5c-8a1e-733f8006d1ac.roa (raw, json)
Hash identifier:          niq+fLlfxH9Ya1nPg96gNcZKlidjElTu1gsm47MYr6A=
Subject key identifier:   F5:DC:C6:3F:5D:40:DE:F9:A7:3D:00:28:3C:25:EF:9C:54:F5:E4:4C
Certificate issuer:       /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial:       010D0C9F4328584EF2E78662EB130F8099B18B00
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/49075642-fe34-3d5c-8a1e-733f8006d1ac.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     64289
IP address blocks:        2602:2ea:88::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:86:62:eb:13:0f:80:99:b1:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=b1d6e51b-0fa6-4295-87ab-132ef5691ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:ea:38:de:31:9d:99:f6:0c:44:9e:9d:ea:
                    78:e9:46:5d:ab:22:a7:12:cf:6f:0a:13:d3:08:52:
                    b2:fa:5a:74:c7:b3:d5:b0:03:88:5e:e8:af:b1:98:
                    cd:db:98:c3:a5:5f:57:bf:c8:96:13:df:3b:4c:5e:
                    73:f3:ab:c1:b4:61:a3:be:92:95:e8:c4:e1:e2:61:
                    8f:87:fc:64:8c:ab:8a:87:e9:0d:6d:dd:41:44:c7:
                    36:70:73:08:6b:19:4a:40:08:e2:e6:82:ba:2d:27:
                    b6:1c:fd:87:76:4e:c5:8e:66:b1:1c:27:1b:fb:f1:
                    19:d5:d3:03:04:67:72:d0:cf:66:51:3f:3c:60:2b:
                    cd:5e:d7:e9:e3:be:7b:22:19:66:45:be:80:c5:a8:
                    0c:33:7d:3b:9d:d3:d5:21:81:78:28:3f:1f:f8:89:
                    2d:fd:d6:7a:a1:ce:37:ef:8f:94:c8:68:72:d0:c3:
                    84:45:7c:ce:96:2b:36:94:7a:1b:ee:9d:c9:e7:c8:
                    66:9a:72:c9:d4:78:f3:a9:30:65:f1:69:85:e8:32:
                    d3:a4:fc:d4:14:36:fc:b3:66:f9:8f:b8:a4:a6:1e:
                    10:b5:d1:3f:e2:ea:b1:de:09:21:b4:84:ac:ac:a4:
                    9e:f9:5c:df:be:09:4c:49:e1:e2:27:af:a1:e7:16:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DC:C6:3F:5D:40:DE:F9:A7:3D:00:28:3C:25:EF:9C:54:F5:E4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/49075642-fe34-3d5c-8a1e-733f8006d1ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl

            X509v3 Authority Key Identifier:
                keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ea:88::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:da:f4:cc:a6:a2:fd:24:8a:c8:7c:d3:72:03:55:da:48:d2:
         d7:33:a2:15:5f:ab:22:85:4f:72:4a:d9:fe:47:e3:48:e0:26:
         55:c2:18:59:e3:25:f4:01:18:8a:78:39:ad:2f:df:d7:42:6e:
         b3:e4:bc:09:23:5e:14:cc:55:9c:e5:df:53:79:3d:fb:8a:86:
         1b:21:34:bc:cb:be:55:ee:a3:08:e6:a8:d6:b7:38:dc:7f:39:
         31:87:37:ec:22:ad:c8:9e:a5:6b:f2:c5:33:4b:7c:66:72:23:
         3e:6d:db:4b:f8:f3:99:51:a0:5b:b1:71:b9:b8:2b:7b:f2:9a:
         24:bc:9d:ea:4b:31:17:31:b3:61:68:96:89:28:a5:b7:ba:9f:
         d1:fe:42:25:c7:e2:b0:e3:70:d3:71:45:04:26:93:ac:4d:1a:
         53:07:34:0e:5e:06:7a:df:44:8c:b3:09:e2:ba:e0:55:8c:5c:
         68:ef:e1:2d:7e:0c:38:bf:1a:f9:3b:71:04:56:9b:b8:09:32:
         4d:ec:77:dd:02:c0:de:01:e7:62:99:31:0e:aa:40:59:ba:6d:
         bb:00:19:c4:8c:f6:87:dc:73:96:87:49:b0:4b:e6:88:42:2d:
         ca:00:64:dd:06:89:ea:42:23:a6:64:d7:7f:67:e6:78:01:0c:
         e7:96:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:39:27 2026 by rpki-client