Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa
File:                     b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa (raw, json)
Hash identifier:          0GBFbw3m/qPRrd6roqTWT3XRSCossx1VKnnMWPP0cA8=
Subject key identifier:   78:07:94:9B:E4:28:1D:9B:E4:B2:7D:34:92:77:D9:EB:43:DC:72:33
Certificate issuer:       /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Certificate serial:       010D0C9F4328584F3052709071D4C10213985540
Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2602:810:6009::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:70:90:71:d4:c1:02:13:98:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=2795375c-573a-42e2-8d3c-db9e5de35fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:8d:32:db:d5:3c:0a:1b:71:e4:7d:4e:f5:
                    86:c4:1f:26:90:54:05:09:f1:90:dd:c4:82:56:ca:
                    2d:f5:83:b8:4a:4e:50:91:f7:5a:c0:15:db:bd:e6:
                    b3:94:6c:08:d6:07:5e:04:a4:aa:32:01:2c:ff:91:
                    b4:eb:0a:e8:97:00:01:8d:7b:29:97:01:47:d0:ed:
                    f1:f3:ce:f6:7b:67:50:88:d4:1b:fb:2b:51:ba:59:
                    93:17:30:0c:eb:c2:05:a7:e9:1d:3b:3b:90:c8:ea:
                    df:49:0c:c1:e0:07:3c:41:0b:cb:24:5f:f0:2e:ac:
                    28:e6:6c:dd:34:47:d6:c6:1f:9e:2d:26:2e:80:9d:
                    c5:33:8a:2d:70:6d:f5:99:64:ff:e8:e4:81:94:62:
                    87:64:6e:2c:19:5b:bd:f1:a5:61:40:4d:2c:5c:ad:
                    3f:ff:38:6f:7e:0d:f6:bf:a2:9e:41:7c:0f:d9:c0:
                    0b:f9:0e:ce:80:bb:4d:80:e2:e9:46:ec:22:f8:ec:
                    dc:12:dc:fd:22:0c:77:b6:18:07:71:45:18:4f:27:
                    69:df:a5:9c:a0:52:61:d4:7c:27:eb:63:ff:fe:ae:
                    02:b6:d0:73:47:6f:0c:c5:1c:e6:bc:d4:9f:d5:0a:
                    51:b2:14:cc:a0:22:cc:91:29:42:5e:1d:3c:77:4d:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:07:94:9B:E4:28:1D:9B:E4:B2:7D:34:92:77:D9:EB:43:DC:72:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl

            X509v3 Authority Key Identifier:
                keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:6009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:64:5b:83:2a:48:ee:64:cf:cf:7a:40:8b:73:2f:51:d1:
         13:7b:8b:cd:63:c7:b6:bd:f5:7e:70:05:a6:2d:1b:2c:24:50:
         e7:ef:fe:58:50:ce:05:29:31:09:1c:ec:dd:41:d9:52:6c:b2:
         b2:4d:d7:69:50:92:36:b5:39:4f:6f:ad:89:f1:2f:e6:0b:92:
         34:98:61:ab:fb:e4:7a:f4:f1:20:81:df:31:cb:d3:01:58:94:
         38:86:b9:5a:cd:07:d7:d1:64:a6:56:c4:c0:58:df:f4:76:e9:
         fe:c2:30:89:03:50:20:78:a0:95:f2:9d:96:42:e0:6d:29:7d:
         6b:ed:4e:69:b3:38:c1:a2:32:6b:5b:54:89:b1:29:ea:d7:b4:
         83:94:23:bb:97:03:57:80:a5:20:47:aa:58:4a:f2:22:3d:67:
         d9:50:cc:53:c3:e4:68:52:c7:b4:cd:46:b2:8e:fd:5b:bc:f4:
         99:20:9f:37:ec:fe:3d:b6:e5:86:d3:a6:06:e1:e8:15:20:8c:
         b7:31:c2:80:95:e8:12:21:91:4d:4c:05:04:5c:45:6a:1d:05:
         b5:d6:16:95:24:52:d7:bb:75:1c:8c:36:4c:99:a1:a6:d5:d4:
         8d:e4:63:47:45:46:f5:63:36:1d:a2:af:44:e6:0a:17:3e:9d:
         9d:ba:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:25:38 2026 by rpki-client