Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa
File:                     4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa (raw, json)
Hash identifier:          WJwW3dpe12MpS+1aFL6TXyt8/G0hkVln2NkLO2/Hc1Q=
Subject key identifier:   F2:DB:EE:EC:92:90:54:E4:1A:9F:F8:CA:58:84:7D:92:CD:22:D6:FB
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584EF2E76E0A56451BB988D55FE0
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6e:0a:56:45:1b:b9:88:d5:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=f17570b5-ba76-443e-8b77-e806e70f5f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:3d:5b:ec:9d:9c:92:2f:4e:dc:9d:03:56:
                    28:ed:45:10:ad:76:80:ce:7c:3d:5a:4a:07:47:1c:
                    e5:a8:9f:b8:99:91:3a:af:e6:cb:65:19:0a:ac:f3:
                    90:26:87:2c:0e:d2:fa:e9:64:65:90:97:12:9e:99:
                    bb:be:b3:b3:26:36:dd:e2:03:96:69:19:2b:ec:47:
                    88:f5:39:8e:93:d8:9a:15:11:c7:f1:d5:8e:95:6c:
                    5f:34:8d:c3:69:20:1e:60:37:00:0d:f9:71:ae:43:
                    39:4f:2b:26:52:93:5b:eb:5d:43:13:ae:ea:b4:a0:
                    33:e9:76:d7:5d:fa:42:f3:0d:54:86:c6:08:d8:1c:
                    8f:5b:2d:59:8d:a2:91:22:88:eb:d5:6b:5e:b6:69:
                    9b:26:c1:1a:2a:6f:65:fa:d5:53:38:2d:92:f0:5a:
                    64:34:82:be:1d:e8:08:f8:57:86:50:80:2f:bd:23:
                    44:f7:e6:5b:bd:63:79:9d:f0:f6:b4:d8:f2:64:8b:
                    9f:f1:e8:fd:fe:3f:1f:84:57:a7:df:ae:f0:3a:90:
                    2c:5a:5a:0f:83:c4:9a:08:90:86:2c:e4:f0:17:e9:
                    40:d6:66:85:69:6d:35:13:f7:91:6d:e9:8b:47:06:
                    c1:97:59:3d:d9:ca:86:f9:4c:e0:b7:e3:f7:04:6a:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DB:EE:EC:92:90:54:E4:1A:9F:F8:CA:58:84:7D:92:CD:22:D6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:dd:18:8b:64:9e:c3:ed:c3:84:d1:2f:02:2e:83:20:4a:
         d1:a8:a6:d0:ee:79:77:20:b5:de:55:52:94:fb:8c:90:57:e7:
         9a:38:80:45:43:fc:20:1c:0b:22:eb:87:d3:58:76:8c:39:3b:
         55:9a:f9:5a:fd:41:a5:61:ed:90:0e:1e:50:a0:26:d7:65:7d:
         4c:11:d1:8a:b5:d6:11:9d:d1:68:36:18:a3:ef:91:83:9b:aa:
         da:91:84:fe:9a:3f:53:82:57:48:61:f8:42:73:95:5f:f0:87:
         61:0e:54:e9:46:d0:0a:d3:c4:e6:86:cf:47:35:e3:8f:5b:0b:
         e9:ee:82:42:ca:ef:15:83:88:41:f4:40:bf:86:a9:17:a9:df:
         2a:68:2c:b4:55:f3:be:ec:0a:7c:aa:1a:00:19:ef:6a:71:61:
         2c:b9:b0:23:70:bf:96:28:b2:9b:dd:c3:f8:09:52:01:3d:73:
         1e:ac:e6:2f:7f:bd:b3:66:dc:a2:6c:e1:6f:16:a0:31:52:1a:
         2f:c3:ac:1b:b2:26:a5:39:9f:d0:22:00:8e:71:fd:71:fd:51:
         31:60:95:d6:ed:c6:8f:45:ca:d9:67:1d:08:e0:58:cd:ce:7c:
         14:05:4b:16:d0:31:51:ee:b5:a2:a8:d0:57:e2:02:05:cd:5c:
         8a:69:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:48:23 2026 by rpki-client