Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa
File:                     e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa (raw, json)
Hash identifier:          AV3FwqE/eSq284F4BRXXUyWBJ/IQmpwk5abMlSGPjjo=
Subject key identifier:   31:95:48:6E:D5:40:AB:BF:44:F2:EF:F1:E2:3A:7D:7C:EB:85:E0:B4
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F4328584D300A6048176182467E2E2900
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     18615
IP address blocks:        2607:1c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:60:48:17:61:82:46:7e:2e:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=d7eed746-8716-4f84-8be4-f2791a793d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:ca:b5:6a:8b:34:fe:44:b2:53:aa:d7:0a:
                    97:58:84:29:97:d5:8f:d8:99:3c:15:5b:27:7e:3a:
                    17:dd:6e:b7:27:c8:d3:2c:9f:4d:cc:ab:82:f0:b7:
                    b2:09:9e:e3:87:fb:0c:e6:0f:7d:b7:dd:af:d5:de:
                    40:fb:b9:5b:c2:52:b4:dc:27:df:f4:38:60:9a:73:
                    75:3e:fc:ab:b0:09:32:d6:90:aa:25:67:a4:be:ae:
                    bb:eb:95:c0:37:a1:32:28:60:85:f9:86:16:b5:38:
                    71:86:87:23:42:e5:cc:57:7d:93:6b:71:54:f8:8c:
                    fa:1c:1f:1f:98:51:9b:f3:95:22:b4:69:c9:9d:58:
                    5f:96:61:ca:9d:c3:a6:f9:cd:0c:20:a7:b1:27:37:
                    94:38:f4:cc:3e:1d:c4:bf:b5:ca:7e:de:9c:2b:70:
                    8c:88:cd:cf:f3:bc:ef:af:22:93:ff:aa:d5:b6:3e:
                    7d:d0:3e:bf:20:59:95:ea:7f:ec:3f:ab:f8:27:27:
                    02:54:85:97:b8:b7:ab:eb:96:19:fb:98:c0:f7:4e:
                    75:39:9a:ee:c6:db:7d:42:74:f0:c7:c9:79:64:1e:
                    79:bc:2b:17:30:3b:b1:a4:4a:2c:da:c4:2b:9b:35:
                    fd:14:b8:cc:39:25:51:31:4a:fe:01:46:20:87:70:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:95:48:6E:D5:40:AB:BF:44:F2:EF:F1:E2:3A:7D:7C:EB:85:E0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:00:5f:71:36:a9:de:fc:f1:27:04:3f:31:71:7b:0f:f3:27:
         1c:43:04:e4:ed:19:f8:bb:9b:0a:77:a4:7c:91:ce:84:33:7a:
         d0:b4:8e:30:ad:f1:98:a8:63:ee:bc:2e:72:f8:32:03:0b:c9:
         d5:a1:e3:ee:9b:53:77:2b:2c:92:19:2d:de:27:0c:14:c0:56:
         f0:67:0e:46:64:63:ca:45:64:02:18:f3:b1:6b:64:76:37:39:
         10:ff:ea:f4:2f:82:cf:aa:b1:58:2d:ce:71:65:03:39:41:0a:
         4f:b5:53:be:1a:2d:d0:6a:20:c1:12:6e:7e:9e:aa:cf:39:fc:
         fc:8d:65:0a:a0:a8:9c:77:6f:f4:10:1e:f8:5f:29:8e:81:e5:
         e9:4d:a6:c0:5b:41:d9:cb:be:0c:5b:a6:03:9a:b0:da:2a:a6:
         dc:f2:74:2a:44:52:d1:17:db:a7:00:f2:35:f2:aa:55:fc:14:
         01:91:58:81:11:6b:9e:d5:8e:a1:b8:f0:fe:8d:fc:cf:d9:c1:
         95:d9:52:cf:e4:81:3e:08:6f:d7:fe:9e:06:5a:83:bc:c9:d7:
         7b:19:7e:81:3f:2f:ad:ef:78:9f:e5:79:ba:6c:7e:9f:a5:80:
         1c:d0:dd:ea:6e:0e:a5:5c:6f:de:e8:cf:7a:5b:ba:a1:a8:d4:
         53:2a:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:35 2026 by rpki-client