Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
File:                     13d3d209-306d-30fb-b006-0cf3524201ad.roa (raw, json)
Hash identifier:          a8bLM1vJ5VSA8Mbx5qtNPzoYdk67LhpPDivKjU+SP5c=
Subject key identifier:   44:00:07:FF:53:6E:13:5C:E6:5D:20:79:59:C3:2D:EF:48:EE:7E:5B
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F189799ED84AAC6C86176A0A0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1090::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:99:ed:84:aa:c6:c8:61:76:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=55a5f46b-8c25-4869-969a-6958630e2655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:a5:c9:5d:6c:8d:4b:84:bd:29:17:dd:28:
                    14:3f:05:78:62:05:8b:ad:21:fa:64:20:ac:b8:8a:
                    73:ef:32:ae:bc:7a:16:a1:1b:47:c5:4d:f8:81:fb:
                    96:a7:4d:f3:17:92:b2:82:7c:7a:5a:14:d2:3d:b8:
                    3e:2e:75:f5:10:01:d1:07:ff:a0:07:2a:d6:31:db:
                    c6:d5:f0:34:3a:54:d6:2e:a7:39:11:45:45:c1:f3:
                    0a:c0:5a:bb:53:28:d3:d3:9c:8d:11:5b:a0:9a:2e:
                    70:48:3f:e5:7e:a0:b5:92:4a:1c:19:55:73:1c:80:
                    82:62:a5:49:3d:2d:7f:a7:54:fd:22:2c:57:0a:19:
                    ff:36:ab:84:fb:7a:77:35:c8:3d:8f:51:7c:48:a1:
                    23:8f:bc:b2:b6:19:41:c7:48:79:2f:e3:1b:d1:f6:
                    a9:a0:56:5a:b7:9d:57:2a:33:9e:0a:09:a9:ec:68:
                    16:29:17:13:1a:9b:80:55:0d:4b:c8:0c:05:11:1a:
                    36:ef:a7:bf:fe:af:61:34:66:89:ac:33:47:3e:31:
                    f1:ce:80:5e:88:c9:f0:ec:6f:76:2d:6b:23:b9:1e:
                    0a:ac:ee:fb:f1:8c:51:03:7d:bb:fc:cb:b5:0e:09:
                    cd:98:a5:d5:66:73:03:b9:9a:49:d0:be:44:ae:72:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:07:FF:53:6E:13:5C:E6:5D:20:79:59:C3:2D:EF:48:EE:7E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/13d3d209-306d-30fb-b006-0cf3524201ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:60:c2:04:33:14:cc:24:7b:6e:75:2a:63:38:06:db:82:8b:
         78:d3:a8:4a:fd:84:b3:17:0d:cd:83:7c:1b:4e:48:29:de:10:
         7d:b8:d9:3f:02:4a:3c:c9:fb:67:a2:81:a0:d9:8b:93:cb:71:
         75:3e:c6:c3:2d:93:93:b1:55:88:e0:6b:d3:59:35:94:9a:c8:
         be:c3:52:78:92:7e:29:b3:a1:81:28:ca:b1:d0:21:1d:9a:8d:
         15:6a:2e:53:ac:07:91:cc:af:46:a7:07:98:76:8e:87:08:9f:
         68:bf:e2:f2:b5:94:2d:05:33:6b:34:2e:d7:be:fc:fb:5f:ca:
         9a:bf:41:79:3b:f1:d5:04:92:52:61:d8:86:b6:27:5d:20:19:
         92:41:3c:c9:bb:b1:ea:75:9c:cb:96:09:07:10:f4:02:7c:a8:
         a8:0c:4c:70:4a:13:a7:b4:99:5c:10:3c:d0:ff:45:6d:5f:99:
         b9:b8:8b:8c:ec:3d:b1:60:49:c7:74:3b:79:8a:27:45:98:88:
         40:c7:6f:3a:aa:0d:d5:09:2d:3f:d3:1b:a4:8e:e8:2e:18:03:
         66:05:f7:d7:d2:1e:9c:37:8a:ba:93:e9:1d:0d:b7:d5:81:7f:
         45:76:a9:9a:15:82:d5:87:b6:d3:da:e2:d7:ea:e9:84:2d:9f:
         8d:7c:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:41:16 2026 by rpki-client