Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ebd76445-2881-3301-b494-9d1c25bab096.roa
File:                     ebd76445-2881-3301-b494-9d1c25bab096.roa (raw, json)
Hash identifier:          TWJ8sNOTHMKpcm+PPySeQhC8KKBv3z90XwbxK+MwvVk=
Subject key identifier:   58:EC:31:3F:10:C4:07:45:28:E3:F1:9A:9D:84:16:61:E9:21:53:51
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4974B316E474D3D63A460D60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ebd76445-2881-3301-b494-9d1c25bab096.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40091
IP address blocks:        2001:470:4ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b3:16:e4:74:d3:d6:3a:46:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ebc8a7c6-ce1e-460b-b14d-b2897972b7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:6e:fd:80:b7:c9:ba:38:53:e0:f5:50:d2:
                    a4:aa:0f:cb:8c:09:61:58:18:e7:fa:e8:07:c1:bc:
                    1c:e2:1f:56:39:a2:7c:31:8a:4f:95:a1:c6:14:a8:
                    7a:38:99:df:4b:92:b3:d5:47:df:b9:13:ea:7b:b6:
                    bc:ee:b2:ef:61:bc:69:5b:23:bc:e0:46:e1:d7:4c:
                    a3:1d:bf:9c:c3:37:97:bd:c9:95:44:06:90:9b:2c:
                    70:92:3e:45:f1:51:00:22:14:cc:55:34:a2:5f:9d:
                    b6:53:dd:dd:86:e6:b7:5a:3d:d6:3a:8a:ce:53:ac:
                    6f:90:9b:b1:5d:1f:09:15:25:bf:f7:9d:f9:8e:5e:
                    eb:bb:06:07:25:73:a9:41:02:37:38:41:7b:a0:e4:
                    0e:8e:57:15:ec:7c:89:1c:4e:cb:59:4e:af:f3:b8:
                    e7:bf:8f:a7:14:35:af:6d:e1:bf:b0:58:b8:96:4d:
                    e3:c4:52:e2:31:71:81:58:db:13:73:8d:ff:9f:c5:
                    f0:6a:f6:09:d3:e7:30:0b:64:96:10:5b:c0:2e:c4:
                    73:fb:cf:68:a6:9b:06:ed:82:1b:62:98:b9:cb:65:
                    87:b0:bc:0c:12:61:da:eb:65:9b:9c:4b:bb:75:79:
                    12:f0:ad:f8:69:cd:b2:55:e9:bb:ff:24:02:f1:b7:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EC:31:3F:10:C4:07:45:28:E3:F1:9A:9D:84:16:61:E9:21:53:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ebd76445-2881-3301-b494-9d1c25bab096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:01:a2:99:4f:a6:96:26:62:1a:b5:ed:e4:49:a1:f9:25:
         37:de:44:09:83:ab:e4:99:16:cf:b4:f7:6d:f6:fb:28:19:ff:
         c0:fd:8f:37:db:d7:2d:ab:ac:f7:c7:c1:c3:3b:d9:f9:c5:3a:
         ec:43:6a:0f:3d:23:83:18:c1:50:8f:af:56:92:5c:4b:5e:14:
         da:4f:71:a7:cb:a4:40:2d:aa:32:54:35:dd:97:ca:61:2d:88:
         91:e7:17:3d:03:dc:4d:8e:ca:29:74:51:29:26:35:3a:2f:4e:
         29:42:88:7e:34:d4:2c:f3:ba:6d:bf:41:c7:cf:c0:54:87:76:
         96:72:c1:a7:64:cc:9b:86:56:43:38:47:a7:12:ff:df:16:01:
         a2:0e:de:97:2b:7c:df:cb:2c:7a:14:61:a2:ce:5f:02:52:a1:
         eb:cb:34:a6:04:74:81:28:4e:30:2e:01:95:a4:bc:27:80:ac:
         41:02:21:80:36:a2:e9:35:68:67:0a:42:fc:88:30:d9:64:b6:
         fc:bf:e7:06:ce:73:28:86:96:0d:82:78:8c:05:ed:ae:99:a4:
         f9:a7:6b:d1:5b:92:6b:51:8d:60:d1:f4:2b:02:5b:b3:3a:eb:
         2e:56:c8:13:59:73:c2:bf:d2:17:a0:fc:a2:20:7d:4a:da:c1:
         9d:99:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:32:44 2026 by rpki-client