Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ce6a152a-815e-3aab-bfed-ee1327436f1e.roa
File:                     ce6a152a-815e-3aab-bfed-ee1327436f1e.roa (raw, json)
Hash identifier:          KsY7mrBPrIhJeM9o/KK/Kt9rnq8n2cOySP+I14BO7Pk=
Subject key identifier:   18:BA:07:B7:DE:46:D0:26:1F:42:8D:DA:57:73:22:BD:08:A4:9C:95
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584F0D6CF8CFE0B53EFDC98A0CC4
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ce6a152a-815e-3aab-bfed-ee1327436f1e.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     396908
IP address blocks:        2602:f956:7c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f8:cf:e0:b5:3e:fd:c9:8a:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=81f772ef-c2b2-46e7-a1f9-db49a2df23d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:15:6c:70:21:8b:5e:15:00:3d:ce:a1:52:
                    10:80:c5:3f:a0:f4:e8:1b:01:6f:c8:96:1a:27:11:
                    61:78:30:5a:47:c6:af:70:6c:08:40:21:f1:53:79:
                    3c:8c:af:a5:d8:82:cd:18:4d:13:a3:4e:9b:b6:c5:
                    64:9b:1a:88:ed:43:e0:96:a9:3a:fe:ea:73:f9:45:
                    2f:7a:d5:cf:cd:a5:9e:20:9c:00:51:56:1c:6a:79:
                    b4:63:91:9c:e6:e6:ec:df:84:db:29:a6:20:54:4e:
                    9e:ad:98:fe:c4:e9:47:d2:5c:d1:c7:1a:19:58:35:
                    02:b5:3f:aa:61:69:c2:1b:48:7d:18:1e:84:33:e0:
                    31:d8:4f:67:48:5f:c1:38:11:d0:25:2c:d6:d3:56:
                    79:61:06:2f:69:06:24:47:ce:10:f1:0b:f8:1e:cf:
                    2f:f7:07:01:85:b3:a9:16:0d:e0:3c:93:5c:10:ed:
                    09:3b:8a:19:15:fb:5f:e5:cd:b9:aa:c5:50:7f:78:
                    eb:f9:3c:f8:ce:bb:55:b6:69:27:6c:c8:da:e4:d0:
                    4d:43:75:59:d8:66:ec:fe:24:e6:80:5b:b2:40:48:
                    b6:a4:2d:93:bc:b0:7b:f8:cc:d1:fa:11:cf:a4:da:
                    96:de:42:1c:d2:63:ee:03:ec:bd:5b:f4:d5:0a:38:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BA:07:B7:DE:46:D0:26:1F:42:8D:DA:57:73:22:BD:08:A4:9C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/ce6a152a-815e-3aab-bfed-ee1327436f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:7c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:80:0b:7c:17:9f:b0:59:1e:2f:3b:03:32:a6:e3:bc:8e:74:
         cb:86:e4:ab:57:ac:1a:a8:2b:3d:1f:a4:04:49:38:da:e5:36:
         de:12:82:44:97:e3:f0:6d:3b:7b:66:3e:9d:b5:6a:0a:e2:2e:
         48:dd:7a:6c:52:4d:df:97:d3:11:6c:f7:34:05:78:96:d9:61:
         1c:ff:64:f5:a4:50:63:33:3f:ba:f7:21:37:54:06:be:34:6b:
         c4:45:04:cd:e7:31:c2:d8:26:e6:c1:b8:23:a0:d6:20:ca:cd:
         ab:99:ef:eb:5d:4e:26:4c:03:17:22:30:80:39:52:7a:39:bc:
         e8:01:2d:3b:c7:9a:54:8d:78:b7:c5:56:6d:17:dc:60:7e:84:
         62:af:1d:0d:e3:52:e1:61:1e:fd:ee:51:80:18:37:ec:bf:71:
         66:94:30:24:fa:7c:4c:7f:9d:53:13:7a:33:0e:13:3b:4e:a8:
         88:50:05:f3:27:55:ca:07:dc:2c:65:fe:c1:0c:bd:eb:ed:05:
         1a:f9:7c:95:d9:5b:66:4f:8e:ff:2c:b7:44:0e:59:e0:de:28:
         47:31:44:0c:91:f0:76:3b:f2:73:a0:ac:87:68:21:b5:59:61:
         cd:02:53:6f:9c:5f:f9:89:02:df:b5:af:31:be:63:26:28:51:
         1c:4e:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:34:39 2026 by rpki-client