Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa
File:                     f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa (raw, json)
Hash identifier:          pE6eRCvGu3CwdSCwfzgwACicDqZptr8lTxwcMrK2hBg=
Subject key identifier:   33:93:EA:07:C5:26:3B:64:ED:43:A8:D6:33:A4:AC:04:E2:9A:AF:57
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584F506D56CA7BB0FA76814F3200
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     397543
IP address blocks:        2607:f8f0:c21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:56:ca:7b:b0:fa:76:81:4f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=a9a8259f-8cdd-4b2a-b8f6-202b09189a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:39:1e:bc:ca:81:aa:ac:21:93:84:e8:8b:
                    da:66:b2:19:96:a7:20:d8:bd:09:a7:49:a8:32:1d:
                    b4:b2:42:a8:46:28:53:ec:fe:a1:29:a6:c9:7a:32:
                    ca:2d:8c:0f:21:4d:97:e7:d3:89:ba:14:48:75:c8:
                    1a:b9:c8:a8:00:9a:14:a5:b9:7a:0b:33:8d:74:8b:
                    5e:db:1b:c4:b2:ee:d5:cd:00:43:85:3c:b4:60:c9:
                    18:0c:9b:c6:4f:8e:11:9f:16:8e:c6:df:e5:e7:f9:
                    41:34:26:b4:86:fd:fc:1d:38:5e:59:ef:08:be:50:
                    dc:fb:ca:20:a9:96:80:58:87:41:0e:81:93:9f:4c:
                    e7:99:7e:6d:4a:50:a6:68:39:d9:72:3d:ee:98:e0:
                    a2:5b:11:31:c1:66:8f:a3:76:49:5a:2f:83:1a:ec:
                    ee:66:40:a1:c7:67:32:1a:21:1b:6f:02:f2:e0:31:
                    eb:64:b8:25:1d:48:95:c6:64:c6:eb:60:55:a8:01:
                    2f:57:05:f1:3a:ff:6b:10:f6:42:22:c8:8b:4c:e3:
                    8f:34:0e:35:0e:aa:cb:8e:fd:bb:70:59:e0:35:dd:
                    e9:5c:18:60:35:6b:84:ab:1f:dc:a2:b7:1c:24:15:
                    19:dd:43:ba:05:f2:b9:59:a4:09:69:32:17:a3:dd:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:EA:07:C5:26:3B:64:ED:43:A8:D6:33:A4:AC:04:E2:9A:AF:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:c21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6b:6b:dc:d5:60:9a:24:83:38:d8:32:4e:3a:38:7d:85:48:
         02:e0:48:cb:6a:bf:97:89:55:d1:5e:78:39:ad:ef:b7:cc:b3:
         b4:7b:45:82:14:98:37:53:3b:5a:c0:a2:12:e7:05:bd:4f:eb:
         e7:ea:67:c2:ac:e9:d9:ef:3b:ff:f3:d4:f2:fb:2a:b4:e8:20:
         45:9f:1c:05:e6:3b:8d:da:02:09:0b:9b:ab:40:eb:07:7a:56:
         15:e2:67:52:38:7e:aa:3b:7d:d2:e9:cb:2f:a9:c4:73:c4:0a:
         5d:f7:7c:31:fe:64:06:62:8e:76:64:fb:cf:a5:72:5f:a6:df:
         c3:97:bf:03:20:e5:be:93:f9:bc:e0:e2:53:9d:e1:53:0c:48:
         fb:01:22:71:3e:45:a2:b4:b1:42:8e:cb:c1:44:44:b3:8f:54:
         dc:53:d9:d8:04:a6:f4:90:73:b9:87:e9:b2:46:d9:6a:e8:fe:
         a2:bd:a4:c5:5f:51:f5:6e:0c:58:95:59:a5:ad:8a:4e:2c:86:
         41:a7:2e:71:2a:16:63:f3:5e:d5:6b:62:38:c1:0a:1e:37:22:
         21:51:b8:94:44:eb:4f:36:45:14:23:25:af:01:f0:27:2c:71:
         5e:46:92:7d:c3:ee:85:66:14:75:5b:02:8c:13:6f:d6:fb:77:
         be:2c:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:37:07 2026 by rpki-client