Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa
File:                     ea1a9030-9438-32dc-88a6-09fec6a92edf.roa (raw, json)
Hash identifier:          TkcN3u/TCY/up6h0z8DYNtod1gB1Ogku9kHikHEDRJo=
Subject key identifier:   48:B9:2F:BF:7C:B9:40:8C:69:FF:30:EA:CA:BA:E4:C3:72:98:63:0C
Certificate issuer:       /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
Certificate serial:       010D0C9F4328584F1467A080AFAB83BCB463C880
Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     399519
IP address blocks:        2606:3bc0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a0:80:af:ab:83:bc:b4:63:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=b1bd822b-e165-4e38-84d5-115fbaa255a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:da:24:fb:d3:a9:26:f5:99:a0:77:d3:87:
                    d1:4b:f6:04:94:fb:ec:71:74:f4:84:bb:45:fe:ab:
                    7f:9d:6f:9f:c1:3b:99:b1:08:28:bb:15:f4:f8:57:
                    b9:ee:8e:73:45:cc:34:bc:cf:53:a6:97:8d:4e:8d:
                    3f:6e:e2:7d:42:6f:fd:78:ec:7c:93:60:fa:4f:3d:
                    4c:25:ec:db:46:df:88:ba:63:ae:a6:3d:f7:a6:b2:
                    3f:9f:e4:04:bb:0b:59:30:ec:fe:7c:5d:de:38:61:
                    da:93:bb:85:05:12:fb:5b:c6:f5:19:3f:00:e7:e8:
                    07:bc:26:87:24:d0:37:63:5f:be:e1:83:31:fe:80:
                    d0:73:18:3e:bc:20:5a:bd:d7:6c:34:26:28:3d:76:
                    85:fa:94:97:da:d8:c0:7c:2b:7c:c7:60:87:d5:9d:
                    4c:24:be:71:c8:ca:22:94:49:b5:dc:77:fb:e3:00:
                    6c:40:23:d9:e1:ac:f6:6a:bf:12:9f:f8:9a:27:8e:
                    cf:9e:aa:11:b9:2c:2a:91:ab:07:ba:26:ba:8f:57:
                    24:2d:5e:80:22:22:0f:44:4c:ec:c0:16:4d:aa:fe:
                    d5:7b:24:3c:30:60:f2:e1:95:62:6d:da:8f:81:f6:
                    be:94:ac:34:bb:fa:28:f5:34:55:d1:6d:59:6e:db:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:2F:BF:7C:B9:40:8C:69:FF:30:EA:CA:BA:E4:C3:72:98:63:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl

            X509v3 Authority Key Identifier:
                keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:4c:42:bc:65:95:5d:79:40:cc:f4:3a:dc:13:75:1f:57:
         80:6e:51:71:67:70:5c:13:f7:28:b2:29:c0:4e:d5:99:e4:c1:
         e6:b9:81:91:06:b4:ff:d7:57:3e:2b:eb:5e:9e:48:77:cc:a0:
         7d:59:b0:d5:46:d8:62:b2:3c:df:e8:17:99:78:77:ea:37:fd:
         fa:d9:4c:77:c5:80:7d:7e:3a:c6:37:57:f6:e0:28:ab:20:a0:
         c9:ec:b5:c9:b2:d2:42:70:60:e4:f2:6c:df:4f:df:eb:36:a6:
         c6:d5:4f:5f:b6:21:35:d1:54:22:bc:b4:f4:f5:db:92:22:a9:
         69:f5:db:ee:66:c3:76:d9:2a:e0:84:75:33:db:ec:02:16:76:
         ec:89:ea:6d:18:cc:08:44:50:4f:41:55:52:07:44:1b:51:6c:
         59:60:4a:d4:64:8b:57:40:95:cd:e9:8b:19:a7:8a:8c:40:b8:
         41:9c:98:f1:19:5a:5c:2d:52:99:dc:e8:33:3f:14:c7:bc:f5:
         07:3c:c9:6d:cb:38:44:81:1e:2d:8e:06:87:8b:eb:b5:d7:a2:
         bd:b9:2d:f8:f1:49:d0:56:39:4a:0b:01:a3:e7:f0:d3:19:30:
         9d:fb:55:d4:ef:06:8e:e6:f2:25:da:75:2c:17:a8:73:66:09:
         08:19:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:48:34 2026 by rpki-client