Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/4aa00648-4535-37f1-946b-85338ad520bf.roa
File:                     4aa00648-4535-37f1-946b-85338ad520bf.roa (raw, json)
Hash identifier:          wrj1iBqu4pzB3O8WIe3IDkD4/fmrTXBCmfDVbPIovAE=
Subject key identifier:   C8:58:CE:6F:5D:EB:6A:3A:FE:FA:34:B4:6C:8F:F5:D4:7C:A1:C0:1F
Certificate issuer:       /CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
Certificate serial:       010D0C9F4328584F498A82AF252B6917EFA76700
Authority key identifier: B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/4aa00648-4535-37f1-946b-85338ad520bf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2610:30:e300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:82:af:25:2b:69:17:ef:a7:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0c2b3da0-cc71-4fd3-b063-9ed632abe042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:94:ac:ae:17:ab:cc:28:e4:fb:7a:70:88:
                    1f:c1:3f:2b:51:24:c3:9a:ac:95:ae:eb:ab:ed:b3:
                    8e:cd:5c:09:5b:d3:f2:9f:48:14:51:85:79:dc:7a:
                    a8:05:62:8b:33:3a:65:5a:d2:89:47:d6:9d:d7:a3:
                    db:b6:50:34:da:17:e3:1d:9c:c2:93:26:de:04:d4:
                    c6:7b:15:39:5f:dd:d7:77:94:c6:2d:48:e8:5e:43:
                    ef:a5:d3:60:33:e7:c3:5c:c3:a0:d3:2f:7c:71:c9:
                    d7:09:0b:a7:0f:2a:50:4b:6b:e8:d4:5c:df:86:c9:
                    31:b3:8a:0f:65:1b:8c:1e:17:0a:19:ab:c3:6b:a2:
                    5d:fb:f8:8b:af:73:70:60:5e:d2:fd:5d:c8:8b:01:
                    9d:01:96:37:96:17:32:45:ce:43:fc:71:9a:63:c9:
                    20:9e:dc:cc:85:6a:5d:9a:f9:33:0d:bd:97:42:1e:
                    55:57:95:f6:68:db:eb:68:18:6b:aa:40:39:d6:60:
                    bf:ed:08:7b:9a:16:40:08:77:27:bb:c8:23:76:67:
                    f9:81:3d:12:9d:4a:a8:99:7c:cb:6c:f8:d9:51:75:
                    81:13:38:1d:a4:ba:b1:41:43:14:a0:a1:3d:45:c9:
                    2a:50:b4:04:95:1d:ae:5b:4d:a0:52:96:21:c4:b8:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:58:CE:6F:5D:EB:6A:3A:FE:FA:34:B4:6C:8F:F5:D4:7C:A1:C0:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/4aa00648-4535-37f1-946b-85338ad520bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl

            X509v3 Authority Key Identifier:
                keyid:B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:30:e300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a9:e6:fd:e4:57:20:b3:40:8e:d6:0a:22:be:5d:21:5e:55:
         22:40:47:72:c4:b3:c6:76:31:41:c7:b4:05:18:f0:f8:5f:43:
         8a:b8:bf:84:17:62:37:45:83:ea:0a:77:c3:94:38:02:93:2a:
         3a:54:44:c6:e0:e0:a5:5e:6e:16:04:e5:09:21:1d:65:d3:d4:
         7f:c3:f1:ac:fc:a5:10:82:d3:b9:41:fb:3e:29:a2:69:81:de:
         12:dc:b6:62:70:38:5a:82:48:23:ea:cb:af:be:71:f2:81:60:
         b2:fd:e8:ff:dc:9d:5a:0f:fc:b7:42:33:ec:4c:41:8a:b3:f7:
         05:65:b1:4e:d1:45:d2:6e:42:d9:37:20:c2:f1:a3:8a:2f:88:
         ee:29:d0:4d:c6:c0:5f:97:b8:61:25:aa:59:98:b4:68:e6:88:
         e3:22:f8:c0:68:b0:27:d5:79:2a:f8:1d:89:e7:3c:82:e9:b3:
         1c:2e:ca:7d:4a:81:c4:53:00:42:60:2a:41:01:26:dd:b9:64:
         ac:69:9a:95:55:cc:48:a5:7c:a7:bb:e2:ed:9e:06:cd:ba:d4:
         4d:28:65:81:4e:20:95:bd:04:3a:07:9e:ae:8a:e5:a0:10:e8:
         0b:58:f3:a3:c3:4b:93:59:0e:fb:06:d0:6f:fc:eb:6d:6e:68:
         e4:33:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:52:15 2026 by rpki-client