Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa
File:                     ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa (raw, json)
Hash identifier:          ZpV0/YIlQjoTqBTqj7htUaVNLf63WMBIceR4vxVWT0M=
Subject key identifier:   3A:32:D1:79:1E:62:C3:A3:E3:A4:F7:7C:76:CE:43:CB:AA:64:C6:3E
Certificate issuer:       /CN=624ed502-24b2-4939-bd7e-39531ca3404a
Certificate serial:       010D0C9F4328584F2957AEB3D498EFAEFDD35340
Authority key identifier: 9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        2620:fe:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ae:b3:d4:98:ef:ae:fd:d3:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ed502-24b2-4939-bd7e-39531ca3404a
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=8c62a0c8-3bb9-4310-9285-a1e42fd34566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:cd:b4:f5:2d:03:9c:a5:27:2b:f2:4d:0b:
                    ec:2f:e5:b1:be:60:2c:be:27:03:20:40:6e:52:a7:
                    e0:08:37:51:54:ef:9f:a3:7e:70:49:d2:9c:73:8d:
                    87:91:08:9f:8d:53:6e:db:03:a4:68:36:1f:a5:e2:
                    49:1f:c8:13:29:ea:5b:33:28:86:c6:b9:69:bc:7d:
                    79:11:d1:81:f2:34:e1:62:f9:19:16:82:a7:e7:af:
                    72:ce:98:27:36:8d:9a:ed:7c:5b:b5:ab:3b:de:23:
                    9b:bf:ca:18:6e:4e:2c:17:b8:39:d8:82:20:bf:9a:
                    3e:01:b3:00:12:99:57:7f:df:9c:0a:c7:dd:d9:8c:
                    d9:5c:58:12:77:60:de:e4:ee:5c:39:73:d6:f1:8b:
                    17:5c:0d:48:4a:05:50:60:dd:4e:e3:d1:3e:4a:ef:
                    99:c7:2f:6b:d2:01:d4:23:c4:86:2c:ce:48:a2:c1:
                    91:b8:12:10:5b:82:4e:02:0d:e8:bb:e3:f9:d6:2a:
                    45:90:fe:b0:b2:48:a6:e2:22:d6:06:12:a0:26:f8:
                    59:5f:d2:a1:bc:27:35:6d:ff:75:5c:38:85:4c:e5:
                    da:92:71:3e:17:9a:6c:b9:11:c8:1f:c4:0e:eb:90:
                    f7:07:f5:6b:26:0a:56:83:bd:6a:3d:34:af:9c:36:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:32:D1:79:1E:62:C3:A3:E3:A4:F7:7C:76:CE:43:CB:AA:64:C6:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/ef92609b-9143-3c7c-b870-40c2bd9ab7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl

            X509v3 Authority Key Identifier:
                keyid:9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fe:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:53:79:47:c0:1d:2a:e1:83:93:98:c4:68:00:60:4a:eb:
         c3:a3:cb:de:dc:b1:45:a7:1d:9e:ad:24:c3:8c:fe:bf:2a:d5:
         92:a6:4a:3a:fc:9a:aa:0f:6a:b2:56:87:d9:4a:93:b7:0f:62:
         83:b9:f0:bd:08:a9:35:98:cb:f5:dc:23:73:08:07:57:1f:db:
         9d:5e:50:6c:a6:75:3d:d5:ae:8b:ef:09:3f:1d:e0:e4:be:81:
         87:ad:c8:ea:8f:3a:e6:9f:37:b2:7d:fc:f3:13:41:2e:3b:39:
         84:d4:54:b7:26:04:17:56:d4:da:c4:79:10:ce:f9:6f:e9:cf:
         1d:0b:5e:65:77:a5:f5:37:74:75:5c:a8:7d:36:1d:9a:6f:4f:
         e3:94:44:52:40:4f:5e:20:62:45:93:81:bf:51:0c:6a:66:f9:
         8a:6e:cf:27:50:da:72:52:8e:cc:b9:d5:35:86:8a:88:6e:13:
         5b:15:4d:91:37:b4:a7:0c:e0:1e:d1:77:93:23:1a:36:7c:a6:
         b2:bb:17:ab:ea:7a:06:ce:62:4e:ef:23:66:13:9b:e1:94:14:
         c4:fa:38:52:9c:3c:05:03:82:fd:2f:de:e9:91:83:22:c2:4c:
         4d:1b:9f:5e:0f:3e:86:c3:32:c0:7e:52:50:59:39:2c:87:bc:
         3a:d0:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:45:53 2026 by rpki-client