Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
File:                     e645c012-c626-34db-bc9b-1cc63aba011f.roa (raw, json)
Hash identifier:          kvHXNXn0jgSCGu/Tl8KGAFXp25druXTeeWG95C7etNI=
Subject key identifier:   55:FC:6B:72:49:ED:2A:9E:A0:8E:61:7D:01:52:C1:A0:B8:C7:18:DD
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584F49756615164946D738A20E40
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16532
IP address blocks:        2605:2a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:66:15:16:49:46:d7:38:a2:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=31ef0b9b-17aa-4d1a-8b0a-d6bc444620aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:09:d6:55:84:0c:de:e8:86:87:32:ac:10:
                    b8:b4:df:89:e7:6f:35:6d:47:53:12:4c:1c:8c:b1:
                    08:c4:47:a6:12:42:02:a5:44:28:fb:7c:da:01:7f:
                    a4:fa:b1:74:4c:16:e6:6c:b9:1c:c4:6c:a0:aa:fe:
                    b7:00:5f:ec:4b:51:36:80:57:fb:89:2b:d6:c8:1b:
                    ac:04:14:4b:77:b6:b9:e2:ff:60:f0:a2:5a:af:06:
                    ae:0c:c0:3c:b5:4a:d6:ba:e8:63:73:91:e8:f0:ea:
                    9f:92:d7:e0:fa:17:12:6d:ed:06:d7:bd:38:74:87:
                    9e:b7:84:3c:bf:bb:c9:72:f0:87:57:29:0e:05:cd:
                    5e:9c:a9:af:cd:75:57:3e:e5:b6:df:8a:d5:d0:25:
                    bc:af:f8:4e:13:7e:37:27:71:84:a8:37:fa:06:f7:
                    34:80:61:6f:80:81:d3:31:72:20:10:59:0e:94:ad:
                    c5:ba:80:1f:d9:10:f9:e4:28:ee:8a:09:d8:2b:3d:
                    73:84:0a:5c:55:f4:aa:d0:c1:f5:02:3a:f5:1e:e4:
                    5b:d2:67:03:9f:5b:5e:13:b2:0a:63:d5:56:55:26:
                    b1:5d:a5:74:bc:5e:a7:db:c1:7f:8c:1a:ef:cc:51:
                    dd:83:f9:d6:c0:f4:0f:2f:30:b3:d0:c0:ec:c1:d2:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:6B:72:49:ED:2A:9E:A0:8E:61:7D:01:52:C1:A0:B8:C7:18:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:39:e6:0c:90:ff:fc:d9:ac:76:4d:a9:1c:6d:bf:c9:e0:
         fc:1f:89:1c:41:ff:e7:e8:ea:0f:23:e9:85:7a:f8:82:9d:6a:
         18:9f:22:36:bb:e6:d0:25:73:9f:ba:60:81:41:79:e7:eb:69:
         ee:70:d6:68:4c:fc:38:aa:2f:13:00:d8:22:8c:e3:04:4d:0b:
         a1:23:71:60:b3:78:fe:bb:16:3e:18:65:52:82:60:2b:6c:8a:
         14:b4:f2:4d:5a:cb:dd:7a:23:6b:8c:6d:f3:58:78:68:2b:b1:
         d9:88:e9:09:c9:d4:e8:80:b8:ab:e3:26:6d:63:f5:35:75:4b:
         12:69:5e:a8:94:7f:2a:3d:8f:b6:f5:a2:42:96:da:c4:89:d1:
         ed:01:5a:1c:dc:1b:2c:1c:6f:a1:a9:74:e9:c1:f7:e6:f7:ea:
         e7:b7:5f:51:d0:d6:0e:9d:8d:7a:7e:e9:80:22:c2:cb:6b:9c:
         50:16:ea:41:ea:d2:15:55:85:f2:cc:1b:ef:43:bc:1e:72:d5:
         68:86:c5:03:8a:e2:10:b5:47:ae:77:a4:f5:7d:b4:67:ba:51:
         9f:19:4b:aa:84:b4:19:33:c7:7f:45:15:43:72:87:8d:b9:38:
         1d:92:03:6b:25:7a:46:a8:00:e6:a5:bd:01:d7:be:1e:b0:67:
         89:61:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:42:29 2026 by rpki-client