Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
File:                     1255431b-ba35-3116-8414-34269d9fe49d.roa (raw, json)
Hash identifier:          Y9FLXP180aW8RTUnJDnU9TY45E8T4rFEkokwp6rQba8=
Subject key identifier:   68:22:0C:B0:79:57:DF:93:D2:7E:C1:B3:7C:EC:19:E4:31:69:B4:76
Certificate issuer:       /CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
Certificate serial:       010D0C9F4328584F374D2EFD39DDB64089295680
Authority key identifier: E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2602:819:f000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2e:fd:39:dd:b6:40:89:29:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=4f12e2e0-43c7-4a45-a1d7-4114316aaad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:28:03:2c:ac:c7:d2:16:d7:4c:8c:86:1e:
                    9e:91:82:39:8d:43:8f:4c:fe:b8:33:9c:a0:b6:5b:
                    e8:f9:d1:c1:f2:bc:9b:33:3a:e2:9d:6a:09:d5:70:
                    5e:0b:2e:ac:6e:13:29:f6:f1:c3:13:91:83:83:e9:
                    d5:9c:fe:79:99:4b:2c:c7:15:51:7f:50:4b:2c:06:
                    44:bf:5c:ec:f1:7b:b7:ca:73:07:75:18:94:0f:48:
                    2a:dd:0f:0d:62:77:4d:b4:55:b1:80:4a:90:fb:3b:
                    12:8f:7f:9a:7b:5b:93:40:5b:bd:29:a2:a1:55:ac:
                    77:68:7c:85:d8:24:23:12:aa:c5:a4:1a:bb:b5:f2:
                    c0:1e:e7:cd:86:1d:a1:a9:c4:c7:35:01:01:36:74:
                    89:4e:24:aa:39:8a:47:0c:e9:a4:59:b3:ef:74:8b:
                    57:eb:59:36:c4:f6:a1:8b:af:f8:ad:4a:6f:da:f9:
                    3c:5c:a4:71:91:11:c7:e0:bd:d5:90:3b:24:0d:7a:
                    a2:61:e6:a2:82:2f:6f:83:4a:6a:3f:b1:81:da:40:
                    f2:5c:a5:f1:45:d5:89:c3:5f:99:96:d5:73:fe:de:
                    73:2d:9d:58:bc:d1:81:87:c3:69:10:da:f0:e0:a7:
                    af:bc:1d:3b:d0:3a:b6:0b:1a:d2:5f:75:8a:d1:9c:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:0C:B0:79:57:DF:93:D2:7E:C1:B3:7C:EC:19:E4:31:69:B4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:f000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:16:34:df:4a:a0:85:58:0a:76:4e:d6:cd:69:e6:a3:d8:e2:
         d8:d5:24:6f:08:00:9f:ae:69:9e:87:a2:be:f5:8a:52:e9:ab:
         f1:cb:53:92:48:2e:c2:08:1a:36:68:3f:5a:a1:11:29:bd:23:
         4d:85:fb:07:29:c7:97:d1:13:0b:c4:20:e1:f0:b6:bb:7c:c6:
         1a:3a:05:70:20:2d:67:cf:3e:72:33:90:11:cb:c4:2e:fa:fa:
         36:05:0b:aa:42:cc:12:94:97:ff:3a:4b:22:01:d7:11:64:c5:
         3c:6b:f0:d5:e6:e2:9d:11:c2:ef:4b:a5:bd:c9:b6:c8:7e:4b:
         e2:94:a1:40:a2:29:63:fc:d2:d5:22:61:ba:3e:5a:df:58:33:
         ad:f4:15:5e:d4:1d:e7:c8:e3:f6:5f:b0:e1:ec:dc:4c:d2:fc:
         3f:d6:a8:cb:f4:b9:8f:b1:b7:1d:d6:a9:3f:9c:01:a2:f9:1e:
         a2:7c:44:a3:2a:a3:92:8a:ad:08:4e:b2:86:ba:44:98:ad:fd:
         66:5e:ba:a1:d3:71:11:c6:cc:cd:df:48:8a:6c:e4:d5:4b:c6:
         ab:0b:30:4d:70:e8:4b:9d:b0:fb:b5:07:92:a6:ad:7b:4b:6d:
         67:db:d4:8d:77:33:6e:8d:bb:f2:86:2b:5e:98:18:5e:78:4a:
         8a:a0:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:35 2026 by rpki-client