Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/d8523074-1402-3e48-bc00-41013eac5d31.roa
File:                     d8523074-1402-3e48-bc00-41013eac5d31.roa (raw, json)
Hash identifier:          dS0qsUBys9y8vGHrkkBMeHY0YL355LPUolvTJnOsbtY=
Subject key identifier:   3C:1E:E5:1B:5A:35:ED:EF:F5:FE:B3:59:18:E7:50:33:C6:4B:AE:E9
Certificate issuer:       /CN=eba568bc-caf4-4df4-8adb-9955051bdf42
Certificate serial:       010D0C9F4328584F7DC86BF53DDB0994021F7500
Authority key identifier: 30:DE:CF:37:91:F5:66:2C:2A:08:8F:87:CB:11:5B:65:FB:F6:5C:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/d8523074-1402-3e48-bc00-41013eac5d31.roa
Signing time:             Tue 13 Oct 2026 18:55:19 +0000
ROA not before:           Tue 13 Oct 2026 18:55:19 +0000
ROA not after:            Mon 11 Jan 2027 19:55:19 +0000
asID:                     26968
IP address blocks:        2602:ff93::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:c8:6b:f5:3d:db:09:94:02:1f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba568bc-caf4-4df4-8adb-9955051bdf42
        Validity
            Not Before: Oct 13 18:55:19 2026 GMT
            Not After : Jan 11 19:55:19 2027 GMT
        Subject: CN=5e8c73ea-d1a8-4690-a0cb-12a7de3dcda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:dd:88:c3:9f:b5:ca:d1:5c:5d:f9:05:8c:
                    90:ce:46:f7:50:e1:b8:1a:8b:cd:f2:b8:3d:02:5a:
                    2c:1d:0f:93:26:00:53:6c:48:5e:7e:98:ea:fb:5f:
                    d9:cf:56:ba:1f:77:0b:5f:66:ea:fe:aa:ee:45:96:
                    50:73:df:eb:72:44:d9:2f:19:a3:b4:13:12:17:3d:
                    79:60:0b:06:a7:55:7a:aa:33:4a:88:47:7c:ab:d2:
                    e6:f3:81:73:3d:e3:a7:7f:43:6d:c3:35:75:7f:40:
                    72:e8:c1:6e:1c:21:40:7e:d6:11:e7:8e:f9:6e:7d:
                    aa:3a:cd:14:87:ae:08:37:3b:fe:37:aa:12:82:72:
                    54:fd:5b:30:8f:58:b1:7c:bb:f5:d1:cc:38:3d:db:
                    1b:64:78:5c:1d:84:ce:f3:ef:6d:71:d8:f1:86:bd:
                    8d:37:c2:0b:52:a2:ab:bf:92:71:3a:f2:e2:5e:6b:
                    63:8b:dd:b9:88:1b:bf:e5:6f:52:75:f1:95:49:41:
                    f4:26:04:db:27:c9:c8:ca:c2:8c:1d:e6:65:c0:2a:
                    39:34:d6:38:ef:90:4c:74:fa:58:e8:64:7f:49:ca:
                    c5:9d:60:f3:a6:b4:e2:e7:bc:09:30:31:7b:fc:92:
                    e6:d4:1a:58:27:c4:7e:a0:20:dc:b8:36:89:f7:67:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:E5:1B:5A:35:ED:EF:F5:FE:B3:59:18:E7:50:33:C6:4B:AE:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/d8523074-1402-3e48-bc00-41013eac5d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.crl

            X509v3 Authority Key Identifier:
                keyid:30:DE:CF:37:91:F5:66:2C:2A:08:8F:87:CB:11:5B:65:FB:F6:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff93::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:f9:8f:90:6e:28:dc:86:8d:1f:7a:05:2f:9a:e2:6f:79:
         84:7c:a6:49:26:ec:f8:3f:d2:36:e5:f1:b1:33:11:4f:bc:48:
         63:56:ef:c4:ae:f8:f3:2f:55:e8:1d:3e:4b:35:4f:2c:1c:b4:
         ee:06:46:a0:8b:8d:1b:da:4d:79:8d:4b:28:cc:b3:f5:63:c6:
         4b:5b:eb:10:a0:97:08:de:9c:c8:f0:37:80:f6:47:47:98:87:
         3a:ad:18:ef:8b:7a:6d:f7:ec:0e:82:da:ca:24:fb:20:69:07:
         06:6d:4c:8b:cb:86:d6:06:97:e8:3a:c7:eb:7c:69:62:d6:3a:
         43:af:10:fe:b8:49:d2:de:72:20:e1:14:43:5b:aa:64:73:9d:
         24:9b:46:2f:5f:02:2a:cf:12:d8:34:aa:50:51:2d:5e:78:69:
         ef:ac:c1:63:8d:57:27:66:df:ff:47:09:4c:25:1f:ca:1b:13:
         ca:97:1b:fe:3e:0e:4e:52:04:89:67:be:8b:e2:c0:de:f1:d4:
         a0:b0:75:78:0d:06:b5:38:1c:27:cf:7a:bb:9a:b6:6a:bf:47:
         e0:df:45:3f:53:26:26:0e:bf:4f:bc:1e:a3:cf:b6:22:ed:42:
         7e:d8:43:00:8a:0f:ab:77:70:48:bb:77:2f:39:71:12:52:ed:
         e8:1b:cc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:20 2026 by rpki-client