Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa
File:                     f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa (raw, json)
Hash identifier:          47P+UYI+hCL//HeiWE7n4G0kj2XfECPKPgrKvCYyWAk=
Subject key identifier:   CD:4C:71:4D:C4:81:1D:2E:D9:94:0B:18:54:BC:6B:95:58:B0:B1:A1
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F1897940D3A1A9B14B6A1CB80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:94:0d:3a:1a:9b:14:b6:a1:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=de43cb3a-cb11-4eb2-aeec-740967244754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:00:10:4a:5a:18:6c:2a:c5:82:30:a3:d9:
                    31:fa:8b:fd:15:18:14:5a:a7:68:ac:f7:c1:0e:09:
                    5f:c9:85:e2:4d:1d:33:9d:1a:e1:ef:cf:b9:11:48:
                    17:1d:ba:98:52:39:86:05:ac:f7:8d:98:4a:64:d5:
                    34:69:65:48:7b:dc:f8:9c:51:60:e1:75:f4:7c:33:
                    90:1f:a2:65:62:7d:e8:fa:13:38:79:c4:dc:e8:75:
                    e6:f8:2b:57:21:72:d5:13:e9:7e:af:2a:de:a6:3c:
                    b7:c3:24:5f:e7:79:95:7a:8d:7b:74:11:1a:c5:a3:
                    15:eb:2f:f5:47:43:87:30:c2:d2:b3:8c:5c:13:2d:
                    d5:aa:79:47:94:06:32:90:d6:4b:92:fd:d7:28:22:
                    d9:d1:62:4a:af:97:81:48:2e:8a:ac:a8:7b:b0:62:
                    a4:ef:39:3f:39:28:e9:8e:1b:e8:ca:34:24:50:21:
                    98:9e:f0:7e:41:55:49:38:a6:53:35:b2:c7:71:b4:
                    d3:d8:c0:d0:63:27:39:71:43:68:de:39:64:0b:d7:
                    87:09:78:bd:72:9b:89:8d:3b:e1:76:7d:b5:c4:fe:
                    b3:06:ed:f1:1a:c9:5d:c4:64:f6:f3:2e:8c:a3:e8:
                    b5:d8:8f:58:6e:12:1b:e6:63:3e:82:60:36:b9:73:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4C:71:4D:C4:81:1D:2E:D9:94:0B:18:54:BC:6B:95:58:B0:B1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f88964a1-a4c9-3b05-aadc-3eea158ef1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:72:07:76:a6:ef:30:04:87:85:91:6b:b9:31:b0:c4:ed:5d:
         58:72:c5:87:16:96:b8:66:9d:5d:e7:0f:17:c5:1c:ae:75:ee:
         a8:32:df:9b:a8:b0:ba:cb:bd:52:3a:cf:f8:b4:ec:8f:5f:79:
         20:11:d7:40:10:60:d1:5e:90:8c:cd:49:39:aa:43:28:6e:47:
         41:3c:dd:54:5e:3f:80:39:f8:2a:f2:25:bf:b1:90:2f:60:0e:
         37:58:53:70:17:35:e7:97:1f:0f:84:a9:ed:ba:7b:a5:2c:b5:
         ec:5f:e5:7d:e2:20:3f:9e:73:9e:ee:2f:af:06:ad:6e:e6:f9:
         a1:01:f4:8c:ae:b2:2e:6f:21:37:cf:0f:6d:23:ef:b5:ac:26:
         b0:60:19:96:56:a9:5a:a3:65:aa:b1:48:02:a4:8a:10:94:df:
         cb:03:59:db:d4:56:06:b0:14:e9:37:a9:24:9c:15:de:11:a7:
         e7:1a:3d:72:0a:90:18:49:b5:22:ab:7d:70:f7:51:1e:7c:9e:
         57:c4:db:67:d5:1b:6c:96:79:a7:bd:50:af:85:44:57:1d:e8:
         82:8a:6c:a8:01:cc:a8:06:b1:89:95:02:e4:09:11:95:f0:e4:
         ab:10:43:97:08:7c:00:72:fc:82:42:28:ad:be:8e:97:69:b2:
         75:9c:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:35:55 2026 by rpki-client