Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/e14ef742-6259-32cc-bb7d-6779c8661303.roa
File:                     e14ef742-6259-32cc-bb7d-6779c8661303.roa (raw, json)
Hash identifier:          Crorh36qJWLjBcN6b7jSvn7BxTSdU2+vk44l/8xlaYg=
Subject key identifier:   A2:18:0C:59:14:61:66:94:5E:07:09:99:F8:EF:C3:1C:4B:E4:7A:65
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584F49758B4691E5928815E00F00
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/e14ef742-6259-32cc-bb7d-6779c8661303.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2734
IP address blocks:        2607:2f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:8b:46:91:e5:92:88:15:e0:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=45755b03-a6f2-4b5d-be9e-855e37789e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:41:37:93:52:35:d8:15:8c:2a:b4:3d:94:
                    1d:9c:37:c3:76:51:78:fa:94:7d:6b:8c:74:ff:6e:
                    14:5f:36:1e:cc:a6:ac:f9:d9:ab:d3:21:ec:90:60:
                    65:77:51:5b:75:79:60:65:4f:cc:cf:a8:f3:bd:ca:
                    0b:0c:c7:81:51:81:88:4d:38:97:5f:ed:84:9c:2c:
                    3e:6a:89:97:60:01:6f:a6:ce:31:2d:69:e5:4a:f5:
                    a2:d7:96:d0:c4:16:ef:5b:c5:c2:b9:88:de:12:73:
                    3a:de:5c:f9:76:02:ad:97:ba:a4:10:9d:15:e8:ac:
                    bf:67:18:42:39:e9:ce:df:aa:9b:1f:1c:27:96:af:
                    34:a7:17:c6:f2:5e:71:09:35:04:43:6c:6a:3a:e5:
                    c4:1d:00:6c:0a:bc:00:8a:6d:1d:b1:c2:3c:fa:31:
                    25:1e:11:43:8c:55:25:a2:66:c7:4a:1d:0c:2e:c9:
                    eb:cd:2a:40:fc:34:ed:9d:71:78:a5:a1:eb:6f:07:
                    c0:68:60:13:cf:63:4b:05:0a:a8:c0:8e:94:70:05:
                    b0:6b:1f:fa:d6:36:e9:6e:e4:53:fc:3e:34:57:b6:
                    b7:e6:41:c6:39:65:c9:2d:59:93:e5:72:08:0d:34:
                    d9:ec:31:17:92:fd:c8:4d:33:a2:76:f9:34:e6:91:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:18:0C:59:14:61:66:94:5E:07:09:99:F8:EF:C3:1C:4B:E4:7A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/e14ef742-6259-32cc-bb7d-6779c8661303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:32:70:09:fe:81:1f:f8:6f:cb:60:3c:20:36:c5:7a:39:
         76:5e:ac:4e:28:4d:12:41:32:80:33:0d:fe:e1:4c:dc:f8:c5:
         a5:ee:99:14:9e:ec:02:33:08:d5:b0:37:2b:c7:06:61:c4:47:
         32:9c:af:0c:6d:44:4f:08:41:2c:d3:94:7d:2f:b5:63:ef:f3:
         da:ad:40:3a:cf:a8:4c:c6:8e:7a:0c:e5:51:ba:b4:16:bc:2f:
         6b:db:53:c8:20:72:77:75:cf:04:47:3b:ec:59:1d:40:59:d6:
         ab:dd:fd:8f:b3:e1:41:58:7b:62:8a:19:34:65:54:2c:93:58:
         13:b3:6a:da:b8:9b:09:c3:b5:da:cd:b9:aa:43:c7:89:38:86:
         53:bb:99:c4:a6:6f:51:b2:f4:c7:ed:ac:20:e7:89:89:8a:d0:
         01:32:38:53:20:73:68:d8:da:d4:78:e0:c2:8b:27:ed:df:e8:
         a4:f4:2d:bc:fd:a4:7b:9b:6b:43:46:9e:54:81:4f:ce:1a:54:
         35:c8:e6:47:b7:cc:33:bc:1a:df:e8:c8:70:be:ea:ed:14:87:
         ca:6b:c6:1b:fa:76:36:54:14:d0:4b:f0:e2:52:57:b0:d4:94:
         df:da:ba:e5:8e:8e:dc:50:c4:ca:f5:7f:ec:39:f6:5d:b3:fc:
         8d:89:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:22:14 2026 by rpki-client