Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
File:                     cd15af34-f6a2-3d65-8643-9862111885bf.roa (raw, json)
Hash identifier:          UrV0YerbETm6avCDssfQUj873enhEFwFNXa7PWaDBPI=
Subject key identifier:   20:48:77:C1:60:B0:9F:16:2C:45:52:92:7E:68:5B:F9:44:91:8B:A8
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584EF2E75F67E71A74C90B84D680
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     12189
IP address blocks:        2607:6000:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:5f:67:e7:1a:74:c9:0b:84:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=4880ad73-7b42-4853-8d95-ed9952dd096c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:ee:27:ba:5c:f7:e0:9c:26:e2:e0:da:22:
                    4c:1d:ee:ac:76:e7:d1:b2:9e:4a:34:68:22:00:d1:
                    f2:e2:b5:80:62:6d:64:ec:41:fb:a6:ca:0c:71:63:
                    8a:4d:ea:74:b9:39:b6:be:ac:f3:92:62:a4:48:b5:
                    13:7b:bf:80:38:3c:3f:33:da:98:47:6e:bc:c3:44:
                    fa:89:1e:c1:d3:e1:c7:50:37:2c:bd:22:1e:ca:bb:
                    97:cd:b8:ae:05:32:de:dc:6a:b7:58:b7:69:be:0a:
                    51:09:a9:aa:36:b6:0e:23:07:c9:c6:e0:26:0b:48:
                    37:e9:84:ba:61:a3:9e:be:ac:03:06:98:1b:54:1e:
                    b9:bd:b2:eb:54:06:da:12:1a:51:9a:d8:a6:df:06:
                    ae:02:af:b2:11:27:e3:1d:46:30:64:7d:5f:72:3d:
                    8b:d8:b0:48:0f:19:6c:8d:5e:30:eb:1b:40:b7:de:
                    87:bc:28:9a:f4:fa:4e:86:80:a0:09:7b:08:99:d9:
                    27:91:e3:39:65:5f:61:10:d2:38:dc:3a:e6:e7:20:
                    28:3a:48:84:9c:d3:ae:86:2a:20:db:5c:4d:04:26:
                    16:68:b2:b1:56:f4:8f:d1:f7:06:b3:af:4c:4e:cd:
                    5b:41:77:2d:a9:b6:96:9a:18:46:f2:d1:cd:16:04:
                    29:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:48:77:C1:60:B0:9F:16:2C:45:52:92:7E:68:5B:F9:44:91:8B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:30:7c:e8:61:ad:71:13:ff:9d:79:14:c2:f9:d0:c5:39:
         3f:40:de:8a:86:fe:0b:d7:26:e6:c6:94:f2:da:5b:38:bd:e0:
         40:d8:e5:24:9d:b2:4f:ab:8e:4c:9e:1d:14:f4:ab:82:65:40:
         ea:f4:a7:21:3e:cf:55:97:c1:f5:9d:1d:8f:c4:31:12:09:99:
         32:ba:14:16:1d:40:8f:aa:01:40:cf:4f:50:c3:b4:12:17:ae:
         c1:09:9b:09:4f:db:47:a5:95:eb:70:19:25:a9:c6:6b:48:fe:
         98:33:9d:68:7f:25:f3:60:aa:30:85:4c:ba:2e:51:b1:38:83:
         10:e0:63:d8:0b:eb:9f:35:89:2e:12:4d:a9:4a:1c:52:80:1d:
         9a:72:5a:d7:cb:f2:5c:a2:9b:0b:d5:21:46:20:44:fb:3e:d0:
         5e:27:eb:58:89:c8:8c:d2:91:a8:cd:d5:56:1d:c6:cf:ef:96:
         7d:45:03:90:77:d2:1f:b3:8f:f3:d2:d6:10:0d:bc:c7:3b:40:
         11:e1:89:fe:bd:dd:fb:ff:75:e9:0a:7a:1e:47:4a:e5:7f:7b:
         0e:4c:2e:5d:2b:fc:4d:9f:6f:09:2c:e4:b4:4e:71:d0:80:3c:
         8f:8b:0c:23:96:4e:1d:09:0b:bb:a0:98:28:26:12:96:0e:4c:
         84:8c:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:27 2026 by rpki-client