Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3/837c7302-178e-3338-8e39-c35b2d9e0045.roa
File:                     837c7302-178e-3338-8e39-c35b2d9e0045.roa (raw, json)
Hash identifier:          RjA0CclqaOx/MoRVvSUmBusYp05tKJ+G9Ii/hsCstAE=
Subject key identifier:   81:4E:C3:AA:82:93:F1:20:7C:C8:F1:3B:B9:22:4A:90:D9:15:B3:C4
Certificate issuer:       /CN=e895c905-da30-4ff0-b6f6-67f4cf4681f3
Certificate serial:       010D0C9F4328584F49877AB3D070E052543D8780
Authority key identifier: B7:2B:A1:A9:B4:08:57:7A:16:E4:25:13:47:50:68:1B:71:4D:AA:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3/837c7302-178e-3338-8e39-c35b2d9e0045.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402499
IP address blocks:        2606:6180:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3/e895c905-da30-4ff0-b6f6-67f4cf4681f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3/e895c905-da30-4ff0-b6f6-67f4cf4681f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:7a:b3:d0:70:e0:52:54:3d:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e895c905-da30-4ff0-b6f6-67f4cf4681f3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=264062d8-3200-4bd3-b500-9b1353e27bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:09:eb:48:f6:98:f2:6b:c4:af:96:96:67:
                    a2:4d:c4:4a:29:10:08:b0:ec:51:d0:75:e3:54:92:
                    6d:e0:60:7a:99:62:76:96:61:b9:ea:7a:ae:58:b4:
                    d4:c6:ab:36:fd:a2:45:42:63:1c:99:fc:f2:ee:ed:
                    ba:1c:f0:ad:06:2d:2c:0d:69:64:85:69:a9:d7:93:
                    97:be:03:80:cf:bd:99:f8:4d:a7:76:bd:60:d4:b3:
                    f6:ac:1c:a6:e6:ad:f6:9b:ff:32:6d:99:f1:cb:3f:
                    63:20:7c:a7:01:89:fd:85:25:b3:87:06:30:b0:eb:
                    0c:cf:58:35:b9:05:63:84:68:29:49:e4:1c:aa:35:
                    26:1b:7a:95:a9:ac:4f:a5:7b:ac:a0:1c:a5:4a:04:
                    ca:eb:c7:02:ab:83:2f:49:48:7c:6a:67:ca:b6:7a:
                    30:22:c3:46:f6:3e:6b:d9:29:f6:f9:b3:6e:bb:13:
                    78:eb:27:ba:a8:0d:c8:19:86:6a:46:10:f1:bd:6b:
                    46:3c:39:24:9d:91:00:84:a5:b9:18:ef:13:4e:a0:
                    23:82:c0:11:9d:f3:0e:82:bd:38:7d:91:92:c3:af:
                    73:d5:ac:17:b2:ad:e1:74:72:f1:de:28:a9:c0:d3:
                    a1:aa:b3:59:d2:e5:78:67:da:01:74:c6:7d:73:be:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:C3:AA:82:93:F1:20:7C:C8:F1:3B:B9:22:4A:90:D9:15:B3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3/837c7302-178e-3338-8e39-c35b2d9e0045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3/e895c905-da30-4ff0-b6f6-67f4cf4681f3.crl

            X509v3 Authority Key Identifier:
                keyid:B7:2B:A1:A9:B4:08:57:7A:16:E4:25:13:47:50:68:1B:71:4D:AA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e895c905-da30-4ff0-b6f6-67f4cf4681f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6180:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:93:68:8c:ad:9b:10:ea:9b:3c:55:bf:ba:af:dc:78:4d:6f:
         e0:18:ed:d6:10:2f:7d:85:65:f1:fd:67:af:64:57:a9:d3:fb:
         e4:81:01:e9:4b:05:aa:0f:a2:66:45:35:36:38:45:d1:fe:91:
         35:a9:6e:05:56:78:7d:52:ba:82:f5:67:34:3e:56:48:98:37:
         3c:35:70:c6:59:5e:21:2e:86:51:59:d1:15:f0:2b:7a:2f:5a:
         8e:c1:74:80:f2:e6:d2:c6:3c:0b:86:05:ba:20:92:2b:c0:eb:
         99:f4:9d:8b:f0:2f:22:db:49:0e:8c:6d:37:fc:8c:64:1b:7d:
         1c:62:45:42:a4:fb:41:a7:18:ae:03:35:91:42:f3:85:67:f4:
         b3:d6:c3:31:e1:c5:b3:8a:de:bc:ed:e9:a7:be:30:ac:24:39:
         bf:e2:4d:9f:3b:18:e4:18:0c:d5:d1:bd:95:8c:8f:f6:f4:9d:
         88:47:c3:af:e1:a5:5c:9c:c4:b7:40:b1:04:18:a3:04:f3:4e:
         bc:b3:55:45:16:33:b0:9a:94:d9:c7:8d:d2:b1:6b:f7:4b:ed:
         9c:79:6e:22:63:f6:7e:5c:22:f9:71:99:e6:cb:19:02:a0:f0:
         b2:76:10:20:0c:79:56:b2:c5:3c:e1:3f:31:66:8a:be:0a:0a:
         02:fc:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:51:18 2026 by rpki-client