Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa
File:                     8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa (raw, json)
Hash identifier:          Hrk0qtjZwAuy9QBUybxKpGD5KXQ+kWwWq8dxjCTn0nk=
Subject key identifier:   A9:A1:E4:A6:93:B7:A6:8F:D5:D2:7B:2A:57:8E:DA:96:11:5C:A2:5B
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584F2957ACFDD7902768B9507380
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     215190
IP address blocks:        2607:eb40:6974::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ac:fd:d7:90:27:68:b9:50:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=4deab456-18e4-45fe-a485-71f7249757d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:49:ad:31:0f:72:c2:0a:96:99:c9:7a:70:
                    97:f6:24:03:7b:e4:ad:27:e5:2c:c9:e1:39:15:3a:
                    6b:6c:2e:ff:9f:2a:46:9e:1f:b8:f8:c5:8a:44:47:
                    17:6b:9d:6a:6a:84:73:54:c5:c8:33:b9:fd:1e:6e:
                    ea:7e:21:d3:b4:fa:2d:11:94:8a:24:4f:8b:36:ef:
                    76:68:64:a0:27:4a:c1:5f:f0:66:4b:a3:c2:b4:99:
                    04:20:c5:2f:f3:4c:c0:bd:fd:cc:8f:c7:d5:29:e9:
                    5d:19:a4:07:c3:a7:dd:5c:a9:b5:01:7f:3e:da:27:
                    19:e0:e2:32:5b:1b:d5:da:89:50:88:02:89:d7:62:
                    49:5d:94:58:a3:d4:59:8a:ff:d2:48:4b:e9:2c:ba:
                    f7:6a:62:b5:83:e4:d9:eb:78:2e:2d:03:e0:92:32:
                    f3:95:ce:a8:2c:3f:90:46:db:f4:47:0f:a9:28:f0:
                    98:03:03:db:c6:c5:22:4b:8e:b1:75:11:73:44:05:
                    d5:e4:ea:c3:4e:92:7c:bb:6c:c9:47:97:04:f7:2b:
                    0f:ad:05:29:0a:6a:04:be:22:c4:34:d1:30:b2:29:
                    f5:46:54:c2:cf:47:eb:00:f7:68:ff:ae:6a:61:41:
                    fc:62:8a:af:9e:9c:f4:76:73:3c:88:b9:1f:c5:90:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A1:E4:A6:93:B7:A6:8F:D5:D2:7B:2A:57:8E:DA:96:11:5C:A2:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:6974::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:34:75:4f:63:a0:e9:98:ec:cb:f3:d4:6f:68:de:1a:7f:9b:
         3a:ec:d5:74:ee:3c:89:85:05:05:f2:2f:ef:7f:b1:f3:65:d0:
         e9:24:24:d4:af:a1:5f:7f:ca:f5:7b:57:2d:9c:a7:e1:54:1f:
         e0:d0:b5:ad:ac:f5:75:80:e1:cc:6f:dc:af:e7:8c:5b:4b:b9:
         29:c8:99:52:2b:03:9b:73:05:f4:66:41:1e:7e:17:8a:af:b9:
         49:f2:38:88:fc:9f:cc:e7:3d:4a:ec:42:52:13:e2:43:21:a0:
         ef:35:8b:02:48:0f:6c:ef:f0:ad:62:f7:d8:d7:29:9b:d1:d9:
         7d:4d:0b:4a:eb:3a:b9:b0:a0:4f:b5:f4:ed:f1:c9:02:0a:60:
         a6:b3:94:f4:90:c9:08:97:8b:d2:a5:ec:76:13:e4:97:f9:7e:
         6f:d5:60:a0:a2:46:6c:05:d5:0c:bc:12:e3:42:bc:f4:47:e0:
         d4:2b:2f:6e:e0:9d:43:49:40:c1:b2:1a:00:d5:ff:eb:22:29:
         26:23:06:54:27:e7:a2:e9:74:ed:e4:36:5c:e7:31:3a:a9:31:
         8b:87:b3:5a:0d:e6:24:86:03:f3:03:af:d0:f6:f3:75:4b:65:
         26:86:e4:92:39:4e:03:da:e5:52:8e:1a:6b:69:af:50:cf:2d:
         77:d0:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:21:48 2026 by rpki-client