Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa
File:                     19de2498-405e-3610-ad8d-53af4f1172c7.roa (raw, json)
Hash identifier:          HOzh0Icu7FvLJNbrlmJCFOEOdJ5RgZke3Ggp79zJJJk=
Subject key identifier:   4D:D1:FC:81:CA:1D:E5:5B:43:2D:29:3E:E0:27:D6:1D:E3:97:A8:02
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584F1467A2DEBF42FE58C3B3A3C0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     12189
IP address blocks:        2607:6000:f00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a2:de:bf:42:fe:58:c3:b3:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=937512de-e38f-4f4c-a09d-d60d6960a706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:89:a9:6e:8d:82:b8:40:58:90:6b:11:f9:
                    78:1b:8b:bd:4f:64:a1:e8:5f:34:c7:09:99:23:06:
                    5f:64:07:41:7a:b1:98:26:81:46:a7:7e:72:ba:48:
                    47:df:c8:98:5a:59:b2:0e:02:4f:ae:a6:38:59:66:
                    e5:a4:80:ab:1e:3a:06:41:3a:ff:8d:9b:31:d7:57:
                    a2:be:75:2b:9f:96:d3:c3:d5:cb:99:22:c1:47:fe:
                    1d:b1:03:65:b8:82:e9:23:f4:3f:8c:79:bd:5f:cd:
                    86:18:79:c1:34:eb:a6:94:34:1a:04:bc:4d:18:49:
                    0d:05:88:37:ce:81:5b:a7:d8:61:a7:b7:f0:fb:06:
                    82:39:33:21:f5:fd:3c:15:c7:51:a1:18:91:fd:fa:
                    d1:e2:d5:26:0a:18:52:b2:8b:1b:11:5c:d6:6d:ee:
                    f3:a8:f0:8f:ee:31:3c:57:64:33:1c:02:11:7e:5d:
                    d5:61:0f:eb:a5:7e:88:8d:ed:49:12:f1:f2:c0:6a:
                    bd:35:75:b5:a8:40:69:6f:51:eb:48:8b:cb:f9:33:
                    19:bd:e6:05:a5:17:b8:25:c9:ad:15:6b:44:a9:0e:
                    ca:c2:bf:ff:23:8d:af:ff:e3:36:67:28:28:1b:3c:
                    22:5a:98:50:98:02:0e:50:fb:21:f7:50:d1:49:8a:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D1:FC:81:CA:1D:E5:5B:43:2D:29:3E:E0:27:D6:1D:E3:97:A8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3b:e1:f1:e3:62:90:04:56:54:34:0c:53:01:df:fa:98:95:
         0b:bd:f4:1c:0b:13:1c:52:92:ce:59:2f:50:f2:be:dc:fd:4d:
         ce:b6:55:05:fc:51:34:64:11:bf:bb:c7:be:14:ea:99:9c:cf:
         b6:a5:d9:f8:3f:c7:79:5b:6a:a4:a6:ed:b1:79:01:7b:10:73:
         da:b4:36:2c:51:04:9e:67:aa:b3:24:85:92:44:4c:5a:3b:fb:
         30:fc:71:c8:e5:1c:24:30:f0:ce:0a:55:ec:a5:ca:6a:52:27:
         6e:cd:ee:66:4e:2a:89:b8:4e:a9:cf:94:7d:cb:cb:9d:18:df:
         5f:6f:96:1f:da:8a:3d:3a:07:d6:14:cb:b2:95:12:d0:aa:6a:
         bc:4d:eb:c0:f8:42:b9:6a:32:15:d1:b3:5b:5f:80:6c:30:af:
         c5:48:51:a6:4d:05:7e:ec:20:b9:95:fe:15:f5:e1:25:e7:f8:
         4e:07:15:e3:ce:35:4e:17:b6:3b:d2:d6:92:58:85:76:d1:14:
         3b:5c:cf:32:3b:dd:72:96:39:b4:6d:97:53:ee:5e:41:4a:05:
         48:96:a6:83:c2:31:26:24:e4:c2:e5:83:e3:8e:5a:ca:ec:e8:
         d3:b9:df:81:d9:6e:94:78:f8:5a:eb:32:55:69:42:a2:48:64:
         d3:69:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:47:34 2026 by rpki-client