Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa
File:                     e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa (raw, json)
Hash identifier:          FvPsaMsJB6z/J651n+26/sMewIx1pdUx6DYRwA7TVzY=
Subject key identifier:   8B:1D:88:0D:57:06:F2:4C:20:89:45:F6:F3:62:2D:45:C0:67:EB:55
Certificate issuer:       /CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
Certificate serial:       010D0C9F4328584F3A17D3134980BCA72E707780
Authority key identifier: FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     36081
IP address blocks:        2620:0:eb0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d3:13:49:80:bc:a7:2e:70:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=8280a166-e3dd-49b0-9636-bf0a1029b4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:ad:5a:98:bf:e9:da:c1:3a:d4:3a:6e:da:
                    c4:0e:0e:bb:e9:25:7a:e7:dd:6d:24:35:03:12:ae:
                    f9:ad:20:96:51:a1:c2:ee:d1:01:c6:d4:a3:20:63:
                    75:dd:e6:3b:eb:a6:4a:13:39:8f:5c:43:93:c3:9b:
                    34:85:04:26:84:1f:dc:96:55:0b:0a:fb:c7:85:f8:
                    42:26:99:84:df:80:a9:60:68:68:d7:0c:ca:91:66:
                    a8:ef:f7:cb:b5:8a:d1:a4:cf:91:8e:eb:de:fe:62:
                    5d:26:16:8e:0d:fa:cf:52:5d:ed:81:11:60:e8:b7:
                    71:f6:25:57:a5:e0:b6:81:61:fe:65:f5:fc:41:d2:
                    22:6f:2d:a2:fc:81:f5:9b:42:fb:2d:8d:74:37:5d:
                    ed:d7:95:92:16:73:3e:43:8a:c9:7b:94:f3:ba:58:
                    65:ee:64:6c:12:05:fb:b3:68:2f:73:62:6d:c8:52:
                    ec:1e:f6:24:42:5b:75:7e:7f:5f:4e:ce:90:04:37:
                    00:f1:78:db:fe:22:43:b6:e2:91:17:63:5c:54:24:
                    c2:2b:60:14:23:24:7a:d5:3d:ed:de:aa:a5:fe:03:
                    bd:04:c4:45:e1:fd:6f:ad:af:1a:a8:29:32:80:7d:
                    9c:0f:91:9b:5e:8e:77:31:21:a0:35:35:51:4b:c5:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:88:0D:57:06:F2:4C:20:89:45:F6:F3:62:2D:45:C0:67:EB:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl

            X509v3 Authority Key Identifier:
                keyid:FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:eb0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:b6:41:43:8e:ab:58:35:9c:e1:93:33:26:2b:60:c4:2e:
         5d:92:cd:0d:82:fb:dc:0b:1f:e5:df:58:ad:c1:03:eb:0c:f9:
         86:f6:f4:1d:d6:de:4c:81:38:f2:7a:0d:f3:17:5a:00:75:be:
         bb:f5:f2:ae:83:a6:f9:a6:c7:ab:ee:94:ab:d6:16:9a:51:39:
         02:70:94:e6:9c:b9:8e:db:56:25:d9:73:7c:5e:0b:8c:cf:9d:
         45:ee:cb:45:6f:99:43:a8:7b:39:a4:79:be:1b:0f:5c:39:01:
         b9:42:d1:e7:7b:97:fe:85:58:36:f7:e3:4f:a0:db:e1:0f:8f:
         89:e0:34:33:a0:65:96:9f:8d:66:8f:c8:f6:55:02:8c:ee:a9:
         f3:8c:9d:40:57:17:86:37:f1:0c:55:6a:11:29:15:b4:5c:83:
         ac:d4:e2:15:fe:70:4a:38:0e:73:5c:3d:f2:85:c6:88:81:29:
         63:31:eb:27:82:e2:80:4e:0a:9e:c7:87:e1:24:0e:3c:fe:53:
         6c:08:c4:78:11:42:5e:aa:97:5b:ac:f9:21:f2:ab:22:f4:70:
         d6:e3:8b:7b:d2:7c:d5:45:b5:96:11:81:5d:f0:f2:63:8c:94:
         be:36:34:6e:43:75:22:7e:99:d5:d3:4d:49:58:c9:00:12:8a:
         e3:b3:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:29:41 2026 by rpki-client