Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c2392220-0844-3bbd-a19f-ca376b054bcc.roa
File:                     c2392220-0844-3bbd-a19f-ca376b054bcc.roa (raw, json)
Hash identifier:          +LZb2CnLrWhjV7egNf0lr10TrApmn8LV8G0KxTimInI=
Subject key identifier:   E8:B3:B1:5C:7F:19:37:6C:1C:46:0D:19:01:8B:7B:D8:42:35:33:31
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F119CE99F7DEA000FF0170880
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c2392220-0844-3bbd-a19f-ca376b054bcc.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2607:dbc0:f020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:e9:9f:7d:ea:00:0f:f0:17:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=6bf22ebc-9237-447b-b7f7-9c5662c38ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:68:24:f3:75:b2:15:35:7b:f3:57:44:7e:
                    07:f1:08:92:27:d6:35:99:5d:dd:28:16:9e:b2:df:
                    55:ca:b1:73:98:80:a2:d6:da:ed:0f:a4:52:91:d4:
                    ff:17:fb:26:00:5d:68:4d:d7:13:8d:ac:d2:92:03:
                    6a:3e:53:39:3c:6f:27:f5:86:00:25:9c:56:bc:74:
                    54:01:46:1b:3f:6a:d6:e1:b8:f9:32:89:f5:07:28:
                    04:b4:29:2b:bd:3c:b8:b0:cb:2e:15:7f:b2:a7:a2:
                    7e:01:85:39:3b:8e:0e:10:68:1b:98:4d:65:d3:6e:
                    6e:7d:fc:38:c2:8f:c4:7b:49:38:83:c6:c8:57:2b:
                    6d:89:21:40:e2:ee:2c:b8:65:e0:07:af:56:b3:eb:
                    65:2b:0e:ee:d7:31:3e:e0:2f:a3:17:99:cb:53:da:
                    f2:b2:62:ef:e7:b8:53:17:23:ed:0d:d2:53:93:10:
                    99:e0:b3:f5:8a:c3:e4:f5:f0:53:48:98:84:b7:94:
                    e3:1f:e4:43:59:dd:72:bf:83:ec:47:91:30:b4:6d:
                    59:1c:52:a3:f2:ab:1d:e4:82:93:00:5e:6a:01:78:
                    d4:90:8f:50:24:e0:a7:68:60:4c:cf:a5:2c:a8:54:
                    51:75:c0:da:65:59:ac:8a:6d:c5:2c:2f:ae:c2:d4:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B3:B1:5C:7F:19:37:6C:1C:46:0D:19:01:8B:7B:D8:42:35:33:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c2392220-0844-3bbd-a19f-ca376b054bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:f020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:48:27:6e:c4:d6:af:d1:e7:c4:ae:fd:8e:50:74:1d:8d:bc:
         3c:a5:b8:b8:6b:d1:21:72:ba:93:46:44:92:1c:2f:55:ed:bb:
         d6:17:d9:33:4e:5c:27:91:ba:2f:20:2b:fd:0e:1e:70:0c:dd:
         e3:5f:2a:85:20:ce:7a:bd:23:7b:de:4a:4b:7c:ef:c9:51:c6:
         71:0f:34:83:d5:3e:a1:bd:7b:f7:4f:f1:4a:b7:e0:e7:25:62:
         e5:d4:0c:6b:00:dd:b8:68:12:89:e4:b2:44:a8:58:33:1a:e5:
         30:25:1f:51:8b:ae:5f:18:2e:b7:1c:fe:04:49:f6:21:6d:b4:
         4a:9f:92:98:fd:17:79:0b:7f:51:74:bd:07:b5:c0:6c:39:ba:
         67:74:d8:54:e9:30:63:8a:93:b9:5b:9a:07:4d:d2:08:53:a5:
         63:96:83:cb:5b:8b:f5:8a:05:ce:07:f8:a7:85:fe:63:5b:7e:
         da:1c:3a:3c:bb:07:2b:95:83:3e:d3:05:26:4c:76:39:d9:10:
         4e:4a:07:53:05:d7:fa:d0:39:bc:c3:fc:c1:a5:fa:aa:61:99:
         60:fc:8f:03:86:5e:26:6d:fd:3a:2f:4b:40:ee:a3:4a:86:b2:
         47:ef:1f:3c:1c:61:c0:94:79:4a:8d:99:71:91:77:6f:cd:4f:
         c4:4c:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:48:04 2026 by rpki-client