Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ef8d9930-a25a-3655-b70e-a6013d5884fd.roa
File:                     ef8d9930-a25a-3655-b70e-a6013d5884fd.roa (raw, json)
Hash identifier:          HWe7womSOs7ZWPGVnR1hbCsmKhWIXhgOP0U3kNSSlhU=
Subject key identifier:   35:86:A3:AB:60:32:B0:A6:24:33:F5:91:67:8F:A1:D1:78:1F:96:EE
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EFF77849F85E57BB79822A7F0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ef8d9930-a25a-3655-b70e-a6013d5884fd.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        2605:4300:3b01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:84:9f:85:e5:7b:b7:98:22:a7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=ab3a1b89-2b49-418f-a63d-a337be4e0a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:aa:54:92:5f:b8:52:9d:37:39:e6:5d:bb:
                    6f:08:d7:a4:75:83:14:77:7d:f2:ce:7f:6e:e0:20:
                    87:72:26:3e:1c:61:d5:06:a6:b0:db:70:b6:65:47:
                    d0:02:f8:38:78:d1:e3:f9:46:aa:ab:32:c1:21:31:
                    04:3e:41:7d:28:96:60:90:32:1d:62:2b:8c:c8:ab:
                    3f:ba:d6:1a:94:d5:19:fb:c2:aa:e3:6a:39:c3:a9:
                    4e:85:ee:14:28:18:d4:a0:b7:8a:5a:9d:5c:14:65:
                    60:1d:c3:47:fa:11:1c:8b:04:6c:f1:7c:2f:22:a0:
                    fe:05:c0:4c:ca:c6:d3:09:6a:51:64:22:0f:56:70:
                    c2:a8:cd:60:0e:f9:bd:70:e9:42:5b:0f:41:e4:f3:
                    2d:ba:97:28:07:1d:a3:c2:c3:7c:6a:dc:98:7d:bc:
                    40:6e:28:a9:05:c8:1a:10:b5:60:86:72:14:f4:8c:
                    39:4e:e3:26:10:2e:a8:16:aa:57:12:74:3e:be:fb:
                    eb:7d:5a:2e:ad:74:8d:86:af:89:39:4c:b6:91:72:
                    a0:2b:eb:2f:e6:30:62:c4:8a:78:2d:37:ce:63:72:
                    0d:03:14:a7:e4:92:6b:9e:df:9c:a0:d6:23:e3:21:
                    dd:ea:1e:ef:fe:b0:1c:95:95:37:58:d4:c8:4f:7b:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:86:A3:AB:60:32:B0:A6:24:33:F5:91:67:8F:A1:D1:78:1F:96:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ef8d9930-a25a-3655-b70e-a6013d5884fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3b01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:75:80:d9:9e:7f:64:5b:90:e3:20:0c:25:9c:a9:6b:94:
         99:18:87:1d:9e:59:9c:0b:df:0f:7c:6a:65:aa:00:2b:3b:94:
         c0:9d:d1:25:e9:07:b2:3f:91:38:3d:ff:fa:ec:9c:b5:d9:bc:
         d4:d5:26:64:3b:95:27:d2:c3:01:74:43:75:9b:7a:dd:51:e4:
         cf:fc:6f:e8:db:c8:00:dd:d2:f9:ea:99:f3:85:78:b4:78:98:
         c9:bf:7a:ff:45:3e:99:7d:85:c7:40:87:78:f5:a0:ff:13:70:
         4a:17:fc:65:37:1d:26:61:e7:68:8d:99:61:f5:1f:2d:5b:01:
         01:3c:67:fb:cd:ee:0e:31:3a:53:f4:ef:8a:de:50:c5:8c:76:
         ee:b9:d7:11:4a:e2:79:48:d5:f9:b4:12:a6:47:02:8c:ce:ab:
         5d:f7:ec:5f:c6:72:82:4f:0f:24:a3:fe:2a:e3:bc:47:c4:9d:
         77:59:47:1a:31:f8:1b:a6:5d:8c:3e:ce:52:9d:a6:fb:ec:48:
         25:c5:3e:9a:af:75:f5:40:77:5b:d0:28:87:92:cb:72:82:51:
         8f:b3:85:fa:0d:d3:db:82:59:61:ab:a2:7c:34:cc:83:b4:d1:
         80:9d:a5:b0:d1:b5:bb:ce:48:66:a2:d7:39:94:91:a7:25:16:
         54:51:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:44:04 2026 by rpki-client