Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa
File:                     527011e7-d9bd-3c19-bae5-7c9594021a4e.roa (raw, json)
Hash identifier:          ET5mo5I11tVou1//Fx8uTFSeFoY+n1ML440jvTwHYWg=
Subject key identifier:   23:C7:07:5A:75:81:DC:BE:9E:8C:DA:6A:86:EA:9F:5D:38:04:12:08
Certificate issuer:       /CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088
Certificate serial:       010D0C9F4328584F4112B55FC849EE5D9BEEDD00
Authority key identifier: 7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     401562
IP address blocks:        2602:f747::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b5:5f:c8:49:ee:5d:9b:ee:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=598f7c7a-24b0-4879-bee2-86413c0ad990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:82:ec:2d:ce:91:b3:a0:36:e4:4b:d4:c6:57:
                    1c:47:aa:ca:f0:2f:63:01:f3:0c:82:c9:f0:60:19:
                    36:43:59:15:7f:9c:9f:01:09:1e:c6:a6:9d:d6:10:
                    66:71:7e:c6:98:ae:ef:97:66:54:4c:74:18:16:5f:
                    b6:08:83:47:77:d9:ee:9f:9d:52:95:03:e7:c1:6c:
                    6b:67:9f:86:ee:2e:2a:42:b2:e1:d1:1e:be:21:33:
                    30:bb:7f:06:17:cc:92:3e:a3:87:b2:69:88:d5:a1:
                    c8:5b:c7:70:d8:8f:38:09:02:96:fe:a7:3b:24:b6:
                    7d:b8:fe:e7:7e:6f:b6:b8:70:0c:e2:60:85:ee:d6:
                    a7:df:82:3c:d6:01:b3:5a:39:af:9b:1b:d1:42:55:
                    46:4a:f6:41:bd:e0:fc:59:e2:11:10:48:ff:5e:7d:
                    f5:bc:d7:2e:d7:53:57:14:fa:4b:04:30:ba:f8:af:
                    f3:8a:1d:44:4a:3f:34:99:99:1a:51:6b:c9:f7:84:
                    9c:60:b6:da:de:17:37:3f:f4:e9:e2:fb:cf:2c:48:
                    a2:21:58:83:fb:5b:a4:86:00:d7:fc:8e:84:35:9e:
                    9e:de:4e:55:18:df:cf:a9:dc:23:ad:34:41:8b:c5:
                    ca:a3:dd:b6:8d:90:4c:57:7d:26:f8:de:5c:87:c3:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C7:07:5A:75:81:DC:BE:9E:8C:DA:6A:86:EA:9F:5D:38:04:12:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl

            X509v3 Authority Key Identifier:
                keyid:7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f747::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:54:9d:15:88:9b:5a:4f:9f:b5:1a:53:2f:da:90:6a:70:0b:
         17:df:01:b4:da:e1:ee:54:a7:36:0d:0a:fd:18:c1:56:c1:64:
         8f:49:64:f5:9a:47:09:2d:01:90:b6:41:76:d1:f4:bc:da:9e:
         ea:36:78:85:ca:b4:68:f7:d9:15:e2:79:fd:2a:0b:9c:11:b8:
         ac:53:83:45:66:f2:97:87:e4:fc:c6:ac:64:fb:a6:b0:58:6c:
         03:6f:23:f2:72:e9:93:14:0f:22:79:43:ad:c9:df:fb:b0:b5:
         fb:74:0b:b8:92:96:d1:17:ad:e6:12:b6:f1:73:69:7d:5d:ea:
         07:a9:60:3e:4a:13:ab:14:0f:ec:c6:26:72:bc:5a:0d:a4:91:
         ec:bb:2c:32:f1:cf:62:23:b4:94:25:2a:ff:78:57:e3:74:6f:
         ac:df:6e:32:32:f7:10:14:e6:30:2e:73:c9:ed:0b:86:ea:a9:
         42:0a:f0:05:48:79:f3:68:12:6c:f5:10:2f:b2:55:a1:bf:eb:
         20:df:81:64:ff:c5:2d:3a:dc:ec:f2:60:e4:af:86:1f:e4:68:
         94:1a:95:dd:3c:01:f1:dc:45:60:4c:4c:22:20:17:bf:38:34:
         ae:ef:74:a6:bf:b5:9c:24:d8:ba:da:06:b2:8d:a7:55:bb:80:
         98:85:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:47:40 2026 by rpki-client