Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
File:                     b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa (raw, json)
Hash identifier:          c07XgOj7067lrATtjVoiCxAo4eN1FfJJDxbEKtGLAws=
Subject key identifier:   8F:5C:05:82:19:9B:26:39:44:AA:7C:A9:34:AB:3F:B0:64:79:50:11
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F1897980F5FEF1F529E529B40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:98:0f:5f:ef:1f:52:9e:52:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=479272de-6b6a-4b89-8aa7-b0b24431355c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:c4:57:6a:af:8e:8d:47:56:9b:07:8f:7d:
                    71:b8:ed:a4:23:ce:ab:e9:ab:87:78:15:e2:16:54:
                    e6:3e:2e:d2:1d:6d:cd:90:dd:3e:2e:82:df:6d:eb:
                    72:b4:a6:4a:1b:29:a0:52:ae:95:f2:f1:e4:76:74:
                    7f:6a:56:c6:27:02:3e:de:07:a5:5a:4a:e7:cc:19:
                    b5:c5:a2:62:1f:cb:49:1c:06:af:91:05:e7:4a:7a:
                    c9:7e:88:b7:df:4b:e0:d4:2b:5f:76:38:06:1d:9e:
                    1b:4d:4a:f8:e4:be:c3:f0:4a:a3:32:6f:37:69:57:
                    25:6a:81:cd:02:a5:38:d5:2f:eb:68:19:48:34:d7:
                    12:4a:1b:f6:88:69:cc:fd:c8:b7:78:1d:fd:5a:3b:
                    04:32:f3:53:02:d7:51:ca:9b:60:f0:f7:d0:3a:1f:
                    ba:06:cc:a6:26:bf:a8:5e:17:4f:e3:cd:40:67:ef:
                    57:fc:56:f1:1c:bf:7e:94:94:ef:e2:06:0f:04:02:
                    46:ae:a7:a1:ab:06:89:4b:18:3d:51:7a:94:35:0e:
                    1b:f0:8e:4b:87:8a:69:70:25:7e:9c:b8:d9:97:c6:
                    8b:7a:a3:80:03:52:b6:12:a1:c9:29:fb:b0:cd:1a:
                    b3:ca:aa:13:d3:be:f8:39:7d:4b:13:69:60:11:40:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5C:05:82:19:9B:26:39:44:AA:7C:A9:34:AB:3F:B0:64:79:50:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b512dd4e-2bcc-3c2d-b294-851fa3aa5dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:63:7e:50:be:bf:ee:6c:fe:b2:61:2c:e0:2e:d1:fe:3b:
         92:e1:ec:ca:44:8d:73:a5:0d:5b:98:b6:d5:19:5b:74:f2:e6:
         cc:2a:5d:8e:c2:3e:ec:dc:5d:b2:f4:8f:9e:02:48:29:c8:01:
         10:60:60:5b:79:81:be:31:13:c3:97:1a:27:ff:64:55:1b:a1:
         f6:d5:b1:e0:0f:9c:e5:c7:9e:fa:06:e3:b0:3d:e9:0d:14:09:
         d4:49:7e:44:73:8e:07:ae:71:2a:2a:e6:5c:07:ae:74:99:fd:
         c5:94:48:a2:2b:42:87:0f:3e:4d:31:06:4a:0f:2e:74:b5:df:
         22:eb:9f:8a:74:90:11:c1:3b:3f:60:a7:00:12:0d:08:75:22:
         d4:d5:3c:1d:49:3d:6c:70:d4:ec:b3:ac:98:26:02:15:1e:f3:
         cf:b4:94:db:7e:18:11:61:4a:67:c0:ad:71:47:87:8b:6f:0d:
         e0:70:b9:58:c6:35:fe:79:23:9a:8d:ae:1a:a8:bd:1a:62:cf:
         14:ef:64:4e:2e:f4:a0:76:7a:10:d3:51:56:a7:48:11:99:24:
         8a:05:6b:d4:3d:f1:10:be:7f:d2:54:03:90:6e:bc:30:7d:7f:
         e9:aa:0b:05:4b:7c:b2:bc:1d:b0:ea:1b:f3:ad:f7:0b:48:c9:
         75:44:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:42:06 2026 by rpki-client