Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fe73f0fc-fb9d-3677-977d-b155876310eb.roa
File:                     fe73f0fc-fb9d-3677-977d-b155876310eb.roa (raw, json)
Hash identifier:          nnGJRZwH2ogAJZNG7HW7T/Hd3RO8zTnQaQnWouVvLYo=
Subject key identifier:   B2:00:58:B2:23:4A:F5:3C:A6:AE:16:88:6F:26:C5:F7:70:F4:7C:EC
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F1467AF81793161C02C944300
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fe73f0fc-fb9d-3677-977d-b155876310eb.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        2607:dbc0:c00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:af:81:79:31:61:c0:2c:94:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=a99f35f7-8cab-4640-9486-fa83b2b2a0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:eb:cd:49:75:13:46:14:0d:13:bf:78:1a:
                    f3:1e:81:24:5f:14:e8:a5:ae:81:fa:bb:9e:c0:ac:
                    d8:5f:c0:81:08:26:4f:13:6c:b6:fc:04:69:06:4f:
                    87:15:99:52:ae:14:c6:7e:af:14:2d:0e:70:6e:53:
                    aa:42:e0:ca:c2:3b:ec:88:31:2a:0d:59:94:c4:e1:
                    80:9a:81:72:37:1e:c4:f0:f8:dc:8c:f2:3c:01:b9:
                    0f:ce:70:3f:b7:da:1f:a9:54:21:1a:fa:96:a9:0c:
                    2a:c8:03:08:b4:03:47:9d:9a:e5:64:89:50:43:4e:
                    c0:f8:39:cb:79:47:76:71:83:bb:8f:df:b8:b7:f0:
                    d6:27:a9:33:a0:d7:5d:2b:85:64:04:c0:d9:3a:00:
                    38:85:ce:66:8b:bf:8a:63:30:63:39:7b:52:24:1c:
                    81:75:cf:6d:00:50:52:85:c5:e9:28:85:fc:9d:8b:
                    bd:df:dd:a8:36:37:4c:fd:71:5c:2e:6d:7a:58:3c:
                    22:12:6d:5b:1c:3c:ee:6e:93:07:c0:0d:70:75:5c:
                    9a:a5:78:d9:2b:ca:35:7c:0b:29:0e:11:32:a2:b7:
                    55:26:91:ae:df:e8:5e:27:46:63:14:a9:8f:fd:91:
                    9d:5f:4a:58:a2:3d:e2:32:10:f6:53:8e:24:8e:7d:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:00:58:B2:23:4A:F5:3C:A6:AE:16:88:6F:26:C5:F7:70:F4:7C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fe73f0fc-fb9d-3677-977d-b155876310eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:c00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:52:a2:e5:b6:cc:cf:f5:93:54:55:b1:a2:37:47:fb:d7:4f:
         60:de:1c:69:a4:e4:48:98:ea:67:3d:fb:42:07:d4:67:ef:6f:
         57:6c:fb:47:a7:dc:07:24:87:e3:6d:d5:6c:20:c0:04:c7:5b:
         fa:fb:80:d3:be:84:0e:e5:32:8a:71:70:f7:ea:1b:db:3e:66:
         0d:93:40:d5:0a:fc:13:0b:1e:b5:f4:1e:ea:d6:39:14:d4:63:
         2a:8d:7a:90:d1:ab:a3:59:5c:80:02:5c:0a:2a:d6:b7:9e:c9:
         06:c0:d4:17:b7:56:5d:50:93:3f:4a:3c:06:8b:d3:83:c7:84:
         1c:10:c6:d8:ed:b9:92:42:67:8d:52:b6:f3:ec:c6:c2:65:32:
         b8:e9:6e:03:99:91:0d:c6:37:ac:f3:1b:86:ce:9e:a2:50:39:
         ad:ca:2a:82:90:6a:54:6e:a6:25:99:55:68:2f:fc:31:4a:fd:
         10:ce:37:55:ba:ba:42:ec:e5:93:89:60:6b:c1:a7:a4:31:8d:
         86:33:b7:8d:66:aa:f4:9f:57:31:12:2f:4b:e2:2c:60:e2:8e:
         41:4b:9a:2c:a9:09:72:fa:16:b7:a6:51:24:49:b8:64:57:64:
         ce:7c:b5:c5:1b:f9:41:41:00:d3:fd:96:10:69:87:d9:b1:d6:
         ae:b0:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:29:19 2026 by rpki-client