Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa
File:                     b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa (raw, json)
Hash identifier:          jzz869tFwrxiSrnPcCqH21atSYVd3Z0j8JkQLBIv4FY=
Subject key identifier:   03:23:0D:03:47:5B:52:2B:DA:EF:89:64:D0:F6:DC:48:0A:63:CA:69
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584F506D531C48481DF748D56FC0
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        2607:6bc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:53:1c:48:48:1d:f7:48:d5:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=9cb55765-6d42-401e-8ea7-a8f7a54bcb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:94:2f:60:f4:47:bd:fd:0f:4d:22:e1:95:
                    d7:a2:94:c4:18:06:d6:8e:df:09:47:fa:97:bd:d7:
                    1c:fa:69:0a:0f:0b:61:1d:f5:cb:ca:62:ba:ed:40:
                    37:ea:99:60:c6:37:05:fd:e5:70:1e:93:fb:d5:b7:
                    b1:9a:b6:39:f7:bb:bc:a4:bc:83:e7:f1:31:c8:15:
                    c2:67:46:41:3c:02:89:bf:d7:0e:7d:cc:d2:43:c7:
                    fd:28:90:02:bf:87:6c:3e:ab:a7:8e:75:3e:35:08:
                    ca:82:79:51:5f:aa:6c:ee:63:57:eb:cd:2d:36:2d:
                    d1:38:6e:6f:3d:b0:46:6c:0e:ba:b0:66:6e:34:7d:
                    0f:ea:61:12:49:4b:6e:c5:62:f0:07:72:ce:ab:a7:
                    1e:57:7f:0a:35:ac:8e:27:53:aa:cb:cd:1a:21:6e:
                    0b:41:4b:c3:24:16:21:1f:f1:78:bc:80:ca:0f:22:
                    38:c1:1a:8d:c4:0f:24:47:f5:36:e8:a8:7b:bc:9b:
                    72:0d:68:2a:56:00:a0:c5:cd:13:ec:6c:57:2a:87:
                    09:97:83:6c:3b:51:aa:04:6f:0f:a6:8a:99:91:92:
                    b3:fc:c5:6a:c8:e8:0a:d3:d6:8a:78:6f:9d:98:00:
                    fc:78:a3:c7:5a:cb:6d:06:8e:21:95:9d:e1:75:fa:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:23:0D:03:47:5B:52:2B:DA:EF:89:64:D0:F6:DC:48:0A:63:CA:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:6b:b2:08:33:7f:26:da:b5:a9:96:9d:59:1b:5e:76:f1:
         0f:ff:95:70:a1:28:19:81:1b:e3:07:dd:82:d4:9a:7a:60:43:
         3a:e3:31:51:d0:01:9c:32:97:89:ea:1f:0c:0f:84:87:c4:dc:
         7f:a4:cd:64:93:a2:61:7e:71:c7:db:6e:fc:8d:d4:e1:57:79:
         63:c3:e4:56:d3:ac:bc:f9:16:7a:91:54:c6:ad:f8:be:eb:4f:
         8b:fe:1b:8d:da:61:14:d6:1a:26:aa:f3:d9:97:30:cd:97:3a:
         4c:87:8f:eb:9c:4c:82:8c:c9:d1:bf:42:6e:c9:0b:79:6c:80:
         89:ef:84:27:74:b7:d3:03:8c:0a:89:6d:12:5d:29:b5:42:89:
         00:d1:9f:dc:d5:ae:73:3f:1b:ce:42:0b:6b:92:b0:b3:7c:8b:
         3d:84:7f:7a:4b:01:b5:fd:64:71:5f:61:a4:d1:14:cf:51:eb:
         b0:1a:85:86:44:16:05:15:f8:1e:d1:39:5c:3f:96:c9:d6:d9:
         8e:69:46:36:b5:21:03:a6:b0:df:c6:d2:84:14:11:c3:a6:a1:
         b0:8d:03:2b:17:ed:73:b1:69:37:11:d4:d1:18:e6:93:cc:6e:
         90:ae:f5:29:dd:7f:6c:2e:a8:d4:f5:4f:c1:48:8d:00:34:74:
         a4:d5:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:14:20 2026 by rpki-client