Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/0d9c2078-628d-31e9-bf51-a86c47938285.roa
File:                     0d9c2078-628d-31e9-bf51-a86c47938285.roa (raw, json)
Hash identifier:          xKjkL6YH5T3nfhsZFYtLaVpUhF5+EjN/3s+FiG7+b58=
Subject key identifier:   14:F0:31:30:44:71:72:91:FD:D9:71:89:78:65:9A:70:A0:0A:84:DE
Certificate issuer:       /CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
Certificate serial:       010D0C9F4328584F2D87C6635224A09DC837FC00
Authority key identifier: 3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/0d9c2078-628d-31e9-bf51-a86c47938285.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     55105
IP address blocks:        2607:800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c6:63:52:24:a0:9d:c8:37:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2c9ce7-041a-4f47-8928-4a1f5b344908
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=782b4e50-830a-4d67-be9d-6ac64e0b3ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:b3:d2:7d:92:00:a5:ea:da:1b:73:65:26:
                    e5:6c:85:4a:e6:26:46:d6:29:19:8a:7f:00:d0:d8:
                    c2:6c:e0:4e:07:45:fe:cc:b1:7f:b5:7b:66:7f:b3:
                    a3:f1:9a:7f:2b:bd:da:0e:d3:ba:9a:a2:94:a4:eb:
                    79:90:7e:7b:e9:7b:0f:9b:f6:33:31:d5:90:e3:3c:
                    dc:ed:ab:d5:16:ec:29:70:45:e9:c8:9a:bf:99:48:
                    99:8e:6d:f0:15:3b:6a:28:0a:b6:38:09:4a:0b:88:
                    6e:8b:d1:0c:e9:7d:56:c7:d7:13:c1:3d:ba:b7:ba:
                    73:8c:4e:52:81:c8:06:1a:93:7a:28:f9:a6:dd:60:
                    87:c9:75:01:c8:94:50:e1:f3:1f:2c:e2:50:28:a7:
                    89:fa:59:16:6d:70:d9:d8:ff:1d:40:5a:40:41:ce:
                    68:ae:41:a6:29:8a:d8:be:7b:93:30:54:c9:aa:a5:
                    2a:cd:83:51:eb:7e:d2:6f:cd:81:be:42:a4:98:53:
                    54:d4:a8:70:fa:a9:72:21:6d:33:fb:4d:48:a0:a0:
                    1b:ff:54:3e:55:9b:8c:46:76:17:40:a0:9d:8c:00:
                    16:95:85:51:a9:74:97:a1:55:99:d3:e2:1b:82:e2:
                    69:c4:23:d7:d6:8c:88:10:c7:dc:ca:2c:0d:5a:8e:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F0:31:30:44:71:72:91:FD:D9:71:89:78:65:9A:70:A0:0A:84:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/0d9c2078-628d-31e9-bf51-a86c47938285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908/ec2c9ce7-041a-4f47-8928-4a1f5b344908.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0E:F3:12:24:78:E1:73:3D:2B:53:D7:7D:CF:D0:1A:DD:58:83:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ec2c9ce7-041a-4f47-8928-4a1f5b344908.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0c:30:d7:9e:a6:e2:eb:74:6e:fb:38:4f:3f:a0:70:3b:52:
         52:85:f1:f4:90:3c:05:87:75:f1:a4:09:78:b0:d8:dd:a3:52:
         54:11:e8:2d:c2:54:42:86:ac:80:f6:d9:91:85:ec:1f:1d:c7:
         73:a1:da:4a:54:6e:30:3f:7d:40:56:0d:22:46:3e:dc:3a:83:
         47:50:16:07:b4:0f:3a:1d:f0:ff:a0:cf:49:91:bc:9c:ab:d4:
         32:23:61:ea:bf:d0:ac:86:03:48:5b:ed:74:43:79:b6:25:89:
         b4:ae:03:35:8f:d3:3e:c1:e9:fa:26:63:cf:fa:f3:4b:33:45:
         8f:23:f6:92:1f:90:53:a0:f5:7b:b7:cd:76:8a:28:c5:6b:d4:
         c3:1b:78:00:59:fb:14:e7:2e:09:29:32:d6:17:e4:41:99:f0:
         7b:de:ea:64:04:e1:ae:52:ad:58:16:bc:2d:dc:44:ad:af:ad:
         cb:0f:a9:91:d5:f0:a4:ff:5f:78:d3:a6:8f:60:2c:6d:14:b2:
         2e:a4:98:4d:8e:86:6b:88:33:08:bd:c8:b5:8c:4e:c5:9c:85:
         d3:fb:f4:30:45:b6:c2:a1:8f:a9:95:3a:59:f0:ca:41:e4:9a:
         ea:2f:d4:9e:e3:ef:8a:2c:77:52:e3:62:04:61:f5:88:2f:44:
         c0:ba:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:52:01 2026 by rpki-client