Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/68e6a69b-5b01-37c6-a6c6-cafa9d7ccdd6.roa
File:                     68e6a69b-5b01-37c6-a6c6-cafa9d7ccdd6.roa (raw, json)
Hash identifier:          THBiWhe6nbKk05V4k4MSQM7jiuyskl4J0FVZ9YlXDCo=
Subject key identifier:   70:2C:71:2D:FA:89:BB:63:35:6A:98:46:B9:CF:8B:EE:18:07:8E:12
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584F498B0BC38566DA3A21023600
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/68e6a69b-5b01-37c6-a6c6-cafa9d7ccdd6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     153997
IP address blocks:        2607:eb40:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:0b:c3:85:66:da:3a:21:02:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fb7e0207-f2a4-4797-b398-1ec4d2616f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:5f:16:44:8a:57:f7:c4:ad:fa:77:64:91:
                    7c:32:ea:fe:51:46:8a:18:f6:3b:fe:1c:c8:20:29:
                    e8:73:3e:f3:e6:d1:e9:59:27:fc:e2:99:3b:f3:ed:
                    9a:cf:00:1f:c5:ee:2c:eb:ac:83:ef:eb:b8:93:33:
                    6a:b1:30:26:98:e7:2a:48:bc:5f:bc:1c:2a:21:ac:
                    0d:4f:48:29:a5:6d:68:d1:cd:ac:e1:3e:f1:b8:1f:
                    bb:11:02:f9:c1:a4:37:75:93:41:43:cf:52:42:fd:
                    3c:d2:af:05:45:db:53:44:d7:24:26:60:f6:b6:69:
                    dc:eb:7d:bb:90:f3:54:61:ce:7a:dc:2b:35:ea:32:
                    68:39:34:10:f6:b9:19:d7:04:32:3b:9b:f7:2a:8f:
                    1c:fd:1b:99:bf:bb:0b:ea:55:89:1a:76:86:36:e7:
                    23:1d:ee:7b:8e:2e:b2:43:bc:3f:43:13:5c:7f:88:
                    54:e2:cf:1b:31:ea:27:34:17:86:fc:46:31:07:9c:
                    f1:ab:39:af:ab:a3:14:9f:ee:b6:e6:5f:92:dc:12:
                    ac:f1:0c:2b:d2:b0:e5:e7:d8:d5:10:29:9c:99:1e:
                    f5:e9:a2:9a:28:a1:d1:99:f3:38:bf:0d:d3:cc:26:
                    95:c1:9d:0c:0c:48:5f:52:3d:e3:ff:91:4d:36:6f:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:71:2D:FA:89:BB:63:35:6A:98:46:B9:CF:8B:EE:18:07:8E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/68e6a69b-5b01-37c6-a6c6-cafa9d7ccdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:8f:eb:ae:15:c0:28:15:3b:63:95:c9:5b:b5:ce:91:4e:
         b5:5a:7f:13:26:0f:7c:1e:f7:d5:12:45:5c:df:30:83:5b:c3:
         5d:55:18:c7:64:3b:70:94:45:8a:d0:39:f2:6a:67:17:57:e6:
         6f:e4:05:f6:8d:a4:8f:bf:dc:f3:1e:d5:4d:1b:ac:10:fc:59:
         47:73:43:b5:06:7f:7f:58:ca:fe:32:d9:1b:0e:56:5d:33:91:
         27:d3:21:99:54:e3:9a:22:32:22:3a:92:78:83:dd:96:f8:a0:
         c8:91:e8:a0:02:4b:4d:88:4e:cf:fe:10:67:4f:26:19:0b:e7:
         03:7b:45:58:d8:af:42:f1:bc:99:4a:37:e9:ca:0c:1c:58:cc:
         78:8f:59:52:96:15:a0:55:0c:58:80:b7:f6:77:50:f0:96:e5:
         a6:c0:41:d9:e3:94:92:00:9a:8a:3d:d4:90:e6:7c:3e:a7:76:
         35:6c:1b:93:d7:ed:f7:a2:86:86:cf:6d:73:0a:1c:2a:de:02:
         51:39:82:58:b3:9c:8b:f5:f0:99:00:8a:5f:6c:bd:6e:ab:a4:
         8b:ce:11:c7:73:f1:22:8f:40:8f:9d:92:01:a9:3c:02:86:11:
         35:96:bc:2f:2b:14:66:5f:26:f2:04:62:c3:dc:7d:7a:21:f9:
         eb:b0:ea:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:31:22 2026 by rpki-client