Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa
File:                     67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa (raw, json)
Hash identifier:          JL9vamyi4NYlvKePfrQxIH8I9Rnoia8mFjsNQdFuxbY=
Subject key identifier:   98:51:DF:12:FB:DC:67:8B:82:C5:9E:40:E3:DD:0F:66:98:0C:21:AD
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584F093CF378A26814154C481B60
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     3855
IP address blocks:        2606:b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f3:78:a2:68:14:15:4c:48:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=a610944c-f890-4c9b-a9f6-24d8ee5b2632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:d6:29:d3:87:d6:60:41:fc:ba:a6:a1:ac:
                    fa:d9:d5:93:4f:c4:74:95:cf:15:65:52:e7:f2:bd:
                    f6:4e:e6:cd:1c:f0:80:11:79:7f:60:9e:fe:52:8a:
                    f8:c7:b4:67:cb:01:fb:ab:ff:30:2a:31:a6:fe:d8:
                    13:45:eb:ec:79:cb:2b:af:fb:c6:e2:71:90:aa:86:
                    11:22:62:3f:b9:7c:e1:03:be:23:58:62:37:81:a5:
                    13:0b:b9:e2:16:c8:7e:18:d2:92:e6:5e:fe:70:a3:
                    cf:12:76:28:21:fd:71:c1:8e:a1:cd:fe:10:47:18:
                    9b:57:3c:de:e4:4f:c7:25:0d:cd:93:60:2b:c3:eb:
                    39:09:93:3a:e2:f1:2f:4e:05:ab:76:0d:ae:0f:dc:
                    7b:41:af:1b:b2:a1:fb:25:ec:8f:13:9b:b7:83:42:
                    c3:88:07:43:3d:89:d1:5b:16:b8:03:31:3f:a8:68:
                    84:e4:f0:4d:f5:07:ea:ff:a5:a5:17:77:c7:8a:4d:
                    9d:e4:43:ea:b5:f3:9b:06:4e:71:41:34:ab:8e:d4:
                    94:dc:18:8d:64:98:f6:57:0b:9d:0e:0a:7e:53:36:
                    11:17:34:49:db:52:c7:db:8f:33:ee:84:a1:fe:41:
                    ef:c6:24:28:3d:99:35:ff:1e:a2:3f:67:95:94:02:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:51:DF:12:FB:DC:67:8B:82:C5:9E:40:E3:DD:0F:66:98:0C:21:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c7:b4:2b:61:fa:9e:70:f8:db:58:7e:5b:31:c8:b7:e7:46:
         27:71:05:0c:01:dc:c1:06:97:47:71:f9:21:99:07:16:25:2e:
         8a:23:87:e9:46:0a:59:8d:09:29:20:11:00:8d:eb:18:ee:ff:
         bf:2f:4e:0b:42:a0:eb:32:15:8f:f0:71:83:00:be:5d:26:3b:
         87:58:e0:5c:f2:8d:58:de:94:b7:98:48:d4:c3:7f:f1:0f:dd:
         02:0f:ce:39:2a:e8:c0:6c:8a:1e:6a:02:0f:44:a7:16:25:7f:
         d3:c5:f4:8c:c5:30:d8:ed:39:6b:36:07:7a:41:fe:5d:09:ab:
         7d:57:50:31:9b:e4:17:2e:a1:58:31:ad:c3:d0:cb:db:9e:08:
         a1:56:90:36:be:07:73:e1:32:64:72:65:04:62:cd:9c:4d:8c:
         76:e0:66:f2:31:3e:59:14:ec:ee:7f:fd:01:d3:07:c2:80:8d:
         7a:bc:e4:6f:90:e7:30:32:d5:f4:fc:88:20:54:fe:3c:c7:79:
         71:8a:d7:de:b6:81:6b:7a:40:88:2a:1b:2c:88:49:0e:57:c7:
         2b:5a:dc:fa:f5:3f:95:74:02:67:f2:bd:fa:f4:10:ff:65:80:
         68:06:9d:af:da:01:1f:8c:e0:70:32:7a:50:82:3a:23:a8:46:
         c1:bf:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:22:10 2026 by rpki-client