Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/460c2659-84d0-3618-8d4e-f94fa234507e.roa
File:                     460c2659-84d0-3618-8d4e-f94fa234507e.roa (raw, json)
Hash identifier:          /2pPQppX6Nyv3t7JyrDrPjemaMdCiLgIkJjLXCuPbak=
Subject key identifier:   15:76:9B:2E:93:98:85:7A:43:F0:54:13:FD:57:B3:2C:A2:73:3C:78
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F1467ABB4ED5AD3946A28B300
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/460c2659-84d0-3618-8d4e-f94fa234507e.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        2607:dbc0:c10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:ab:b4:ed:5a:d3:94:6a:28:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=9ec5d407-129d-45c4-a350-c99f3e880f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:63:3c:21:38:18:bd:45:a2:5f:9d:eb:c0:
                    21:a9:d9:4a:e3:cd:cf:14:1b:ca:51:a1:f1:fc:43:
                    71:e5:4c:d8:19:37:5a:b0:fd:2c:ff:4c:60:68:55:
                    a3:a8:ce:db:26:a2:59:57:a1:d3:6c:77:f7:4f:92:
                    b7:49:e3:ad:85:0d:c0:32:03:56:21:61:f0:ec:33:
                    bf:0a:13:6d:5c:39:fe:8a:f3:93:c0:6e:e8:a6:35:
                    19:76:7b:f3:af:62:ac:29:78:0e:23:4a:be:61:e2:
                    07:54:99:03:f3:3e:0e:6a:b5:0f:3e:f4:6a:b7:c2:
                    19:5d:01:c7:e9:09:63:b7:be:e8:e0:0b:a9:5c:9e:
                    ca:b8:48:84:a5:07:1c:9e:9f:7d:e1:98:50:33:59:
                    bb:ea:5c:77:f7:00:c2:eb:e5:1b:db:0c:c7:d4:51:
                    2e:a5:c8:98:a8:d6:25:8a:1d:21:bd:44:c8:32:58:
                    ba:f9:66:0e:0d:ec:eb:33:0e:78:74:3e:d8:c6:90:
                    5e:e2:f3:77:9e:38:24:7a:0c:83:e6:c4:95:66:55:
                    a1:12:77:89:14:ad:f2:27:09:18:ac:0f:0d:78:c4:
                    ee:50:9e:61:70:66:c7:3b:17:23:65:e2:3d:71:da:
                    db:30:6b:fa:12:1c:0c:3f:cf:3c:8a:5d:69:8a:84:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:9B:2E:93:98:85:7A:43:F0:54:13:FD:57:B3:2C:A2:73:3C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/460c2659-84d0-3618-8d4e-f94fa234507e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:c10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:9e:66:b5:cd:3b:19:75:ed:30:cd:6d:a6:de:e4:98:bc:
         66:74:4c:6f:a7:f0:c5:bc:b3:d8:f4:00:76:9b:5e:e6:10:7a:
         e5:aa:46:2d:a6:7b:f6:15:e3:e6:90:e5:68:08:47:cc:0f:50:
         8f:f9:22:be:04:43:6a:c1:91:5b:f1:46:f0:a7:9b:a1:6d:50:
         cf:2e:f7:dc:b2:2d:ba:25:3f:86:d5:41:ed:a2:39:0e:55:69:
         20:39:c8:51:60:e0:fd:04:00:e4:aa:0d:51:0d:13:40:07:86:
         6e:42:2a:a2:87:31:a5:ad:3c:a5:65:a0:33:f5:6f:29:b3:7b:
         4c:36:9b:18:ad:26:03:1b:70:d5:4f:7c:cb:b2:f7:d4:90:c5:
         1e:25:ff:eb:e4:19:fd:8a:93:7b:d6:b2:79:71:4f:e7:8d:ad:
         7c:63:02:15:40:3b:ff:28:51:15:37:69:3f:2e:22:56:99:60:
         16:61:2f:ed:57:31:09:7d:37:9a:74:72:a9:17:42:8d:25:4e:
         d7:d4:39:22:69:35:3e:c3:2f:a8:a6:25:df:bb:75:9c:69:dc:
         8e:4c:e3:b1:bd:be:a2:65:20:5f:ca:92:ec:97:85:76:b4:3a:
         22:69:78:d3:f3:ee:56:f1:d5:2d:40:1b:7e:af:f7:b0:cb:65:
         c0:9c:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:04:11 2026 by rpki-client