Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/15ded99e-0579-393e-b2ce-2dbf32e4162f.roa
File:                     15ded99e-0579-393e-b2ce-2dbf32e4162f.roa (raw, json)
Hash identifier:          vQmHWXIiHWrMGqV9SZGXW5njhkV3iXWJr2KPb2JhQOo=
Subject key identifier:   A1:2A:17:90:01:E3:57:33:30:70:1C:77:3A:87:DC:31:47:C9:AB:41
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584F2EED296A40B4E27587ABE300
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/15ded99e-0579-393e-b2ce-2dbf32e4162f.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     11832
IP address blocks:        2602:f6b1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:29:6a:40:b4:e2:75:87:ab:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=2c611a90-2135-4f26-9546-29bdd56ef358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:3f:26:97:3d:b9:ec:f8:98:22:22:db:a6:
                    66:5f:81:3b:b7:52:c4:de:2f:72:4f:9b:7c:cb:62:
                    d2:ca:76:d1:4b:45:44:c7:f6:02:17:33:b6:55:b8:
                    dc:f7:a1:2e:3b:09:27:e0:54:c7:3b:f4:39:6f:00:
                    e7:02:63:44:d8:6a:8f:cd:30:12:c4:a1:92:64:b3:
                    3d:cc:3e:75:0c:51:a8:c8:77:24:d1:da:f0:90:ea:
                    9d:9b:1c:7a:67:84:51:9f:73:cf:fe:36:88:8e:65:
                    d5:b9:9b:f1:db:96:e2:dd:e0:76:78:82:45:4b:ee:
                    4d:21:bf:fc:21:39:29:8f:f0:70:21:06:a6:f0:44:
                    50:26:6b:fe:1c:b4:73:95:82:88:84:65:61:a3:14:
                    ee:d3:54:5a:81:03:79:98:a5:b2:5e:b4:b4:fe:3a:
                    80:70:51:4d:d9:1b:78:89:f2:38:bb:bc:0b:1a:78:
                    b8:be:01:f3:08:6d:92:88:31:7f:e2:31:04:c7:46:
                    c9:95:e7:dd:ce:9a:ff:b9:60:d6:ac:bb:dd:4a:88:
                    b0:cc:44:02:e2:8b:56:37:68:99:c7:35:3c:01:b9:
                    3b:27:fb:7a:78:18:2c:38:78:d1:71:02:6d:36:8a:
                    3b:30:26:f8:5f:e0:20:c6:94:d2:8c:c0:cf:ac:f9:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2A:17:90:01:E3:57:33:30:70:1C:77:3A:87:DC:31:47:C9:AB:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/15ded99e-0579-393e-b2ce-2dbf32e4162f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:35:de:d9:11:89:08:d4:d6:17:a8:52:1e:45:d2:40:bf:59:
         86:f1:49:78:23:79:37:1e:86:f9:b9:97:10:ce:e6:ad:8a:f2:
         d8:b1:9d:ed:de:1d:5c:a9:5b:d0:e1:9c:d0:26:c2:91:a4:7b:
         9f:f3:90:fe:2e:66:ef:9d:54:0f:f3:86:9f:9d:21:f9:0c:83:
         1a:00:33:7e:5b:e3:dd:c4:f3:69:90:b5:69:f6:dd:d1:a4:80:
         88:3d:42:63:be:a7:f1:cf:d8:19:f6:e7:f8:37:c9:f1:21:29:
         e6:45:d4:19:2a:cd:92:75:1f:61:6f:bd:07:09:74:06:e4:d1:
         5c:6b:24:da:b6:1b:59:3e:7c:cf:0f:1c:3c:60:2e:4a:3b:a8:
         ab:98:37:28:43:66:09:7c:9f:1a:d8:d7:50:d6:96:24:ec:77:
         f8:ce:47:75:81:a5:26:b0:60:7e:ae:ac:70:25:eb:88:6f:72:
         3b:a2:37:d2:40:60:72:38:b8:9a:ad:65:36:44:bb:70:41:85:
         f1:b2:d2:8c:7f:85:dc:15:15:ee:fb:de:e2:98:f3:9e:1d:2a:
         ce:2f:f6:52:c1:77:de:2d:de:d9:3d:4f:d3:57:a7:65:df:ee:
         cc:21:6d:60:a6:f9:09:2d:a9:a9:12:9e:a5:ac:d6:96:88:b4:
         0a:db:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:53:23 2026 by rpki-client