Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/bc471a49-f744-3bc4-a460-4ff44d955b55.roa
File:                     bc471a49-f744-3bc4-a460-4ff44d955b55.roa (raw, json)
Hash identifier:          Tz35ZeP/V+3qO/4WKR6/SYk6RwIwK5+HcdsBJlzRMf8=
Subject key identifier:   2A:DC:4D:C7:37:F4:D1:2E:B6:49:11:98:CD:DE:69:D9:C6:A6:0D:FE
Certificate issuer:       /CN=e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9
Certificate serial:       010D0C9F4328584F34C13F86B6297AC2AA720840
Authority key identifier: 4C:01:EB:D3:F0:64:2C:C1:CE:5F:15:77:9F:83:5B:11:43:9C:FE:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/bc471a49-f744-3bc4-a460-4ff44d955b55.roa
Signing time:             Thu 17 Sep 2026 15:06:51 +0000
ROA not before:           Thu 17 Sep 2026 15:06:51 +0000
ROA not after:            Wed 16 Dec 2026 16:06:51 +0000
asID:                     46291
IP address blocks:        2620:34:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:c1:3f:86:b6:29:7a:c2:aa:72:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9
        Validity
            Not Before: Sep 17 15:06:51 2026 GMT
            Not After : Dec 16 16:06:51 2026 GMT
        Subject: CN=75edec91-41f9-44fb-b2b8-992a31f0527d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:27:ce:7f:5c:cf:b7:1b:05:32:0b:ca:db:
                    57:13:b0:43:0d:87:7b:4a:1d:50:23:11:e3:d6:2a:
                    80:37:24:1a:dc:de:1f:91:eb:df:8b:2c:25:ad:73:
                    85:73:d9:55:de:40:f4:ba:0e:46:43:75:92:01:24:
                    3c:7f:1a:05:64:42:be:a7:3f:a6:c8:fc:31:cc:c1:
                    26:e6:c0:6d:9d:fc:e3:ae:c9:b4:b0:41:75:e0:a8:
                    e7:5f:9f:ff:e9:9e:d4:c0:1f:0f:1c:e1:51:f9:33:
                    05:c3:b2:a0:3c:97:c7:6d:6c:d3:a4:5f:c7:7b:0e:
                    b0:f1:d3:e6:db:75:60:25:04:cb:df:d4:16:1c:99:
                    95:84:89:8e:3d:68:78:df:11:ef:38:81:10:cf:41:
                    f5:8b:da:ae:68:55:8b:de:5f:86:1e:38:c7:99:ad:
                    ed:d4:9f:06:df:7e:2e:c1:1e:d0:52:89:7c:a2:e9:
                    2e:1e:a6:37:f4:10:d2:d2:d0:be:76:5b:77:4f:1f:
                    6e:f2:ff:37:bf:dd:7a:26:f3:4b:97:3d:8b:80:b4:
                    c7:1b:73:da:0d:1e:ff:f2:55:69:43:69:6a:5b:fc:
                    98:ca:64:8a:3b:cb:72:af:fb:e4:36:88:23:78:37:
                    ce:1f:b2:9b:8e:0b:92:3c:3c:fc:f9:74:1b:da:7c:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:4D:C7:37:F4:D1:2E:B6:49:11:98:CD:DE:69:D9:C6:A6:0D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/bc471a49-f744-3bc4-a460-4ff44d955b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.crl

            X509v3 Authority Key Identifier:
                keyid:4C:01:EB:D3:F0:64:2C:C1:CE:5F:15:77:9F:83:5B:11:43:9C:FE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e9c42517-e9b2-4b74-a2ae-f5fdb969d6a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:34:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:47:c8:34:d0:cb:1b:68:52:10:f7:04:c1:7a:1e:3e:47:6c:
         7c:ed:8a:e9:47:7a:13:5e:04:68:a0:7f:21:8f:62:5a:64:b5:
         74:90:67:bc:73:0c:26:f9:a1:67:86:b9:0b:08:35:ce:f5:e4:
         e6:29:cc:81:eb:00:91:9d:bb:2f:fd:c4:da:0a:34:d2:d9:7d:
         20:3d:e7:51:11:57:08:7f:c1:b7:68:1e:fb:36:1a:d6:f9:38:
         50:56:84:87:1a:73:56:8b:91:b8:07:35:83:fd:df:ce:f7:d4:
         54:5a:7a:a7:48:a9:4c:1a:f9:6b:85:c3:c5:c8:23:df:59:97:
         c3:f1:c8:03:c2:a3:51:d0:da:a6:fd:9b:f9:b7:c5:9f:c3:c6:
         3e:dc:77:a6:4a:84:d8:18:5c:db:c3:a5:9e:86:86:9e:22:b0:
         3b:52:c8:42:5a:3a:12:61:3e:90:2c:63:15:fe:11:f8:77:b2:
         5a:01:dd:ce:26:ae:09:54:c7:ea:2f:6f:fd:7b:a4:1d:fd:12:
         fc:d7:8e:fd:6b:0c:6a:64:58:84:47:e4:75:b8:94:2b:58:26:
         86:0d:d8:78:ad:c7:92:c9:56:9f:79:d2:78:95:62:10:67:b8:
         d9:1b:5b:34:0c:a0:81:dc:45:0a:b9:49:47:40:be:ab:c1:af:
         ff:60:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:12 2026 by rpki-client