Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/1655e4a6-013b-323e-8eb1-d87f98414864.roa
File:                     1655e4a6-013b-323e-8eb1-d87f98414864.roa (raw, json)
Hash identifier:          X36cnNDeO9MWMUZv3G03uXgHpsIwhMCc9rbvkp5n/2U=
Subject key identifier:   72:46:AE:E1:70:B5:31:08:DA:61:F8:13:06:CD:B2:9A:62:A3:87:05
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F5E62EF15A5D30CA6BA2C7D80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/1655e4a6-013b-323e-8eb1-d87f98414864.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     12025
IP address blocks:        2607:2f00:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:ef:15:a5:d3:0c:a6:ba:2c:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=65c573f7-10ca-4291-aff6-9f54c7e8fcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:11:43:49:d9:38:05:3c:75:2c:d9:a2:10:
                    54:01:3c:61:5e:f9:95:64:22:5a:1c:f8:81:0a:c7:
                    d5:0d:f2:cf:f4:1a:ff:bc:43:04:6f:ea:9c:c5:9e:
                    6c:87:89:17:9f:3e:a0:a7:24:82:cc:a7:d5:35:5a:
                    7f:19:48:30:95:a5:bd:d3:26:75:08:dd:9d:cf:ac:
                    99:ea:18:84:df:97:53:cd:c2:7f:1c:22:b4:2f:1f:
                    b4:64:cc:61:32:8d:40:02:9b:3b:f8:22:a2:3b:39:
                    d6:06:cb:9e:69:64:1d:8a:7d:25:e8:c2:42:15:11:
                    48:fb:e1:44:71:77:49:92:4c:93:43:13:5d:10:f4:
                    8d:a4:b6:d7:9f:ec:5e:ff:9d:8d:cc:b9:d0:31:49:
                    8a:78:36:e9:d5:2b:bc:07:0a:62:e4:42:d7:4c:4d:
                    49:a0:34:01:35:6c:4a:6b:5d:88:af:5d:23:12:ea:
                    fd:f5:cb:e2:33:c0:b8:16:35:11:79:bb:d9:8b:42:
                    56:76:30:cf:4f:21:9d:7f:81:78:bf:c8:ad:ef:8a:
                    05:a8:e1:f4:a7:90:ae:f7:34:55:d3:52:ba:d8:59:
                    39:f2:d3:e6:e6:18:47:7e:50:cf:84:22:f7:79:80:
                    60:76:45:bb:7a:b8:29:fb:27:0d:d0:ce:52:8a:4a:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:46:AE:E1:70:B5:31:08:DA:61:F8:13:06:CD:B2:9A:62:A3:87:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/1655e4a6-013b-323e-8eb1-d87f98414864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2f00:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:26:36:8f:fa:ca:4a:7f:2a:43:cc:1b:a3:cf:a2:ae:6e:83:
         70:f6:d3:98:84:37:79:8a:40:48:d8:fa:2a:47:b9:39:d7:71:
         d9:95:c7:40:aa:90:ff:31:11:48:64:ce:11:e7:cc:e1:0b:66:
         25:8b:9e:ff:06:d6:c3:47:82:7b:fd:fb:67:c3:bb:44:a1:36:
         cb:79:9a:52:0c:c3:56:54:4c:b2:79:8c:0c:3d:7b:ae:b1:75:
         60:00:8e:8b:6c:7f:d4:9c:f1:28:8c:7f:de:5c:cc:94:70:70:
         85:e2:60:e9:97:23:99:7e:29:92:3e:ff:a2:ff:e7:ea:9b:3e:
         f7:56:78:4e:b0:a6:14:b9:94:3a:9a:64:a8:2e:9d:0f:44:83:
         a6:41:0d:82:f2:45:0c:59:cc:10:0b:e2:ce:e0:ce:91:12:41:
         f6:f9:c6:45:3f:ba:38:9b:22:47:57:2b:13:b6:c2:59:c7:69:
         23:80:be:e6:80:09:77:c8:49:9e:c0:bb:03:18:45:27:c0:83:
         5b:13:b4:39:cd:3f:cc:3d:cf:a0:9c:e1:bd:0c:90:eb:4e:08:
         35:b8:3b:df:78:5b:eb:d1:24:d4:56:dc:40:c8:4e:fc:8c:d6:
         0a:3b:db:2f:29:79:e2:94:08:2d:82:49:36:03:9e:94:67:86:
         63:ad:43:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:43:21 2026 by rpki-client