Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa
File:                     9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa (raw, json)
Hash identifier:          tSuUNfz+9ugwzgV6FQoWpZEkAhtCjdxQtFLCNHlmgL0=
Subject key identifier:   47:B9:23:84:57:09:95:A7:77:B4:00:7E:36:7B:52:3B:67:BB:59:0A
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584EE7BCB8E9DF934A0DDF27A8C0
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2620:113:8060::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b8:e9:df:93:4a:0d:df:27:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=1d22c9a8-bdfa-4f2f-a645-1e7d6c6758e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:93:c9:67:02:82:be:3b:8d:9b:3c:8d:e9:
                    c7:4c:eb:0f:7f:c6:ec:a2:41:d2:8a:30:c0:83:7f:
                    e4:29:ab:16:c3:71:50:da:e0:e2:9c:a8:0d:e8:d1:
                    63:37:94:4b:45:91:99:db:e6:9b:03:82:9f:11:90:
                    fd:48:8f:6b:59:f9:de:f9:3f:96:89:40:a9:12:d2:
                    93:bc:96:a2:f6:5e:da:ed:e7:0e:2c:78:8e:0d:ad:
                    84:f2:44:99:61:10:f1:5b:b6:97:f4:9f:40:d8:f9:
                    d2:d4:1b:c1:32:37:67:a8:77:8a:07:73:9b:f5:06:
                    fb:1e:6a:e8:0b:5e:48:f9:ca:b1:8a:7b:bd:a3:66:
                    55:46:e6:90:96:b4:d4:f0:d1:6a:52:a9:f0:2f:29:
                    67:c6:db:36:40:86:a4:3e:7f:ed:d3:8b:6b:77:b7:
                    72:b0:a5:7c:8b:1d:4d:b5:65:8d:92:64:ac:97:2b:
                    02:5b:8e:9f:a7:15:52:77:81:0e:02:d8:00:01:01:
                    48:74:80:82:f6:6a:89:e2:a3:1a:72:de:ee:a2:92:
                    5a:f8:d5:26:03:7e:10:04:d9:ae:a4:e3:a8:19:a9:
                    7a:7b:c0:84:f7:63:5f:41:45:83:1f:4c:8a:18:94:
                    bf:91:8a:a8:c1:b5:a7:37:cd:d2:a6:c9:d2:39:ba:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:23:84:57:09:95:A7:77:B4:00:7E:36:7B:52:3B:67:BB:59:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:8060::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:82:6f:42:a3:c3:d9:32:20:df:19:c6:55:d9:d3:51:c3:0e:
         3a:50:45:8c:6a:a6:46:93:ea:cf:12:9b:51:d9:6f:8c:00:7c:
         43:b7:a7:bd:0a:c6:82:9d:ce:4c:49:7c:3d:d3:01:86:4a:9d:
         43:50:b1:80:d2:dd:4d:27:62:42:8a:fd:0d:0b:98:2f:b7:2f:
         95:0a:ec:a2:99:cf:aa:a2:6d:61:6d:16:ed:4b:96:84:5b:ca:
         88:2f:fc:12:cc:f8:1d:07:32:be:6c:04:7e:af:c7:81:a6:cb:
         75:85:be:e0:ad:11:5e:9b:e5:b6:fd:ec:ec:e0:42:1c:94:71:
         3e:a6:06:48:3c:7c:3e:f9:e1:d1:87:f8:8b:95:c3:e3:07:d2:
         b8:33:90:54:98:94:ab:5e:03:38:ed:fb:d5:50:d4:e0:0a:45:
         43:15:ad:64:b3:77:ba:b4:a5:04:5c:f7:f7:de:82:90:4c:d0:
         db:aa:7c:be:03:b0:c6:3a:c0:21:ca:6f:19:16:d5:d0:97:05:
         79:10:d1:1b:37:b3:39:00:18:a8:16:e5:a0:79:cb:ce:b2:8f:
         c1:85:e5:85:c1:2c:2e:b4:67:0b:ce:33:30:90:e7:7d:d7:e3:
         76:72:24:28:c4:50:a2:fa:bb:1b:6a:16:8d:5e:7e:08:f2:6e:
         15:97:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:57:30 2026 by rpki-client