Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa
File:                     68452c37-5a9e-3865-8fec-47bb4e783d81.roa (raw, json)
Hash identifier:          MEprNoEFIrg6ynfb+rIedPwufLcWJ3Dd+/8NE1FkRtA=
Subject key identifier:   2F:AD:2F:7C:8C:D1:E3:8D:62:09:B4:F0:37:9B:EB:A6:14:7C:94:9F
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584F31B7BA27A993E7B341BF1BC0
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     395661
IP address blocks:        2607:bc40:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:ba:27:a9:93:e7:b3:41:bf:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=4020a574-909d-4174-933c-ce933a2bd371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:c7:c9:58:04:51:0a:44:6b:b2:bb:cf:5f:
                    1a:ed:d5:18:8f:75:e0:4d:b5:44:80:e2:30:58:61:
                    93:19:6c:1e:9f:62:fe:53:3a:b1:47:81:99:7c:80:
                    51:d6:ab:8b:64:15:88:da:7d:91:86:27:d0:c9:ff:
                    e7:1b:a4:e9:e7:db:6a:b9:e3:11:75:bc:33:31:5a:
                    d4:96:2e:b6:63:af:c1:bf:0e:42:13:ba:bd:24:a2:
                    7c:a5:3e:54:84:4e:0e:36:c3:ef:5e:bb:bb:f0:ec:
                    bf:8f:d0:87:d1:4d:b8:04:b2:c3:e8:20:e7:ff:b7:
                    dd:6a:e7:80:b0:7b:04:84:f3:96:e0:58:b3:e0:2d:
                    77:2c:13:8c:cc:1a:32:70:92:dd:0b:cb:83:15:20:
                    72:26:4b:a9:36:bb:72:41:d6:a4:9a:25:78:f0:19:
                    b9:98:9d:35:5b:c6:82:fe:1f:df:56:61:3a:b4:f4:
                    aa:15:b0:86:49:20:a7:d9:f9:b8:9c:40:86:f7:ce:
                    84:cb:87:5b:b2:9a:78:e8:92:59:9a:37:57:ee:5f:
                    a2:ee:2b:0b:c0:e5:55:a3:18:48:18:68:7d:8d:92:
                    f3:bd:6b:69:3c:dd:0c:1c:84:67:a6:25:db:a5:01:
                    45:2c:a2:ff:b7:a2:90:ce:65:7d:02:94:44:0e:c7:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AD:2F:7C:8C:D1:E3:8D:62:09:B4:F0:37:9B:EB:A6:14:7C:94:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:18:d9:f8:d4:59:bd:df:2f:41:94:15:2c:12:7c:da:5e:
         be:18:0d:65:b2:c1:b1:9f:cd:35:9c:74:30:8e:cf:b6:50:4b:
         ae:6f:71:72:1e:d1:06:9c:5d:a4:ad:71:a3:d1:67:d4:3a:fe:
         b6:55:10:37:a0:f3:e5:8d:48:94:62:a6:b6:81:c3:38:a7:41:
         5b:a0:a6:6b:6f:e8:02:27:11:64:6b:c7:14:3b:6e:68:b5:dd:
         e9:fa:cf:f2:01:17:37:d2:de:72:dc:1f:e4:35:fe:12:ce:1f:
         88:65:c8:47:67:12:7a:a6:e8:3d:04:10:96:ee:08:08:69:5f:
         ff:bf:ea:d3:70:b9:87:0b:9e:b5:17:d4:4d:bc:64:8f:b9:04:
         0e:d3:55:1a:1a:71:bb:11:16:79:09:b4:9b:aa:e8:06:bc:ee:
         60:d3:c2:d8:c6:a3:65:1e:a1:ab:d3:32:bc:a0:5a:d3:7e:83:
         15:cb:f5:f3:19:36:ef:26:a3:f3:44:4a:2c:87:92:98:f7:b8:
         a4:0e:9e:87:71:68:37:2c:ac:ce:7f:91:2d:e3:02:83:06:0d:
         35:a5:aa:55:f7:7d:06:d1:3c:eb:40:34:61:a5:f1:c3:d0:15:
         73:08:e2:b2:c0:74:e9:b6:db:a0:58:4d:36:9d:bd:13:a7:4a:
         1e:23:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:17:58 2026 by rpki-client