Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa
File:                     6929cfef-7615-3f63-bffe-70eced470d39.roa (raw, json)
Hash identifier:          wOvqo4prTbFuubhEtS28KwFpqzgOEsxd/O9IFMPpHt0=
Subject key identifier:   A3:95:7D:AE:07:13:F4:D2:94:14:F4:DB:C2:A2:F4:30:8B:74:E7:B0
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F4328584F3FAD402E216C238DA183A1E0
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2620:c1:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:40:2e:21:6c:23:8d:a1:83:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=c5caecf9-81c4-4072-86ed-1820b711b9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:26:b7:b8:17:38:11:ae:6a:ec:04:08:53:
                    68:1b:ab:be:b0:9e:6b:ef:65:b8:99:ed:61:e9:66:
                    41:eb:4e:6a:83:d2:7e:e6:5e:b5:bc:28:3d:cb:f2:
                    a9:21:d7:3c:7a:2e:89:cf:02:4b:f8:6a:f6:d3:ba:
                    79:ec:d3:d2:65:a8:45:e0:d4:d4:dd:62:08:d1:e0:
                    15:e2:1a:89:41:44:83:76:63:d8:53:6d:70:ab:3b:
                    b8:99:c2:69:1e:11:b7:f2:43:eb:1d:42:7b:7a:2c:
                    9e:a9:de:f2:4a:de:e4:0a:8b:a8:f7:5a:fb:81:af:
                    67:6c:2f:35:31:4f:3c:07:54:97:3c:99:7f:46:32:
                    53:ec:60:39:b4:86:e9:29:b2:11:a0:cd:30:bf:04:
                    4a:68:af:4d:fa:14:3f:64:4e:0d:00:06:86:ff:62:
                    4e:e1:c6:fe:7d:be:70:61:1a:fa:b1:f5:78:81:62:
                    fe:68:31:6a:85:d6:fe:22:28:59:6c:ce:13:b6:6f:
                    94:9e:3f:ae:15:fe:f0:0e:1b:d7:56:4a:7f:88:a9:
                    c8:1f:c8:61:bf:c2:e2:18:c1:26:2e:99:ee:5d:bf:
                    08:25:64:13:24:3a:2b:27:e5:8d:ee:90:43:b2:a6:
                    e5:71:0c:1e:f9:ee:76:61:4c:9c:73:7a:50:a9:dc:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:95:7D:AE:07:13:F4:D2:94:14:F4:DB:C2:A2:F4:30:8B:74:E7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:8b:00:74:bb:ff:cf:6b:db:e3:c4:d4:a2:38:7b:3d:78:
         cc:58:39:3b:33:da:ab:37:98:ad:13:4e:9f:7b:3d:cc:99:0f:
         47:3d:9c:29:c8:15:d3:01:5c:52:c9:b6:b7:14:04:cd:e7:e5:
         f7:f0:36:85:cd:56:5f:e4:b9:a4:15:7f:0a:a8:d5:4f:34:84:
         29:5c:92:88:17:d6:86:a2:1c:70:c1:63:12:52:a9:1e:de:4a:
         4f:3c:3a:18:13:06:7a:de:9e:49:94:fe:8e:ea:77:27:d7:bf:
         ef:3e:24:ea:71:65:02:79:29:4a:41:d6:12:4e:3f:22:98:f5:
         f8:a8:50:bb:6c:27:cf:47:a5:5b:f8:16:ba:ba:40:01:0f:de:
         29:5d:16:db:45:93:cb:4f:a5:f0:69:f4:fd:30:3b:67:1c:2a:
         d7:c9:52:ba:2e:cb:a4:17:b7:4c:53:02:16:af:b3:cb:ea:05:
         9e:03:0f:77:57:c4:55:cc:d9:64:31:18:c6:cc:35:b1:b9:5d:
         cf:b3:4d:22:eb:04:55:cc:96:9c:d1:38:f6:bf:ba:00:13:75:
         58:c5:be:4a:37:07:57:86:4b:7f:01:2c:40:12:53:4e:3d:b8:
         32:89:15:a1:45:af:87:f7:b1:66:88:bd:c5:49:9c:05:bb:26:
         db:06:03:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:18 2026 by rpki-client