Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1/45d2062f-f5c8-3246-bb6b-e1d8d87ed9ae.roa
File:                     45d2062f-f5c8-3246-bb6b-e1d8d87ed9ae.roa (raw, json)
Hash identifier:          NpzwSXRcJ/56bYuGDTZAtWr4iXm8flhXYjdlUI/YFdA=
Subject key identifier:   DE:02:80:72:74:84:14:E8:40:88:10:C3:61:33:EA:9D:ED:23:28:02
Certificate issuer:       /CN=cae22a95-4557-4450-8efc-fc2dd4e3a2d1
Certificate serial:       010D0C9F4328584F4F08005A5380413F1BFA1C80
Authority key identifier: EF:7E:93:ED:96:25:BD:87:85:CF:A9:74:3C:B2:A6:D3:98:7C:F9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1/45d2062f-f5c8-3246-bb6b-e1d8d87ed9ae.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     14097
IP address blocks:        2606:44c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1/cae22a95-4557-4450-8efc-fc2dd4e3a2d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1/cae22a95-4557-4450-8efc-fc2dd4e3a2d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:00:5a:53:80:41:3f:1b:fa:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae22a95-4557-4450-8efc-fc2dd4e3a2d1
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=3a72e4a8-fe6f-4c68-aa07-9969d6df5b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:2d:61:1f:3c:fd:4e:29:1c:21:69:82:60:
                    35:8c:d8:be:de:ab:a0:e9:d0:d0:30:58:1b:c2:5c:
                    0e:be:95:31:fb:74:62:90:21:42:9c:82:2a:23:fd:
                    0b:de:ff:23:bb:c2:41:73:97:c2:33:63:61:c0:e2:
                    8d:1f:72:87:c7:43:a0:cb:40:1c:8d:46:00:e8:d0:
                    7d:d3:2e:27:14:82:3d:7a:9a:5e:6b:83:d6:47:3e:
                    b1:09:cb:56:25:b9:58:25:26:9f:95:a2:60:a4:47:
                    e3:d3:ad:92:40:b8:9d:d9:d8:ac:7a:62:f4:dc:13:
                    10:a3:e5:a2:ff:7d:24:62:2a:b3:8c:c7:66:23:52:
                    73:fd:2a:2c:a1:fe:7a:8e:72:67:ae:30:db:7c:6f:
                    2a:ba:c9:cf:5c:f4:54:33:38:a7:d6:95:b6:17:fd:
                    8d:c2:16:1a:a5:73:4f:c4:00:fb:85:42:4e:97:88:
                    d1:83:c4:a8:b1:60:49:c2:32:11:9e:1a:92:67:a1:
                    ca:da:91:f7:b8:30:49:51:78:d4:f8:72:cd:d9:24:
                    d3:8b:e3:1a:98:a5:51:c3:21:20:75:03:57:d4:cd:
                    92:2b:ac:48:a4:49:06:b5:c9:9a:72:1b:9b:63:66:
                    52:90:14:0d:bb:c2:12:5d:5a:d6:e8:80:cc:d3:35:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:80:72:74:84:14:E8:40:88:10:C3:61:33:EA:9D:ED:23:28:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1/45d2062f-f5c8-3246-bb6b-e1d8d87ed9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1/cae22a95-4557-4450-8efc-fc2dd4e3a2d1.crl

            X509v3 Authority Key Identifier:
                keyid:EF:7E:93:ED:96:25:BD:87:85:CF:A9:74:3C:B2:A6:D3:98:7C:F9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cae22a95-4557-4450-8efc-fc2dd4e3a2d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:44c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:53:aa:d3:84:a6:84:d1:76:72:6f:10:46:e9:d7:9a:fd:
         0e:7a:be:ce:fe:a9:4e:dd:ef:7b:de:bd:f5:fe:44:b8:bb:50:
         72:3a:ab:ec:ee:f3:5e:d4:71:aa:b2:a8:97:fd:dc:09:70:25:
         ad:bb:b9:0f:d0:e1:24:0e:76:15:f3:84:ee:30:a8:ea:89:87:
         b2:43:eb:60:3e:c9:e1:89:4f:60:f8:e7:e4:17:96:1a:b4:13:
         e2:5c:5b:c6:94:eb:7e:f0:a8:2b:c5:dd:41:7e:c0:34:9f:48:
         fe:b4:cf:c8:27:ef:70:d8:98:52:f8:33:06:af:c3:f8:c8:59:
         70:73:fc:c7:12:75:fc:9e:80:0e:1b:0c:fe:ff:0f:a3:9d:b2:
         96:63:67:cc:01:f4:3a:93:ce:d9:ea:6f:07:a3:95:79:4e:93:
         78:b0:e0:b8:f1:db:91:a3:f3:37:45:ac:f6:aa:37:52:be:71:
         dc:27:82:44:1e:83:a5:8e:fa:fa:8c:0e:81:8a:5a:cd:a1:90:
         3a:15:1d:81:a2:7e:7e:ef:df:4f:fe:0c:64:66:16:a5:11:33:
         4f:d5:84:1d:b2:dd:6e:a4:fc:f1:94:b3:fe:f9:ac:19:12:e0:
         aa:fa:e2:48:47:0a:3d:40:28:ed:f1:e4:41:a2:d2:e3:9f:05:
         d2:ab:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:29:24 2026 by rpki-client