Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a18254c5-4fbb-38b3-ba01-06849550db5f.roa
File:                     a18254c5-4fbb-38b3-ba01-06849550db5f.roa (raw, json)
Hash identifier:          drE+Do+DRiMGqZEHTwPYZOPSv0EGayKcfpyHQtK3NPY=
Subject key identifier:   3E:6A:98:47:5F:00:50:57:0F:6C:24:06:68:89:C7:79:24:B2:87:7B
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584EF2E76DF28448D205D390B780
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a18254c5-4fbb-38b3-ba01-06849550db5f.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:210::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6d:f2:84:48:d2:05:d3:90:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=10881c88-d7c5-4f0e-a38a-6c737fa2847c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:04:4c:37:5a:19:e8:b7:e5:34:e2:b0:9d:
                    dc:ec:08:85:62:eb:50:4f:4d:19:e6:3e:f7:48:f1:
                    d6:36:51:50:d9:20:9f:05:0e:37:f3:30:2d:e6:1f:
                    9f:c9:73:d7:ad:f3:87:52:66:3a:72:67:09:ce:d1:
                    84:92:ad:1b:5d:62:f6:51:0b:1f:25:8a:12:95:3d:
                    68:73:20:c7:3f:68:03:a7:57:0b:df:cf:5d:82:fc:
                    9f:86:ee:38:da:7d:f8:b1:31:74:12:de:9c:25:9e:
                    87:dc:cf:4a:54:91:f9:81:78:e5:62:74:3c:56:71:
                    1d:23:b7:15:29:b2:3a:84:51:b6:b6:b1:6d:d1:24:
                    1c:c0:fb:d9:ae:28:99:04:96:96:35:59:80:e5:64:
                    7b:62:c2:13:f1:22:a4:28:ff:0c:93:aa:85:9d:38:
                    0c:86:d5:c4:09:08:b2:ec:d3:23:23:da:2f:84:cf:
                    c1:27:c9:ea:ad:54:10:14:ec:a4:6b:15:92:4a:b0:
                    25:64:65:87:03:c3:6f:a2:f3:6d:a8:d2:88:49:6c:
                    91:38:c9:e8:0d:70:46:4c:06:8e:0b:9e:c3:f4:72:
                    aa:77:f3:f7:77:8e:ef:38:6b:77:92:82:a1:c7:9d:
                    c1:48:cf:6f:94:80:21:b3:de:49:cf:c8:94:33:ae:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6A:98:47:5F:00:50:57:0F:6C:24:06:68:89:C7:79:24:B2:87:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a18254c5-4fbb-38b3-ba01-06849550db5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:c1:ff:2a:c9:a7:35:b1:82:9a:a1:c9:f3:25:eb:18:65:
         14:45:53:20:d2:6e:0d:7d:d7:5c:40:c0:d5:e7:d8:bc:8a:3c:
         fb:c4:27:c3:62:9a:cb:84:90:90:0b:c3:58:db:00:3b:c6:a1:
         bf:b3:14:8a:19:7d:f5:81:87:a3:fb:df:d4:c1:05:d4:47:f8:
         da:d8:48:a4:db:cf:96:6e:c4:06:e7:15:3d:0d:95:14:fc:35:
         10:2d:76:56:c1:32:66:62:dd:92:53:90:90:e2:4f:8e:c1:58:
         92:7c:05:04:4f:96:4f:15:c4:4c:db:4d:12:e7:2b:52:1f:6d:
         71:d0:19:69:65:ec:7c:67:c4:73:58:4b:37:bb:d4:9f:bc:51:
         c0:1f:be:75:56:5f:81:82:6d:68:0a:67:47:a5:27:34:79:e6:
         fa:cb:e0:df:5e:6d:d4:68:24:02:d8:a6:e0:3d:57:db:5d:e3:
         73:fa:b0:4a:02:14:74:a7:be:06:f4:df:e0:1c:9f:a3:bf:9e:
         83:53:79:32:7f:5e:88:f6:a0:77:0e:b1:7f:d7:fa:a1:0c:01:
         f9:35:c0:ac:a8:fa:57:bb:be:e6:7d:29:51:95:66:93:8f:3d:
         61:d4:33:49:78:d1:a0:b8:6f:7d:d8:94:d7:cc:e8:28:f3:ee:
         0d:39:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:27:29 2026 by rpki-client