Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
File:                     a546cbb8-2a70-392d-873e-3968c05e710f.roa (raw, json)
Hash identifier:          T8P983kzxUfKfVydB7iWMfr4KkTIjovQUYsc8MCs+CY=
Subject key identifier:   A9:4B:23:BD:FA:02:EA:89:E9:13:C4:F5:06:9B:12:EB:62:DD:FA:41
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584F4C3D5302C00E3BCD698F6080
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     393397
IP address blocks:        2607:8c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:53:02:c0:0e:3b:cd:69:8f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=5322e199-fcd9-4d81-81fb-bd01fe228b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:84:6f:9f:aa:e2:3a:b5:42:de:ed:f4:c3:
                    19:73:3c:af:6d:eb:80:08:05:8e:1d:31:fb:8f:5e:
                    6b:2f:9c:33:08:c1:93:2d:7d:b2:ec:93:51:d8:0c:
                    ea:82:22:96:fd:b4:03:e2:6c:da:8c:1f:fb:b6:1c:
                    01:0c:71:38:58:ec:c6:e3:e4:d8:c3:24:de:57:89:
                    9d:e7:7c:3b:7d:ca:eb:94:00:b7:00:af:1b:33:88:
                    d8:1f:bb:c6:12:f0:72:05:a4:ae:3c:77:30:07:33:
                    c0:b2:1f:70:c1:03:66:62:b2:12:c7:6c:d1:6c:f0:
                    7d:95:38:20:97:cf:7c:c6:8f:ef:58:c1:83:13:1a:
                    4b:83:a9:2d:ee:93:dd:e3:a0:bc:93:ef:ef:05:0a:
                    26:ec:f9:0f:59:4d:c1:db:33:49:53:7b:28:e2:5f:
                    b2:ef:b8:52:77:53:aa:69:9c:a1:9c:ef:a2:11:dc:
                    e2:ce:d7:22:ff:14:0d:b3:a3:43:fe:09:58:63:43:
                    cd:e3:39:02:b9:1a:17:57:64:1f:27:b4:89:f7:9e:
                    bb:54:fa:a0:32:c8:5f:08:97:c8:fd:b5:91:cf:b8:
                    1f:0a:bd:56:85:f2:f7:67:c2:4d:e9:5b:5a:dd:c4:
                    5e:e9:e2:dd:8b:fd:65:c2:cc:49:59:c2:95:c9:5b:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4B:23:BD:FA:02:EA:89:E9:13:C4:F5:06:9B:12:EB:62:DD:FA:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f5:45:38:1e:42:d5:e7:22:c6:cd:b7:c5:cf:aa:73:00:cf:
         70:eb:b7:77:b2:85:5b:e9:fa:44:18:66:6f:e8:eb:11:7c:bf:
         0c:3c:0b:34:b8:cc:05:d2:ff:c1:f4:a6:6d:ea:7e:69:10:9b:
         c6:ea:5e:87:b6:1b:0c:e8:52:38:e2:42:04:c5:54:61:f8:d6:
         e6:e8:96:27:1e:0b:34:ff:3f:96:78:0d:b9:c8:ab:0e:b9:1b:
         6c:1a:66:36:2a:f4:10:25:e2:a5:7b:0e:ac:52:e1:25:68:81:
         de:82:5b:62:70:cc:f6:80:11:bf:1a:0c:2f:6f:23:fc:67:86:
         1d:44:fc:a8:e8:e0:a4:03:72:82:89:ca:ee:d8:05:74:bc:c2:
         77:43:26:09:04:39:6a:a8:a0:25:5f:72:03:c0:94:28:b6:50:
         fc:4e:ec:6a:4c:72:25:24:ce:a2:e2:cb:53:95:07:e3:f9:cc:
         ff:a0:02:c6:5f:05:7b:2a:39:03:7f:86:75:3c:1a:af:b4:5d:
         54:4d:f7:a8:3e:df:7d:df:78:56:72:8c:96:ff:eb:0d:6c:6a:
         5a:7f:15:c1:b3:13:4b:6d:ab:3c:70:76:bd:20:c5:c5:b0:f1:
         8d:ba:6e:84:64:71:22:56:56:9c:b8:e5:b8:41:87:4c:dd:50:
         86:b3:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:07:23 2026 by rpki-client