Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/e306a1b0-011d-34ea-a141-22b1e325b816.roa
File:                     e306a1b0-011d-34ea-a141-22b1e325b816.roa (raw, json)
Hash identifier:          Gic/tGQJO8MJ72fMDI9fe3NTFzmKkCuS4MJQMeNookg=
Subject key identifier:   7B:42:5C:D4:7C:E7:F6:23:2F:FC:36:B6:F6:A4:DB:2D:CC:A3:C8:7E
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F374D1922C274F2D9435F7E80
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/e306a1b0-011d-34ea-a141-22b1e325b816.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        2604:86c0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:19:22:c2:74:f2:d9:43:5f:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=fb2eeee5-243a-4692-a1a2-abea0923650a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:e8:87:46:c9:bb:7d:a5:97:05:23:b3:4d:
                    47:0e:9b:48:c2:0a:3c:a4:77:ea:db:b1:4e:55:f1:
                    c5:c7:ff:b5:53:d6:32:84:69:14:40:7a:37:95:89:
                    0f:c6:07:88:a6:4e:e5:40:72:9e:e3:1d:3e:f0:37:
                    65:85:ba:41:c0:e3:2d:72:e5:56:04:3a:11:17:35:
                    35:ef:79:ea:e9:ec:68:3e:97:48:60:d3:97:3c:bc:
                    81:8d:82:c0:a6:55:67:6f:2f:a2:95:06:a4:7d:b2:
                    5a:18:67:79:37:cd:21:5e:0d:9f:8b:24:c6:9d:ac:
                    62:de:1b:a0:b0:22:4b:f3:d2:44:3a:6f:33:1b:e5:
                    47:f1:a7:ff:18:06:f7:35:1e:1f:38:f0:2c:32:84:
                    5d:53:3b:5f:74:d5:e0:38:f9:87:56:63:38:4e:3e:
                    42:fd:4f:01:e3:8c:7b:9d:25:bc:ac:55:f8:fc:ce:
                    88:00:1f:6e:87:dd:46:15:3f:15:9a:2b:b0:ad:71:
                    1f:b0:9e:cb:b3:2b:04:53:9a:c5:02:c5:3a:a3:c3:
                    c9:7d:91:a8:3c:fc:c8:18:f7:36:66:5d:d2:c6:b3:
                    2f:11:64:87:cc:a5:1e:81:52:6b:81:6d:25:7d:27:
                    80:5b:f2:bb:95:f3:ff:48:35:4d:d7:c4:f6:58:86:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:5C:D4:7C:E7:F6:23:2F:FC:36:B6:F6:A4:DB:2D:CC:A3:C8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/e306a1b0-011d-34ea-a141-22b1e325b816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:43:3b:1a:99:91:f8:98:19:ec:ac:48:b4:c5:f1:7d:25:
         ff:42:68:80:a8:e9:68:5c:7c:9a:cf:48:9d:db:78:f6:4e:db:
         93:fd:12:f7:78:70:14:a6:76:8f:72:e0:1d:1c:de:e3:01:0d:
         d0:f5:ab:e7:16:06:2b:05:8d:ae:d2:54:dd:51:69:6b:b0:f2:
         8e:57:3b:2d:60:4b:d1:58:27:f7:ea:f0:26:06:14:91:3b:e7:
         55:d3:3a:ab:05:86:e7:44:74:67:00:e5:eb:85:5a:0c:94:e6:
         fd:33:e1:4d:20:b3:1f:b1:4e:f0:b4:67:10:9e:04:eb:eb:ab:
         f7:9c:b8:17:00:6a:ab:5f:c4:de:dd:03:4c:e9:09:58:0a:b4:
         9a:77:57:8e:02:3c:f4:71:86:aa:d3:f6:2f:1d:58:53:9e:dd:
         a0:f2:8b:47:79:c1:6e:06:38:13:f0:d8:39:9d:54:c6:3b:95:
         20:ce:b6:bd:83:a6:15:0b:29:e0:cd:4e:53:36:de:9c:18:f1:
         80:e5:94:95:67:26:3b:15:a7:a9:54:80:36:42:30:97:82:cc:
         37:40:ef:72:5c:33:40:e5:f7:cf:f6:32:c0:38:9f:97:a6:d3:
         7d:22:0a:3d:ae:b5:0b:2c:fd:7a:a1:aa:08:4b:89:d8:11:c4:
         42:7c:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:43:29 2026 by rpki-client