Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa
File:                     efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa (raw, json)
Hash identifier:          kxpwhrHnUhleczC/ao81+CzTKFY6o8tkgObAHAHsEnc=
Subject key identifier:   F9:40:38:D1:DA:DA:91:09:18:55:A1:57:64:3E:75:04:95:94:D3:7B
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584F4974B59126049C3718FE0900
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22359
IP address blocks:        2607:8240:ff2a::/48 maxlen: 56
                          2607:8240:ff2b::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b5:91:26:04:9c:37:18:fe:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a46d0e4c-3df2-438a-82d1-187ac32a573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:2d:65:d5:1e:e4:40:e7:41:99:74:c5:9b:
                    1b:5d:d5:c4:73:e0:13:85:ab:7a:5e:3d:6a:ed:0c:
                    07:b6:b9:4d:9d:f9:6a:4c:ce:95:92:cd:63:06:ca:
                    1a:f3:a7:fa:ba:bc:c0:4b:c0:c3:f9:16:f5:94:10:
                    92:1b:ff:ae:68:d5:f8:4c:06:ba:35:5f:dc:e3:ed:
                    75:1b:ad:7a:ee:18:d7:9a:aa:69:43:5b:49:bf:85:
                    0b:3e:7e:c9:00:03:14:0d:bb:4e:65:e7:58:bd:2a:
                    fa:2b:ff:ba:72:6f:aa:ab:8c:fa:71:0e:f6:9a:bd:
                    1c:6f:4e:78:a7:ea:e9:04:03:a4:62:a7:47:c0:24:
                    06:29:ec:c8:bf:a0:9a:93:2f:47:79:e4:55:78:10:
                    81:2c:7b:d4:2d:43:78:93:8a:f0:c1:1b:ad:4f:4c:
                    7f:ef:45:a1:10:a8:60:8c:27:38:96:46:15:19:be:
                    92:c4:02:96:22:ca:c5:3f:68:58:50:72:3e:24:a2:
                    b5:ff:84:81:4b:97:05:49:0e:a5:69:0b:ad:a8:b2:
                    72:bc:6b:33:e0:91:f1:08:57:36:8a:0f:0b:89:f1:
                    e2:a2:87:0e:9f:bc:fe:31:76:4e:0c:42:ab:0c:eb:
                    c2:cf:d3:e1:9b:41:c9:33:74:33:5d:3b:52:d8:e8:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:38:D1:DA:DA:91:09:18:55:A1:57:64:3E:75:04:95:94:D3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/efc42999-2fc9-3bf0-8077-0a514ae5d6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ff2a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:b1:77:03:8b:c4:9f:97:2a:bd:0c:cb:9b:04:34:e7:82:
         01:55:d4:4f:cc:1c:47:fc:09:86:dd:9f:15:37:46:ec:f6:c6:
         53:ce:d0:65:13:a6:2c:13:c4:91:9f:58:af:2a:bf:4c:39:54:
         fa:8f:96:43:0e:23:0c:e4:e7:d3:ec:d1:11:69:b4:6f:9b:09:
         d7:75:2e:e6:81:22:68:19:3e:ca:5c:ed:a8:20:e4:a4:2f:c3:
         36:ce:ef:97:f5:84:54:ff:20:7a:d6:c0:c4:2e:39:fd:ac:0d:
         4b:90:08:ba:0e:b1:31:bf:63:f7:9a:a3:c7:c7:9d:09:45:91:
         3b:24:95:a5:9e:56:03:fc:84:46:e6:2a:64:19:18:4c:ba:38:
         ba:54:62:a3:45:a5:ea:3c:99:86:b8:73:07:68:d5:cf:2a:4a:
         49:4e:0b:36:f5:d4:eb:c8:5d:3e:24:8f:e6:31:56:ac:90:38:
         67:98:ee:cd:af:50:74:31:d8:1d:86:2b:7a:f5:be:47:bf:b0:
         77:78:51:58:fc:01:16:8e:be:18:cd:d4:5c:ef:44:fa:16:1a:
         63:6d:02:97:2e:36:0c:5a:ef:53:80:74:bc:3a:9f:55:f2:ec:
         b8:d0:6a:5f:f7:d0:0f:21:24:f8:3d:23:08:99:3a:27:66:24:
         fd:7c:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:14 2026 by rpki-client