Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
File:                     a588bbaf-450f-36f1-ae20-8742ee82982c.roa (raw, json)
Hash identifier:          hVHaLMuqk+vrkIxD6+bbfS2qiOoaa5EkQhk6mw3gs7g=
Subject key identifier:   2F:C3:CC:CA:A3:48:C4:26:AA:C8:0A:41:91:9D:35:4E:A9:57:40:30
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584EE0C20D33A729008001EA4780
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0d:33:a7:29:00:80:01:ea:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=79b1914e-985d-4185-aaf7-5b2f7e1d3da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:99:92:a1:e3:40:f6:09:28:ac:2f:8c:77:
                    0a:c7:2b:37:1c:2f:d9:80:4e:6c:bb:60:87:e7:c8:
                    cf:47:45:dd:d5:69:20:02:c2:0d:e4:cc:ac:46:9b:
                    a2:1b:2c:6f:43:a2:b1:4b:53:c1:c5:7d:32:25:3c:
                    5f:76:3b:63:fb:8a:21:7d:ba:f4:9e:09:c5:6e:e7:
                    a6:be:a1:e9:4c:04:66:7f:4e:c7:3c:c2:f8:98:9d:
                    3d:9b:52:80:5d:45:20:a5:86:2f:66:c3:c9:86:d0:
                    de:da:7f:32:be:e6:14:39:2f:c7:5f:6b:0b:80:34:
                    58:e0:99:6f:2e:c9:d8:47:cc:ab:ad:b2:08:2a:cb:
                    33:76:17:ba:67:b5:3e:86:f4:e9:d7:6d:4c:0a:50:
                    a0:d1:8f:29:eb:84:08:fc:d6:af:94:b7:8e:e0:f5:
                    2f:97:ab:ef:a9:5f:e0:22:f4:44:76:46:74:bb:09:
                    5a:9c:b9:ab:28:31:2c:39:8f:21:2d:08:4e:90:84:
                    6d:3c:07:9f:bd:11:55:d3:a2:cf:a8:fa:0c:55:c6:
                    7e:b7:cf:90:01:02:2c:cd:93:6b:63:e4:d4:5f:c2:
                    47:2d:5d:07:c0:20:8e:32:19:27:0e:86:66:ad:95:
                    a8:81:4c:33:ba:ed:81:16:42:61:03:ea:b4:ef:b1:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C3:CC:CA:A3:48:C4:26:AA:C8:0A:41:91:9D:35:4E:A9:57:40:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:e0:56:aa:71:f9:30:f4:04:82:e5:a5:ed:6b:92:70:03:
         24:dd:f5:e1:1b:ce:f6:38:25:d6:80:11:31:39:4d:de:d0:87:
         1c:28:c3:3d:bc:cd:8e:66:49:00:a3:36:ff:87:44:ff:c8:a8:
         95:aa:49:a3:37:f6:c8:de:00:43:47:7e:37:f3:b0:66:55:0f:
         4f:74:39:e2:fb:2d:47:6f:67:42:f3:e1:dd:a8:c0:77:32:27:
         43:ba:18:07:ae:03:d4:59:cd:b8:00:b5:08:60:6e:99:df:6a:
         55:c1:b2:f4:55:0f:45:d6:35:03:0c:29:d6:8c:82:37:83:fb:
         b7:74:ad:be:5e:d6:1a:6c:e5:85:6c:a0:64:ae:0c:54:31:21:
         f0:e8:7c:e7:db:f8:3c:eb:d1:21:c5:16:da:47:3a:2a:32:b7:
         dc:6a:a9:ea:6c:f3:ad:e2:98:9f:11:ea:f1:5c:a2:f3:12:94:
         f3:ba:53:33:db:3a:fe:4e:6a:88:7d:98:c7:7e:c7:b3:48:dc:
         76:5f:e0:76:c0:01:ca:fc:5c:cb:d3:52:83:69:a6:55:68:59:
         0e:62:d7:a5:36:59:e9:f2:8b:2d:f2:be:14:14:bf:64:80:7f:
         dd:64:6c:af:79:9c:8a:7c:05:6a:47:cc:d4:7c:e9:94:8d:cf:
         a4:0d:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:51:12 2026 by rpki-client