Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa
File:                     ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa (raw, json)
Hash identifier:          qQHIXCY0kE//a4yxCfEzJxZ53sNaAY18kTiaaEgKoYs=
Subject key identifier:   F7:21:90:A6:96:24:48:31:26:D2:C9:DF:C0:58:A1:1D:8A:76:C5:B1
Certificate issuer:       /CN=d3d6dade-3164-4681-8f0a-34023fdf6934
Certificate serial:       010D0C9F4328584EA786E61367D3540B7FD532E0
Authority key identifier: C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26342
IP address blocks:        2620:1bd:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e6:13:67:d3:54:0b:7f:d5:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d6dade-3164-4681-8f0a-34023fdf6934
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fecf8b5d-96f5-4b82-bd4c-3e91e1ece0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:5c:48:c2:f2:e4:8c:86:d1:f6:89:db:71:
                    42:e6:68:42:f4:6c:a9:1d:00:bc:7a:5b:87:57:fe:
                    b6:0d:19:f3:3a:68:98:ae:e4:de:34:0d:57:6b:d1:
                    fc:1e:b9:e0:bf:83:97:1a:5f:ba:f0:59:09:9e:87:
                    aa:60:9e:35:88:f1:6e:10:34:4a:8f:ea:ee:b0:c2:
                    d1:e1:59:a3:23:dc:be:60:6b:0b:52:9c:4e:32:3a:
                    2a:85:d8:57:66:18:09:20:89:76:76:a7:27:ed:3e:
                    bc:a9:39:ca:e7:b2:03:a0:eb:d5:42:26:c3:d9:9c:
                    01:46:99:29:53:d7:94:8c:c3:35:63:59:2f:de:53:
                    f1:cb:f3:17:1c:11:3d:26:b9:91:da:6e:82:f8:ad:
                    5e:b6:65:56:b5:07:4f:4e:47:d5:65:61:d3:e1:0b:
                    57:99:e2:0e:aa:70:68:c7:39:e6:aa:30:62:33:90:
                    40:5f:3f:5f:c7:a6:a0:c1:73:cd:66:f7:07:51:e0:
                    7e:b8:c6:12:91:ad:98:79:07:6d:2e:cc:01:82:5e:
                    b7:5d:a3:56:79:10:db:53:5a:a0:72:db:d2:10:5b:
                    a0:87:7a:c9:f9:36:19:f5:cb:54:1d:b5:a8:8b:37:
                    32:b0:6f:65:54:7e:79:87:56:97:02:30:0c:b5:8c:
                    4e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:21:90:A6:96:24:48:31:26:D2:C9:DF:C0:58:A1:1D:8A:76:C5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.crl

            X509v3 Authority Key Identifier:
                keyid:C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1bd:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:6e:14:32:5e:ee:41:15:09:07:8d:38:cf:ee:14:84:e4:
         cd:a1:57:71:21:07:87:76:d6:f7:cd:24:f2:9f:66:8e:5d:b2:
         b1:3d:f3:c4:46:60:40:4d:39:59:16:4d:5b:e0:cd:b5:92:b9:
         2f:1a:b2:7b:c1:9e:10:bd:db:40:75:65:26:a1:e2:61:72:41:
         6f:09:00:f5:85:ec:9a:20:48:31:d2:ac:7b:8b:a1:c1:b1:c7:
         cc:7e:1f:4c:50:af:c0:b0:4d:58:7b:01:15:d8:9f:80:02:72:
         ad:a3:c6:60:ed:a3:33:04:96:47:83:71:2b:04:6f:27:71:57:
         18:77:69:8b:2b:bf:15:b3:ef:5b:76:f7:93:3e:07:e2:84:5e:
         84:94:6a:63:e3:70:11:43:08:47:4c:8f:95:23:a8:ee:78:81:
         72:d9:4a:37:f9:ac:f2:62:d0:cc:b2:2c:10:3c:c2:84:62:97:
         fc:60:b5:fc:57:d9:2a:65:16:de:25:83:29:09:a9:73:97:8a:
         83:8f:29:59:fe:d7:46:8f:5e:81:b4:17:a9:25:03:35:03:ee:
         24:28:88:c2:cd:05:df:4f:4b:04:63:9b:d2:d9:cb:ca:fb:3f:
         16:26:6d:e2:86:40:19:24:86:31:d9:1c:63:da:01:37:a2:66:
         02:8e:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:27 2026 by rpki-client