Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/9ebaea97-6eb9-3759-a453-e90e58c61f17.roa
File:                     9ebaea97-6eb9-3759-a453-e90e58c61f17.roa (raw, json)
Hash identifier:          axhnCYqOynNFEmfG0eRdQaPrYc4KKRvG3MNahQkxH5g=
Subject key identifier:   6C:C1:80:90:69:B6:0B:92:A2:F0:B2:8A:98:B1:1C:68:02:8A:EF:A7
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584F42785A65D79BAC688614A240
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/9ebaea97-6eb9-3759-a453-e90e58c61f17.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     216047
IP address blocks:        2604:1420:1999::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:5a:65:d7:9b:ac:68:86:14:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=9c0d1ea3-d965-40c9-a055-99fd495cf6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:63:e3:90:6f:b1:ae:84:13:7e:23:14:82:
                    0a:d1:20:a9:02:6d:cc:cb:a0:ba:a1:b8:f8:bf:88:
                    e2:a0:99:4f:54:3e:fd:b6:0d:45:3c:4f:38:62:38:
                    8b:bb:4a:0c:1f:25:b8:9b:c6:a3:76:42:4c:50:49:
                    8e:68:5a:7c:ec:b0:c2:b2:d8:4a:33:60:af:8c:cf:
                    aa:98:55:16:1b:c6:ad:44:77:28:65:22:f4:1b:f3:
                    87:df:1e:fe:6b:34:57:1f:b1:2c:90:b4:46:72:ac:
                    3f:75:d8:d2:cc:bd:7c:6e:85:08:77:ed:fb:f9:1b:
                    63:fe:b7:23:df:08:64:3a:27:f0:60:35:df:51:6b:
                    d8:56:a2:26:9a:1b:cb:79:e3:42:e6:c5:2c:04:fe:
                    aa:56:0b:f5:49:2e:32:78:66:aa:ff:cc:88:f0:bf:
                    5e:28:2f:56:33:0c:00:ee:71:e6:e7:13:90:f6:d5:
                    e7:c5:99:53:59:2c:a4:2a:1f:37:78:24:38:3b:2f:
                    0f:ef:ca:d6:3c:7e:f3:dd:2a:16:14:39:fd:3d:39:
                    37:c0:7a:d5:9a:ad:d1:5b:32:cb:e6:af:da:dc:9a:
                    79:f6:bc:21:bb:57:17:eb:81:f4:94:6a:03:f4:50:
                    0b:17:a4:95:a4:27:b6:a5:1b:60:03:fc:0a:f1:9a:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:80:90:69:B6:0B:92:A2:F0:B2:8A:98:B1:1C:68:02:8A:EF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/9ebaea97-6eb9-3759-a453-e90e58c61f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1420:1999::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:a2:04:bc:21:c5:1c:66:25:be:e4:22:ae:ad:be:55:e9:
         c6:bb:a3:17:8e:71:43:0d:32:56:31:c1:7c:08:61:e7:44:77:
         99:2d:3e:8e:9e:97:73:3f:24:68:4a:ed:3f:fa:36:4f:14:bd:
         35:61:17:f2:69:ed:c8:2e:c1:c2:ed:af:ac:8d:bb:fd:17:65:
         46:6f:14:2a:15:0e:16:26:ae:87:ff:89:d2:54:9b:ce:57:f9:
         07:31:9f:67:b1:31:f7:18:4c:7a:69:77:11:75:27:08:4f:4c:
         db:56:e4:7b:62:c1:e6:90:89:40:22:2e:10:2a:82:7c:46:31:
         35:45:7a:e0:4f:31:89:27:3c:97:dc:2e:24:10:e6:84:2b:3b:
         aa:88:e1:6f:ba:7e:18:e5:be:55:0a:ce:6f:62:3f:4a:f0:0b:
         8e:cf:4f:08:f0:86:68:3b:8d:fa:47:e4:47:c2:aa:d3:3e:dc:
         a5:6a:7c:a1:80:99:7f:78:c6:69:28:33:6e:d9:2f:88:c7:df:
         9a:89:72:ee:b8:03:16:42:56:db:9a:20:10:9f:4c:d7:c2:89:
         d7:cc:1c:2d:b3:09:b8:d2:00:f1:33:d7:97:bf:25:52:de:a3:
         ba:fe:2c:ec:e0:79:58:d4:b8:ab:fa:d8:79:57:cf:33:17:ce:
         cd:a8:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:18:01 2026 by rpki-client