Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/71ee451a-0aa8-3354-9d5d-592b541847a4.roa
File:                     71ee451a-0aa8-3354-9d5d-592b541847a4.roa (raw, json)
Hash identifier:          gqhvmWgDDj79Du1Evm6gYVnTcUbw76A6Adu/2H4mGTQ=
Subject key identifier:   B2:3C:A1:49:BA:F8:D1:8C:31:93:F7:10:16:47:4D:8A:80:47:07:DC
Certificate issuer:       /CN=bf16245c-ee02-43a5-8f72-89ffd5b7bc6b
Certificate serial:       010D0C9F4328584F3317802F3721597B64C7FB80
Authority key identifier: 73:EF:11:6B:E9:B5:45:9F:F6:3F:C4:DF:61:F8:26:D1:32:10:DB:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/71ee451a-0aa8-3354-9d5d-592b541847a4.roa
Signing time:             Thu 17 Sep 2026 00:49:02 +0000
ROA not before:           Thu 17 Sep 2026 00:49:02 +0000
ROA not after:            Wed 16 Dec 2026 01:49:02 +0000
asID:                     396144
IP address blocks:        2604:6340:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:17:80:2f:37:21:59:7b:64:c7:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf16245c-ee02-43a5-8f72-89ffd5b7bc6b
        Validity
            Not Before: Sep 17 00:49:02 2026 GMT
            Not After : Dec 16 01:49:02 2026 GMT
        Subject: CN=4936d601-3455-4c6b-a168-e0e383d40f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:0e:7a:5a:ab:09:02:f0:1f:eb:94:b7:3a:
                    7c:f9:42:ec:93:74:a9:90:6b:0b:7a:91:77:74:72:
                    81:49:07:e3:75:b9:f0:00:5c:a7:7a:21:78:48:df:
                    a5:94:47:7b:e8:75:23:69:3c:dc:f9:1c:c7:95:d5:
                    d7:4c:4f:29:56:61:4f:af:01:4d:99:1f:25:a6:93:
                    71:ad:bd:d6:cf:9b:cf:ca:d2:fb:18:b5:49:fb:e1:
                    98:15:21:97:69:61:4b:6c:b9:18:df:ff:c6:12:88:
                    d7:ca:4d:0f:14:ef:69:62:f4:31:3d:51:b6:e7:fb:
                    fe:1b:af:3b:18:38:29:9a:f8:25:93:22:4c:74:ee:
                    fd:64:3b:d8:b1:14:3c:4d:30:91:d3:11:be:ed:db:
                    ef:9c:9b:fd:2a:f1:a4:e2:df:0e:a0:79:80:be:51:
                    65:0b:83:2b:3c:0b:f8:4f:aa:ab:9e:30:2c:9b:c4:
                    8c:7a:e3:96:8a:ec:83:49:41:8d:b0:fd:d9:46:d0:
                    0f:48:4e:41:74:6f:8f:87:38:d3:4c:a2:da:68:64:
                    a1:20:77:34:94:af:8b:0c:25:09:cf:ef:2b:25:c9:
                    e7:6e:cf:c9:49:82:ab:b0:25:e8:1d:0a:35:28:3f:
                    fa:f4:1b:18:aa:4b:b5:1c:23:19:f7:df:7c:ae:98:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:A1:49:BA:F8:D1:8C:31:93:F7:10:16:47:4D:8A:80:47:07:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/71ee451a-0aa8-3354-9d5d-592b541847a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.crl

            X509v3 Authority Key Identifier:
                keyid:73:EF:11:6B:E9:B5:45:9F:F6:3F:C4:DF:61:F8:26:D1:32:10:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6340:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:39:55:b1:08:ef:da:96:55:f8:cc:82:1d:c7:91:da:4a:38:
         69:fd:4b:4a:fd:3c:17:3b:69:81:39:78:8a:9d:be:50:31:05:
         7d:16:de:cc:e6:c2:08:b4:ae:1a:f6:92:b2:5f:fd:cd:05:70:
         38:4a:d3:39:bc:8b:af:23:ae:1d:d9:c8:44:0a:fa:03:43:b0:
         c4:48:78:3f:11:e6:70:6a:ed:9e:0b:62:95:c7:fc:cb:01:83:
         9f:25:a9:0f:a5:13:4c:ef:3c:e5:8a:05:18:aa:32:19:a2:fe:
         6d:72:ed:b9:8d:5a:14:fe:66:04:4e:e3:9f:cf:bf:0d:a2:7f:
         c0:7b:9d:5d:5b:83:24:9d:64:d5:6c:69:0e:37:7f:eb:aa:60:
         4b:40:5a:be:ab:e7:07:78:c8:47:71:9e:60:35:71:a6:a4:05:
         59:9a:b3:9c:bf:a2:f7:d1:2b:66:9f:a9:e7:10:5d:de:ac:83:
         13:66:2d:79:97:fb:ff:b7:e0:f3:05:f4:a2:4b:8d:fe:bc:5a:
         3e:25:54:e3:03:cb:00:15:45:a1:93:0d:60:0a:39:1e:5f:64:
         9c:21:fe:87:9c:d1:21:eb:a8:99:dd:21:56:0b:3d:a2:ad:b9:
         be:ab:eb:e1:b1:d8:2b:cd:9b:b0:9c:29:7a:96:1f:46:c1:8e:
         ee:69:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:15:53 2026 by rpki-client