Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7a9e545c-0b1b-3af0-9f1b-8991b5bdf1fd.roa
File:                     7a9e545c-0b1b-3af0-9f1b-8991b5bdf1fd.roa (raw, json)
Hash identifier:          SDYLW1uBl/QbtIAaskCPOEs3M3xSpH5FAUD9SjpCDCU=
Subject key identifier:   FF:D6:42:1D:CB:F6:C2:EB:B7:6B:F4:FE:01:1B:21:77:90:84:61:DB
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584F497575C4FBD58E5442D61700
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7a9e545c-0b1b-3af0-9f1b-8991b5bdf1fd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393249
IP address blocks:        2607:f8f0:1210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:75:c4:fb:d5:8e:54:42:d6:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=402f9df4-4956-4ade-83cb-a46752517d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:8d:5b:b8:fe:dd:ce:a0:70:5c:cf:7e:86:
                    16:cd:b9:32:6c:8a:c2:b6:61:5d:36:dc:63:1f:76:
                    21:10:fe:ab:1b:5b:ad:73:cb:3d:78:b1:9e:7b:a3:
                    d9:4b:72:c2:cd:d4:8a:86:35:3a:c9:af:4e:10:77:
                    15:3d:26:c0:aa:2a:1f:37:76:8b:f2:eb:c3:a8:aa:
                    7e:31:eb:a3:71:00:56:3f:0e:5d:11:61:14:1a:d0:
                    e3:d6:87:05:d3:44:ef:23:a3:b4:e8:2e:35:5d:38:
                    20:95:7b:6d:35:6b:21:a9:d0:c1:38:ae:7d:fb:e7:
                    e6:76:f6:7b:ad:b3:1e:a5:8d:f9:53:e2:e3:0e:3e:
                    d9:8b:3a:84:65:15:74:d9:57:8a:a6:07:97:89:c6:
                    dc:f3:1f:3f:2f:6b:06:68:89:f6:2e:90:52:c4:ad:
                    55:10:31:f4:cd:3c:9e:7b:c4:e1:6d:93:e6:6a:7e:
                    a2:7e:fd:86:33:5d:cc:d3:25:f8:19:ba:4c:19:e3:
                    b8:88:6d:b3:f6:a8:cf:6b:53:29:81:33:70:90:d9:
                    bc:67:bb:e7:16:5d:1d:a4:02:5c:eb:c2:8d:6b:10:
                    c4:98:44:21:e3:9f:9c:cc:fb:dc:71:9a:af:6d:14:
                    ec:07:50:90:24:39:50:a1:b1:6a:57:c2:40:3e:7b:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:42:1D:CB:F6:C2:EB:B7:6B:F4:FE:01:1B:21:77:90:84:61:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7a9e545c-0b1b-3af0-9f1b-8991b5bdf1fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1210::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:db:d3:19:ea:19:79:8f:34:c5:09:9b:ae:80:7b:01:70:
         89:13:51:53:d2:c2:4b:cb:b4:73:8c:8d:e8:98:c2:ed:93:e7:
         9c:8c:cd:2f:77:ab:e8:22:1a:7b:25:19:6d:26:a1:a9:92:e3:
         a5:64:2b:79:dc:7b:cd:d9:c5:48:af:af:37:41:f5:b5:06:60:
         8e:84:b7:5d:ec:72:7c:69:89:e6:a7:f3:e8:4d:85:73:e4:0b:
         e7:a5:83:85:b5:15:2b:fb:22:48:81:3b:d2:c0:b6:fb:12:c3:
         43:95:52:af:b0:18:eb:15:58:b4:7f:f9:4f:7c:6d:97:af:1d:
         e0:1c:34:ec:03:61:a5:03:50:7f:eb:7d:ce:94:7b:60:f0:34:
         ec:50:65:34:3d:39:53:6c:ec:0d:be:67:18:ce:52:d5:58:f5:
         b1:02:90:8f:cf:52:d8:ad:fa:e0:ae:dc:ff:cc:06:ec:88:ca:
         a8:cf:92:cd:14:90:6b:08:fd:11:5d:96:4a:92:91:ee:b6:88:
         09:55:18:2b:db:cd:06:e3:c9:86:4e:88:08:e9:9c:b4:b5:23:
         ee:79:96:f5:06:2c:67:2f:3c:8a:37:e5:eb:72:46:52:fe:d0:
         15:aa:9d:08:76:9b:2e:6c:27:64:31:b7:5a:44:8f:ff:f0:46:
         4b:2f:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:52:13 2026 by rpki-client