Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa
File:                     945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa (raw, json)
Hash identifier:          Yc1QVdEGAzcjsDccvcmpxYGNxH5I+3HN35Y5dbiYZzU=
Subject key identifier:   E2:DB:22:E5:55:D3:CF:9D:4C:6E:9E:AB:82:B1:59:7C:8E:34:82:A9
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F2EED250A46DB594F67B30340
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     11232
IP address blocks:        2605:4a80::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:25:0a:46:db:59:4f:67:b3:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=2906ae2c-75b5-4813-bd41-4d4d089418af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:05:66:95:eb:de:46:a4:68:d4:17:e2:85:
                    22:ef:fd:a0:5c:14:50:cf:fb:fb:d2:17:ca:df:92:
                    cf:56:c3:fa:65:a1:28:51:ef:28:7a:f9:bb:44:d7:
                    fc:0d:88:cb:93:19:4b:8b:c1:04:bb:d6:c5:39:7a:
                    73:db:bf:d7:98:07:cc:66:42:4f:a7:d8:81:b0:0f:
                    c1:f2:00:fc:ef:fc:b5:1d:89:39:30:13:ad:da:16:
                    c3:fb:95:c6:de:8e:45:d6:59:67:78:d7:67:00:69:
                    5b:1f:80:e2:bb:aa:1b:de:a1:2c:4c:ac:bd:1f:f1:
                    aa:d0:cf:3e:56:52:ea:45:e0:96:2b:3e:08:b3:a1:
                    f9:70:b5:0d:86:55:8a:a9:8c:36:3f:78:4c:fe:5b:
                    0d:7b:a3:c4:2f:74:ca:3d:95:fc:01:ac:ac:10:85:
                    42:1b:70:14:52:27:93:34:08:0c:8d:b7:ea:c6:df:
                    01:80:4d:76:67:d8:70:fe:80:31:15:f2:8e:98:3c:
                    18:06:23:e8:5b:f5:ad:8c:5e:1c:d5:50:cc:e8:c7:
                    aa:b2:09:ae:50:5a:89:b5:e7:e9:da:d4:87:cf:4f:
                    74:d2:5f:aa:45:e6:e0:80:c5:ef:59:98:07:84:db:
                    88:fe:79:79:76:4e:d8:90:cd:86:aa:b7:76:72:78:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DB:22:E5:55:D3:CF:9D:4C:6E:9E:AB:82:B1:59:7C:8E:34:82:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/945ae9e7-bab7-38eb-ac3b-3300c1bd27ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:48:d3:d7:90:d0:f6:b4:53:2c:60:d5:67:7a:ac:b5:c8:f2:
         6e:98:14:82:48:dd:5b:2e:39:9d:38:0d:6b:32:21:d0:ec:77:
         4f:ce:6c:1a:14:03:a7:29:85:d2:b5:41:f6:0f:32:fa:7e:d3:
         9b:39:df:c4:c4:82:53:88:07:aa:33:38:ff:69:c9:90:1e:98:
         a1:ca:46:d6:af:a6:a8:ef:ba:39:6a:c7:b5:1f:64:ec:28:5d:
         b6:38:ee:0a:a2:8c:51:03:b1:c7:38:68:7b:62:38:85:dc:d0:
         ca:82:78:ae:fb:c2:3f:d9:09:12:10:ec:bf:6d:12:90:4f:e6:
         6d:9d:32:85:a2:3a:f1:3d:88:a6:bd:ee:07:d6:31:b6:2c:a0:
         e0:d4:15:c6:ab:28:14:d4:f6:92:fd:78:b7:28:b8:38:cf:9f:
         0b:0a:e6:23:ad:3c:e8:07:3f:16:a9:1a:c0:fd:af:f4:7a:04:
         6f:10:ef:91:c6:1e:51:4f:10:12:28:cd:d8:f2:e3:58:fc:04:
         ed:be:db:a2:b6:12:85:ed:76:72:e4:f1:49:be:8d:f4:c2:0a:
         5a:e3:bd:09:19:cd:fe:67:77:1a:fe:a3:93:6b:9d:4d:3a:33:
         c7:c5:c3:74:b8:69:a6:30:c2:32:73:22:c3:3f:83:cd:00:b4:
         44:c6:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:21:09 2026 by rpki-client