Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/a3e93a87-9126-3faa-90fc-fb9f2f7a43ca.roa
File:                     a3e93a87-9126-3faa-90fc-fb9f2f7a43ca.roa (raw, json)
Hash identifier:          4+4EDSgUqWQiJMG9tylCsCF+j+tjtw74JyRjCb8Xof8=
Subject key identifier:   4D:52:91:87:11:5E:2C:89:FC:D4:1D:84:41:77:F8:31:D3:92:2A:18
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584F20F7A1F3234D1F63E700E390
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/a3e93a87-9126-3faa-90fc-fb9f2f7a43ca.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2605:b040:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a1:f3:23:4d:1f:63:e7:00:e3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=e9d4be93-3b9d-4c33-81ea-e880adfd059b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:92:85:81:82:c4:9c:10:30:cf:81:ae:b4:
                    7f:25:d9:96:20:4c:57:e9:b2:58:8d:33:41:3c:b7:
                    1b:b3:4b:60:02:24:70:b3:b1:de:06:d0:ba:8f:ee:
                    73:cd:af:a7:56:23:f8:0e:50:df:6e:9c:89:d5:1a:
                    c9:ed:81:b2:40:9b:c4:3e:21:da:1e:4b:05:a6:ac:
                    2c:ce:67:11:57:7c:2f:09:66:35:f7:42:4b:d2:c6:
                    84:07:1a:40:20:ff:88:cb:aa:cf:1b:82:20:d9:f7:
                    87:8d:7b:93:1d:67:36:5e:0a:d1:92:8e:fc:13:3f:
                    03:5d:da:1e:a4:04:74:01:b9:c1:37:1a:e6:c9:13:
                    97:4e:95:ef:a3:46:11:e1:23:2f:83:20:24:46:c1:
                    3c:6d:75:c0:51:bb:70:26:73:bb:0b:c4:96:93:e7:
                    8d:54:ce:0e:a1:63:bc:fb:5f:c0:3e:40:40:a9:7f:
                    6d:21:86:d5:a2:a4:78:bb:33:60:6e:90:0a:de:00:
                    a4:13:49:f4:2b:36:90:64:ff:a1:6a:34:92:6f:6c:
                    ce:ce:f9:ce:b2:e9:d2:91:dc:48:e2:af:38:b6:e4:
                    18:cb:e0:76:ca:8b:19:a5:d5:a2:ad:bc:0f:f6:ea:
                    6e:da:3f:94:5a:94:04:e5:29:e7:de:f7:ff:a2:13:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:52:91:87:11:5E:2C:89:FC:D4:1D:84:41:77:F8:31:D3:92:2A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/a3e93a87-9126-3faa-90fc-fb9f2f7a43ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:11:86:35:69:a0:ef:ef:4a:ec:d2:46:42:8f:34:2c:e7:
         df:cf:16:4a:db:28:ba:2b:56:8b:9b:ba:dc:aa:7d:06:14:f0:
         2e:59:52:8a:95:c3:84:62:45:81:2f:d9:e1:2a:40:00:be:84:
         63:da:89:26:9d:16:e5:22:8a:98:98:e7:7f:fa:fe:a6:e1:fa:
         9d:93:d1:7c:b8:50:2b:88:bc:c1:4e:ba:d0:a6:2c:7b:4d:8a:
         e1:7a:6a:6e:24:fe:c3:14:06:51:b2:63:b9:1b:08:46:8f:31:
         23:1a:8a:82:3e:57:30:4a:9e:7f:f7:d8:c5:2a:dd:70:8a:58:
         ec:0f:c8:69:74:9a:a0:6d:4b:a0:1b:af:69:b1:92:c7:2b:18:
         8d:8a:44:59:49:24:fb:bf:b9:46:38:9c:7b:25:3d:31:a8:33:
         fa:7b:f7:9e:57:35:1c:b4:e4:89:ea:a0:17:7f:58:69:a2:8d:
         d1:80:ae:6e:5f:f0:bb:2c:78:88:ef:cd:ad:4f:87:81:d6:d0:
         9f:29:15:19:89:ed:9a:1e:3f:5b:de:d9:65:d9:1f:f4:d5:b9:
         a0:7d:3e:e2:90:91:7e:1f:35:45:51:ad:e0:49:5e:62:20:40:
         03:68:1e:27:67:c1:82:2d:61:7d:90:9b:c1:9c:6a:9f:95:2a:
         28:9c:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:20:55 2026 by rpki-client