Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/36eedd9f-70d2-3657-bac5-82ce4b84692c.roa
File:                     36eedd9f-70d2-3657-bac5-82ce4b84692c.roa (raw, json)
Hash identifier:          OJb07KXswp5eIBe2oDuIHElcTKM2qaF/pCI5DhlbRDA=
Subject key identifier:   8D:9A:18:F8:B7:08:FA:14:67:04:92:0D:1E:88:75:23:F2:8C:16:D1
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584E9BE531AFB7D6B13F5FB79FC0
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/36eedd9f-70d2-3657-bac5-82ce4b84692c.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     142046
IP address blocks:        2602:f7a7:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:31:af:b7:d6:b1:3f:5f:b7:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=584cff54-162b-4411-8e2f-1ca293d0883a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:01:d3:6d:94:0e:ec:96:02:1b:bd:97:c2:
                    72:18:0c:29:fb:77:0b:bb:f8:8f:f5:c4:ac:7c:15:
                    3c:76:ba:7b:ce:19:40:d0:46:a2:73:1f:12:23:2d:
                    71:1d:46:d5:cd:f4:14:42:fa:05:11:a2:98:be:c2:
                    1f:a2:41:ff:61:2e:4c:d8:96:72:0a:36:e1:dd:99:
                    aa:5e:bf:6d:cf:43:bb:d8:c1:94:be:9a:f5:55:3f:
                    c0:32:f2:d0:34:dd:96:06:05:58:c5:a8:b4:de:f6:
                    44:77:79:d9:0b:51:11:ac:df:dd:be:5e:6b:c3:2f:
                    7c:e3:25:c3:5b:bc:04:ab:c0:c3:d1:d6:d7:4c:6a:
                    0b:37:8b:7e:af:23:c4:4d:9e:c9:1a:35:5e:2c:3e:
                    87:2e:cb:dd:a1:90:e1:92:97:8c:98:42:68:ea:50:
                    e9:ca:d0:cf:7c:22:23:04:0b:c2:d1:bc:44:ff:1e:
                    30:cd:ef:1d:29:a6:18:52:06:78:33:d3:9d:80:22:
                    70:92:43:fd:6b:86:cd:14:b4:5e:d7:1d:b6:82:ea:
                    70:f4:8b:30:8a:6e:9c:a9:68:df:69:ad:6c:25:bf:
                    e1:bf:83:2a:b8:9a:a9:94:39:f7:e0:98:fa:e2:02:
                    99:d9:a3:b1:d4:17:0c:84:cd:76:90:73:45:58:7d:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:18:F8:B7:08:FA:14:67:04:92:0D:1E:88:75:23:F2:8C:16:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/36eedd9f-70d2-3657-bac5-82ce4b84692c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:28:4a:89:46:9f:c1:a3:bb:e6:4b:aa:d5:04:b7:90:ce:40:
         11:c4:22:88:b4:db:89:34:0d:ba:47:4d:79:db:60:9a:29:ce:
         9d:44:2d:2e:f5:2d:aa:1f:09:27:51:9f:f0:6c:e0:6d:ce:8d:
         25:52:af:f0:9d:ad:7b:4b:73:af:7c:29:bc:01:bc:80:28:75:
         0e:2c:f9:f9:e9:75:c9:c7:41:b2:de:0a:81:96:3a:07:4d:98:
         0e:9d:e1:13:7a:2a:08:dd:f4:57:8e:d2:6c:47:26:fc:ae:1b:
         6a:4b:20:f3:8b:e7:69:66:3f:0f:82:a1:ff:42:50:46:42:53:
         8c:63:13:30:ca:cd:33:54:79:31:9c:18:f7:93:d8:d4:d0:08:
         e5:b3:81:c5:73:85:c1:94:8d:91:3f:a0:9d:00:67:61:6e:40:
         9f:56:88:43:b2:bb:14:8a:f7:3d:9d:b7:6e:f9:9f:53:fa:5a:
         9a:3b:6a:fe:7b:8e:ab:e9:97:bf:f0:f2:14:45:10:fc:de:24:
         34:a2:14:dd:a8:f3:26:05:eb:48:c4:a4:f8:40:18:f4:40:58:
         0e:69:06:81:20:a3:40:55:71:4f:22:a4:98:d5:dd:63:00:a0:
         f5:d2:c9:e9:d0:6c:aa:e5:42:6a:21:8f:a9:9b:7f:a4:5c:a4:
         fd:c4:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:56 2026 by rpki-client