Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
File:                     1e64ffdf-9888-3fb9-9826-b212648077cd.roa (raw, json)
Hash identifier:          aKAEuH9eURL4czynNMzSsX0KbRpEkyH+cSZhwzn9lIA=
Subject key identifier:   24:59:BD:00:1B:46:62:5C:46:9A:51:41:A6:D2:80:83:2D:C4:54:D9
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584F497571E4611B27490DA61680
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21991
IP address blocks:        2602:fbcf::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:71:e4:61:1b:27:49:0d:a6:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d5033137-8aa4-4477-9c4d-1f0981bca3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:7c:9c:d1:ca:40:e9:39:d2:e7:e8:dd:2c:
                    05:9c:39:e6:5c:6f:07:c3:08:7c:e1:22:ba:b5:ff:
                    70:7b:3d:17:52:f7:5c:06:49:3a:67:1a:35:2e:9a:
                    0c:2f:81:46:1b:8f:42:88:35:d4:b9:4d:10:08:8a:
                    27:e0:37:80:0a:47:d2:6c:7f:db:b0:ab:5c:e7:39:
                    1b:c0:56:21:eb:3c:48:7e:7e:06:eb:62:52:b9:cd:
                    2c:e6:f7:e3:bc:d2:9e:48:45:58:fb:78:cb:2a:ee:
                    46:18:ec:0f:42:3c:f8:a4:b2:9a:05:8f:2e:d1:25:
                    4b:ce:b0:a6:92:ab:cc:1a:e6:a9:e2:38:4b:6f:2e:
                    85:b2:36:30:de:7e:39:ef:8c:5d:83:7a:b5:df:c3:
                    fa:ee:33:ce:ff:e1:13:bc:a3:9c:38:02:19:95:e0:
                    46:4e:cb:03:35:dd:16:6f:05:d0:bd:66:45:fc:91:
                    18:29:d4:69:d1:d1:29:68:01:6c:63:db:06:8e:ef:
                    27:6e:24:b3:56:bd:ee:0f:68:27:d1:67:e0:e8:19:
                    6a:e8:c0:30:34:ea:d8:b1:e1:46:82:e3:06:f5:f0:
                    8c:fc:1f:45:02:1b:71:5b:17:e7:2f:63:46:47:60:
                    1b:fa:b7:c0:03:f7:aa:57:ed:b4:dc:c8:af:62:98:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:59:BD:00:1B:46:62:5C:46:9A:51:41:A6:D2:80:83:2D:C4:54:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:fa:d6:e8:87:98:d1:2e:f0:de:c7:b6:e5:88:41:5a:03:
         37:fd:4e:59:90:d6:ca:c2:52:cb:21:10:bb:5d:a4:fe:75:d5:
         9c:bc:22:16:06:2d:1c:7a:48:82:96:d3:1d:03:3f:9f:d7:dd:
         f9:57:64:e6:89:65:0b:57:b4:ed:0f:8c:96:2d:04:80:a9:00:
         21:8e:c8:96:e6:65:44:39:31:b1:53:0a:3e:dc:7e:76:f4:38:
         41:c9:46:d3:c1:3e:de:f3:32:87:47:34:21:fc:fb:da:88:5a:
         80:c1:08:04:a6:63:a9:a2:46:e3:35:ef:37:64:b9:c8:36:f4:
         ab:a4:9a:2e:f2:c7:65:b9:91:d2:85:29:77:76:3c:14:e2:91:
         5d:93:6a:d4:1f:c3:fe:f4:94:70:15:d4:ac:a1:a2:02:67:ff:
         3f:c4:ee:8f:c3:7d:97:6d:5a:db:c9:5f:59:2f:0d:ec:d2:4e:
         83:44:93:6b:9e:9b:60:bc:71:4e:87:ac:5d:e9:9c:13:f0:d5:
         93:fd:97:be:59:99:5b:b4:c9:05:36:96:95:19:5f:b3:18:35:
         2f:61:5d:04:d2:37:57:80:ce:37:80:ee:06:a1:f1:d2:9f:7d:
         43:01:e3:9d:65:a0:03:b1:f5:b6:47:1d:29:6d:49:b6:d1:44:
         52:4f:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:38 2026 by rpki-client