Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
File:                     b465a98c-c874-38a4-b591-0a2be8ee676c.roa (raw, json)
Hash identifier:          v9nkqcrl15JFkDTEmMxMDpiIZJOIZbIIGYQ+u+sOx0M=
Subject key identifier:   41:29:20:5A:EA:35:4B:D5:D7:82:12:92:8A:20:31:F2:9B:09:33:B1
Certificate issuer:       /CN=b06aad26-b91f-432b-94ca-bf78ffe68996
Certificate serial:       010D0C9F4328584F497407EBC5739AEDF3C9F150
Authority key identifier: 42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14183
IP address blocks:        2620:e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:07:eb:c5:73:9a:ed:f3:c9:f1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06aad26-b91f-432b-94ca-bf78ffe68996
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e3a79a56-e011-4b5f-a2c9-d35655412398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:61:8a:01:a9:32:af:fa:ee:02:c7:32:a0:
                    93:3d:7e:d8:50:16:0f:01:04:8e:a9:38:94:0c:87:
                    fd:a7:cc:0e:e0:ac:9e:f7:88:b5:54:a5:e9:1d:d5:
                    71:a2:18:d2:65:2b:f7:c3:4d:0b:e4:b5:87:02:3f:
                    e4:9c:8a:05:08:be:ae:b0:6e:90:cb:ad:bb:7b:05:
                    6f:26:1d:56:3f:a6:c6:88:24:00:b7:df:28:67:c5:
                    ef:a7:38:7c:ac:46:f4:62:31:06:82:b3:96:0b:ce:
                    88:fc:29:5f:00:4b:31:8d:ff:92:3c:c8:2d:db:5f:
                    f4:09:65:43:e4:fc:63:ab:51:81:72:cb:ec:fd:62:
                    53:b2:2b:a9:68:b0:38:cd:63:f1:29:e0:1c:95:c1:
                    cd:7d:77:21:2f:3a:80:94:2d:86:16:73:9e:e3:bd:
                    f4:92:77:32:f3:69:17:fc:d3:df:2b:44:16:e8:7c:
                    5f:8a:ff:ab:1c:52:08:46:61:4e:f8:6b:ae:e3:20:
                    8a:0e:bc:70:4a:3e:ee:79:56:97:87:1d:e0:9e:94:
                    f4:16:02:7c:6c:9e:25:ba:db:b8:82:8a:b2:a9:3f:
                    c0:d3:45:2b:19:a1:73:80:6b:2a:75:b9:1b:60:3e:
                    f6:53:ed:28:ab:17:93:09:5c:af:e9:ab:40:ea:36:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:29:20:5A:EA:35:4B:D5:D7:82:12:92:8A:20:31:F2:9B:09:33:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl

            X509v3 Authority Key Identifier:
                keyid:42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:70:8c:37:ea:3c:91:58:23:0d:25:69:4d:87:cb:fa:8d:
         81:c9:ec:85:6a:12:c6:bb:87:dc:ae:a9:04:2d:e7:90:ef:86:
         e8:c4:f8:ad:ce:4f:32:36:50:17:10:b8:7a:5e:89:27:ab:c3:
         8b:30:79:c6:c8:8f:ae:ac:7b:db:12:33:ae:d8:06:a2:3b:d2:
         df:c6:f2:e7:5a:fd:9a:a2:ad:70:56:27:0d:cc:19:dc:1a:d1:
         c7:86:7a:89:58:db:81:c0:3f:bc:3a:0d:b7:7e:ad:2b:48:d9:
         a0:01:5e:4e:68:62:08:a5:31:f9:48:44:40:19:e7:c5:1b:fc:
         2b:89:5e:d9:80:47:9d:9b:0e:e3:db:7e:64:48:98:98:75:46:
         82:43:a1:42:e7:0e:20:7b:10:89:28:4d:46:73:65:f8:ac:a1:
         8c:c3:75:5c:95:7f:ec:24:1f:ec:f3:57:07:62:3b:cd:3e:dc:
         16:27:1f:48:e9:7a:90:b2:e6:29:2d:98:82:da:58:a2:62:57:
         56:1b:c3:14:96:82:12:39:a8:19:ff:05:6d:70:3b:ec:e4:29:
         65:ff:d4:49:aa:8e:da:25:95:25:3c:0a:f9:39:ee:3b:83:fa:
         23:57:96:62:b0:14:35:44:f0:89:e3:d8:09:69:5b:61:8c:e3:
         5a:c0:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:29:55 2026 by rpki-client