Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa
File:                     4903a6a5-2e05-34a2-b9df-6f26be762807.roa (raw, json)
Hash identifier:          LP5Jn+hQGksfUfEX4hXC1gP7Austs+uLi5zxF8qfOnE=
Subject key identifier:   EA:0F:9B:5A:CC:96:D6:B0:DD:91:53:64:E0:40:55:8E:29:D9:DE:A8
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F4328584F119CEFAC3FA8973084EE7760
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     18780
IP address blocks:        2607:7d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:ef:ac:3f:a8:97:30:84:ee:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=4b92f867-1ff4-44bf-a7a0-291b738f5793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:d2:0d:0d:ae:bc:5b:2e:fd:38:41:80:a0:
                    8d:a4:2d:11:74:b3:f1:3e:08:69:15:74:c2:3e:6e:
                    df:d3:55:a7:c2:dd:33:64:2b:f1:e0:49:97:f7:39:
                    11:c6:6f:4e:49:29:f4:83:f5:a1:7c:64:39:00:66:
                    cb:03:52:1e:8e:1a:2a:61:86:0c:f6:bb:5e:91:c9:
                    5e:6a:8c:2c:8a:d6:7d:1c:12:e8:0d:9d:84:4a:fc:
                    b7:2d:10:b3:ee:c0:d5:05:69:69:19:fd:93:a8:c4:
                    96:ca:c3:76:53:68:6f:bc:ea:9b:b8:da:17:8c:89:
                    7d:15:b5:6a:b7:58:75:f0:33:7b:18:8f:a5:27:be:
                    9a:14:d3:b8:6d:94:ef:b1:7f:05:77:f5:cf:d5:f7:
                    2a:04:74:33:5d:9d:f3:26:11:8a:4f:f4:17:90:88:
                    4d:d9:ce:1f:e3:6f:09:0f:22:d9:09:9b:29:59:e6:
                    95:b5:eb:97:a8:d9:a6:4c:89:b9:22:c2:0f:e6:8f:
                    65:1e:cd:72:d9:aa:08:cd:17:4f:ab:e4:dd:fb:9b:
                    40:79:ab:b5:b9:d1:e5:c5:72:51:3a:59:09:77:49:
                    99:ad:de:52:e2:b5:5d:a9:42:24:e1:d9:99:72:de:
                    1a:fb:ca:4a:7d:98:42:2d:fc:2a:28:32:48:50:84:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0F:9B:5A:CC:96:D6:B0:DD:91:53:64:E0:40:55:8E:29:D9:DE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/4903a6a5-2e05-34a2-b9df-6f26be762807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:55:ca:f3:c9:cb:9c:19:05:03:58:58:16:26:38:03:64:
         3d:9b:a4:2f:19:de:44:04:b4:ae:4f:d8:5c:b1:05:15:11:89:
         17:02:c9:fc:ac:c8:57:ed:94:11:c1:39:bb:16:79:6b:6b:1d:
         17:9b:f2:7f:e8:6a:96:01:11:01:d9:8f:1e:b5:2d:fe:d5:ff:
         b4:20:ab:79:d7:ad:83:00:2c:61:e8:f4:dc:b6:f1:af:94:96:
         50:ff:e1:f7:07:76:0a:c1:c0:08:68:92:9a:d8:5e:a8:e9:5d:
         29:d3:25:25:a3:cc:93:cb:47:a8:46:5f:47:7a:b0:dd:0a:ae:
         e9:e9:69:9b:80:2f:77:11:59:b3:e5:19:03:17:d8:05:ff:88:
         59:9b:6b:8b:c4:6a:f3:ff:84:db:84:38:22:8e:71:ab:85:fd:
         8b:61:c0:49:dc:d2:d0:b3:27:36:f5:ef:9f:e3:d5:29:e3:10:
         5d:96:72:95:72:e9:c8:43:5a:a1:28:89:4b:e4:77:5e:1e:ed:
         82:24:3d:4a:f9:e5:d5:60:d7:36:50:46:2a:86:dc:00:dd:3a:
         c0:78:e5:98:22:63:c7:d6:04:1b:82:4b:1b:96:75:b3:91:7a:
         03:e0:f7:35:3a:79:bb:48:73:37:fd:f7:36:41:26:df:c2:42:
         43:68:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:57:18 2026 by rpki-client