Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          ZLrTT/qyPvkz+Kdue2557LBjL6cirvb7S0v7Kc1PZoA=
Subject key identifier:   E9:7C:F5:6A:BC:10:22:36:04:1E:1A:91:1C:16:33:2F:A8:84:B3:E7
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F4328584F30527FA884D2E74F31EC6610
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7f:a8:84:d2:e7:4f:31:ec:66:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=2e0f85c8-5861-4c71-9721-195cade403f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:7e:d3:a1:d5:2c:e2:14:0a:8a:bf:d1:96:
                    2b:73:69:99:24:97:7b:2c:39:fe:97:aa:d9:84:ca:
                    97:c0:f5:96:db:5f:1c:34:d7:6a:e8:49:2f:3f:5e:
                    ea:8a:d7:8a:c5:ae:3e:7f:61:14:8a:d4:12:09:cd:
                    fa:2a:90:6d:3f:83:fc:09:b1:35:a5:0d:c9:0a:d0:
                    e7:59:cf:57:5c:80:e2:f1:36:28:a7:3f:58:77:3c:
                    43:8e:3a:b0:3f:42:b8:0e:29:4b:08:0b:ba:b8:dc:
                    93:48:4f:9a:aa:fe:1c:bf:1a:90:45:94:46:72:0f:
                    bd:be:11:38:2b:36:f6:06:85:93:63:bc:a9:e6:1f:
                    4d:9b:eb:31:60:b2:61:84:b9:27:89:94:a7:d7:49:
                    f6:a0:8e:b8:9a:d1:52:79:1b:44:d5:8f:98:bc:d9:
                    51:89:13:38:8c:65:9a:cf:09:1b:bf:f6:63:5b:c4:
                    3b:90:d6:60:29:58:88:67:f2:d1:ff:04:37:da:87:
                    4d:4f:de:ad:a3:31:ab:53:9c:9b:2c:19:b5:f6:f7:
                    13:52:22:e1:13:81:7e:ab:7f:43:be:34:9e:46:d1:
                    fa:32:58:ad:45:64:6c:3b:74:d7:4e:ce:df:49:48:
                    95:8c:d3:3c:9d:b8:3c:06:de:9f:67:cf:61:66:79:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:F5:6A:BC:10:22:36:04:1E:1A:91:1C:16:33:2F:A8:84:B3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:78:9a:f8:49:da:f0:9e:2a:7b:df:bd:f5:2e:7a:75:07:a7:
         13:11:59:94:0a:65:e8:93:cb:1f:c7:c0:0e:f4:62:ce:55:13:
         81:02:4b:50:ca:d2:f4:50:31:ad:38:74:00:63:a5:96:c7:53:
         31:44:8f:df:f2:da:6b:16:68:28:9d:c8:29:02:bd:e5:99:fa:
         e8:dc:0a:20:04:74:cc:f0:61:fd:f7:a6:6e:4e:9b:3a:97:14:
         fd:b6:4e:64:2f:30:fa:9d:20:16:66:d2:db:fc:01:a9:e9:ad:
         bc:45:98:ce:fa:0b:ab:4c:ce:05:25:16:77:35:4e:c7:2c:8b:
         90:16:5c:45:64:50:e0:c5:31:6f:c0:20:6b:98:68:b6:79:a3:
         77:86:2a:0f:f3:fa:ae:92:15:30:7d:18:24:76:cb:d4:fa:dc:
         1b:ab:a1:8f:28:b1:a6:a3:7f:81:cd:a8:21:d5:a4:0f:98:26:
         83:3f:49:13:40:79:2d:b8:db:98:bc:d4:15:c7:23:09:53:a6:
         c9:ba:8c:4a:a0:ad:7d:d4:ea:29:75:21:54:f2:8c:90:96:00:
         00:b3:a8:b3:87:d5:b8:19:bb:6c:ba:73:c3:36:c3:ee:a5:d4:
         81:15:82:b9:ba:2d:12:67:28:8c:d1:bc:bc:bb:28:11:27:a0:
         fa:94:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:40:46 2026 by rpki-client