Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a00d2c5a-5705-3e21-8229-2ca3d4693fd9.roa
File:                     a00d2c5a-5705-3e21-8229-2ca3d4693fd9.roa (raw, json)
Hash identifier:          1v75JvVYUUwiLvR6hGlHhWTtxJAH3B0ZxG74A1Fdp98=
Subject key identifier:   74:E6:83:D8:CF:56:D8:7D:74:8F:06:54:F4:B2:F5:A8:E6:58:CD:62
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F1302486F1CB14CA59553EC80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a00d2c5a-5705-3e21-8229-2ca3d4693fd9.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2607:dbc0:810::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:48:6f:1c:b1:4c:a5:95:53:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=b3c2bdd0-51d6-404e-bbc9-92632d339678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:38:5d:9b:b9:2f:f2:d9:29:39:5f:27:5d:
                    d2:28:f0:6a:95:24:6d:11:86:c6:bd:ee:60:87:8a:
                    1e:7f:53:18:f0:ff:60:71:a4:8d:82:a6:ed:0a:97:
                    ca:68:fb:1a:9a:f9:59:01:9f:62:5c:41:93:64:0e:
                    45:65:f2:fd:6b:da:2a:34:af:b6:21:2d:44:73:49:
                    fd:35:21:07:c7:8b:77:3b:fd:9c:68:85:b8:3e:c6:
                    20:a7:ba:1a:97:18:0e:b3:3f:d9:38:7a:b5:30:08:
                    5d:f9:3d:8b:40:ac:85:0c:ac:bd:d4:8b:b7:d0:14:
                    f1:46:e3:0c:e2:02:8b:79:d0:9a:e6:c0:d3:23:e0:
                    79:7a:01:1c:fd:47:b1:08:23:15:c3:ee:76:34:dd:
                    38:39:65:aa:2a:4b:2a:b8:44:a1:68:c7:3c:6b:98:
                    b0:8c:af:e6:6e:ea:32:03:ca:f5:08:3d:ad:1b:db:
                    4e:74:70:71:6c:c7:77:a7:a2:10:8d:d6:d4:37:b0:
                    7e:80:bb:18:4e:df:53:d7:95:71:47:57:64:b3:e0:
                    7b:23:1b:d2:6a:47:d1:cd:9e:fe:eb:d3:8f:2a:84:
                    2b:e1:d0:69:b9:0c:05:61:6c:1a:e8:65:b2:9b:c9:
                    81:e2:1d:18:dc:bb:9d:d3:51:dc:ba:5f:d0:d2:88:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E6:83:D8:CF:56:D8:7D:74:8F:06:54:F4:B2:F5:A8:E6:58:CD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a00d2c5a-5705-3e21-8229-2ca3d4693fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:810::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:4b:14:26:26:e8:87:23:c2:43:de:83:85:52:a6:ae:89:
         38:38:0e:25:e0:84:39:d9:7d:0e:56:04:1e:25:77:fc:78:6a:
         0b:f5:6e:b0:2a:81:b6:ff:22:44:6e:cd:0b:10:b3:07:d1:b1:
         48:af:fc:29:d5:9e:8d:97:eb:cb:45:cf:93:36:11:65:27:73:
         d0:02:7b:dd:f1:42:a7:e5:49:14:3c:17:30:2a:97:07:1e:b5:
         e7:e4:ab:67:ca:2d:9f:56:b3:9c:c9:6d:63:92:cf:42:ea:b6:
         cd:bd:6a:e8:ff:7b:62:76:97:27:9e:8e:82:07:da:3a:f0:5f:
         d1:ef:c2:cb:9f:f8:a7:ec:7f:d2:d6:49:d0:ca:1d:fa:83:b2:
         58:4b:d2:35:ce:50:76:d0:b3:79:bf:ac:44:37:6d:0b:5a:da:
         e7:11:74:9a:88:53:47:c3:3c:f7:97:1c:00:b1:63:5d:65:03:
         46:29:4c:9f:65:39:e8:c0:e3:fb:3e:ea:49:80:2a:7c:cb:b3:
         33:17:c5:8c:0c:d9:84:97:51:b7:34:88:d5:fd:75:20:b1:26:
         64:dd:b1:1a:08:6a:9b:24:a0:7b:ad:86:3f:75:ef:6d:dd:a0:
         ce:c5:a6:59:07:b7:91:72:9d:c7:42:b1:fb:78:94:18:fb:d2:
         2e:21:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:36:26 2026 by rpki-client