Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/e07c8ea9-48f4-3cbc-90a3-b800fa060263.roa
File:                     e07c8ea9-48f4-3cbc-90a3-b800fa060263.roa (raw, json)
Hash identifier:          3jRl16MLG6c4g5mlVUUeNt8egTWfXrOaNiy4pgK3yW4=
Subject key identifier:   B9:30:9F:96:96:DB:63:5D:9A:F3:75:30:98:33:D4:7F:7B:71:5E:97
Certificate issuer:       /CN=664e4c51-f7b5-453e-a7b0-8081a6404662
Certificate serial:       010D0C9F4328584F000A1E8F95BE25833BCFB180
Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/e07c8ea9-48f4-3cbc-90a3-b800fa060263.roa
Signing time:             Sat 29 Aug 2026 17:55:50 +0000
ROA not before:           Sat 29 Aug 2026 17:55:50 +0000
ROA not after:            Fri 27 Nov 2026 18:55:50 +0000
asID:                     62731
IP address blocks:        2602:ffa6:b00::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:0a:1e:8f:95:be:25:83:3b:cf:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662
        Validity
            Not Before: Aug 29 17:55:50 2026 GMT
            Not After : Nov 27 18:55:50 2026 GMT
        Subject: CN=2531c52a-b693-4fe8-846c-4b7e628d5254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:06:97:23:dd:7b:b0:33:18:06:5a:f5:96:
                    31:3f:84:ca:f5:ac:e7:ac:02:4e:62:87:be:7f:09:
                    7e:ae:34:63:3f:e5:2c:d5:d1:d9:1a:a6:37:c0:f7:
                    6d:2a:38:0d:d5:23:a1:24:17:b5:ec:b6:37:7c:d8:
                    dd:90:16:27:a2:ba:6b:62:54:5d:55:f6:1c:7f:bb:
                    a8:29:d3:5e:e3:a1:c6:10:32:46:0e:8a:b2:3d:d2:
                    56:b6:a5:fe:20:15:f0:3d:3b:c0:b2:7a:bd:87:ad:
                    62:34:9c:7c:ba:13:53:8a:ad:0f:98:44:29:e4:2b:
                    23:3b:9f:73:77:14:78:dc:5f:ae:e2:10:9e:af:ab:
                    20:40:ce:7b:79:ef:86:f8:32:39:7b:ae:df:3a:d7:
                    30:fd:45:6e:cd:67:49:51:23:86:0d:cf:4a:44:1f:
                    08:17:e4:4b:3f:73:4b:84:29:77:65:7f:8f:0f:86:
                    fe:bb:28:4d:62:7a:9e:2a:1f:91:e7:bb:32:bb:89:
                    a6:72:53:2c:b3:fd:09:33:66:04:72:ee:28:0d:cf:
                    21:e2:0e:32:f1:70:0a:e0:99:dc:af:75:97:4c:cf:
                    72:ec:9f:64:6b:9f:74:c8:a1:fd:e6:d3:2a:e0:e7:
                    a6:c8:33:76:f2:e4:e6:dd:f6:12:c7:39:18:7e:24:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:9F:96:96:DB:63:5D:9A:F3:75:30:98:33:D4:7F:7B:71:5E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/e07c8ea9-48f4-3cbc-90a3-b800fa060263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl

            X509v3 Authority Key Identifier:
                keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffa6:b00::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:6e:c6:0c:71:94:75:19:fe:7c:0c:e2:66:86:2b:1f:7d:
         09:f7:26:e4:f7:44:2b:f7:f3:71:b5:e7:ad:a1:66:06:05:d5:
         8b:e3:1c:ad:0a:b6:39:5f:e2:97:dc:6f:ea:6a:6c:75:ed:8b:
         49:b2:b2:a3:0f:92:73:e3:dd:1e:31:47:16:05:9a:99:94:78:
         2d:32:75:f2:cd:47:a4:94:90:aa:62:e3:63:05:9f:e4:f4:04:
         e8:67:ce:29:99:0d:47:e1:67:29:94:14:33:41:68:e4:30:a3:
         61:58:50:44:cd:7c:28:97:55:13:04:ac:a8:f2:11:62:15:a3:
         bd:c4:35:5a:bb:ab:b1:c7:33:91:55:2b:53:39:bd:fe:9b:d5:
         77:9d:d3:70:d5:1d:48:3a:b3:41:0d:a5:5e:da:6a:04:89:65:
         4f:57:7e:04:aa:e9:b5:b1:d7:85:f7:22:ff:5d:7a:6e:5b:07:
         e3:f8:d2:ab:2c:dd:c3:e8:61:bb:e1:2d:ad:52:10:25:5b:36:
         58:bb:17:7a:2f:4e:85:65:92:13:48:e1:f5:77:bb:d5:8a:5d:
         fb:d4:3a:31:89:c8:17:16:37:0e:04:28:5c:3a:c9:1a:20:d7:
         fa:66:9c:37:9a:c9:63:cd:1f:91:63:fe:50:46:b8:6b:cb:5c:
         a0:b7:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:18 2026 by rpki-client