Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/336714f7-45c0-3f78-92e7-a738b587b118.roa
File:                     336714f7-45c0-3f78-92e7-a738b587b118.roa (raw, json)
Hash identifier:          PWBJefLOgZGyVlF6906q0Phtt+j9rVTtfarI1GmnPtw=
Subject key identifier:   3B:BE:F3:55:E3:01:A1:94:A1:54:67:A2:FD:C0:DD:1A:8D:E5:C1:D4
Certificate issuer:       /CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
Certificate serial:       010D0C9F4328584F4974612054A0BA7C9E667040
Authority key identifier: 79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/336714f7-45c0-3f78-92e7-a738b587b118.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19779
IP address blocks:        2602:f6ce::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:61:20:54:a0:ba:7c:9e:66:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bfef66b0-157f-4522-9fc3-03ca3df8e45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:c8:56:83:59:4a:0b:a0:ca:8e:ff:11:0d:
                    cc:4a:9b:5d:b6:a0:87:e7:01:bb:94:be:82:5a:03:
                    91:40:ab:45:73:8f:d1:d2:c4:5c:89:8e:86:96:45:
                    46:56:fd:e8:6b:55:5b:e7:cc:1c:58:78:73:89:74:
                    62:b7:6c:bd:af:d1:50:7c:d4:03:05:d7:3a:68:60:
                    f8:5b:31:74:af:7f:f5:25:fc:fe:5c:89:d6:c0:fe:
                    0d:39:b9:17:21:27:f6:3f:8c:ef:e6:07:28:f0:bb:
                    83:bc:82:c1:29:e3:90:b5:1d:43:36:7a:73:2f:0b:
                    37:c7:1a:37:36:93:3c:5d:42:22:10:6f:cf:e3:76:
                    14:08:12:e4:6d:23:b1:a9:3c:03:bf:7c:2f:33:cb:
                    55:02:5c:ab:41:8c:15:19:1c:a8:1f:22:f4:00:52:
                    cc:f0:78:6a:d7:25:e2:b7:78:33:ce:e0:25:14:91:
                    ca:13:af:91:e5:67:60:57:af:41:e5:3c:0e:48:5b:
                    44:ec:25:73:f5:5a:df:d7:97:70:74:7e:ab:6b:2e:
                    ac:e6:01:0f:0a:d1:bd:a6:a0:32:f9:0a:c6:77:a0:
                    c9:6d:97:be:01:c4:6e:be:59:05:8c:15:c7:c8:fd:
                    e8:f3:f6:52:ed:51:8d:88:b1:f2:76:ff:48:ef:fd:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BE:F3:55:E3:01:A1:94:A1:54:67:A2:FD:C0:DD:1A:8D:E5:C1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/336714f7-45c0-3f78-92e7-a738b587b118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.crl

            X509v3 Authority Key Identifier:
                keyid:79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6ce::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5a:15:04:cc:72:6d:96:5b:db:79:33:41:58:5c:6e:4c:16:
         15:4f:36:3a:e2:6e:09:3b:c6:14:25:2b:b2:51:90:ea:a4:bc:
         c8:9f:84:1b:a3:fd:18:9a:20:bb:f8:59:58:f8:24:76:69:80:
         81:0f:2c:e4:80:71:ca:83:1d:83:d9:f9:e9:c7:30:75:34:51:
         95:f1:20:1a:63:a9:fb:3c:37:ed:bc:ac:bc:a9:94:dd:3d:ac:
         45:78:6e:3b:89:9d:4c:ea:61:8d:9d:c8:da:88:f8:6b:29:96:
         c8:f0:2c:7e:82:5e:c5:3e:25:2a:80:82:df:60:85:30:41:b2:
         01:65:64:33:9d:e0:62:b5:7f:64:cc:f0:c1:44:3c:88:34:a1:
         c5:d0:b0:8d:7a:1e:ba:dc:4c:56:36:9f:7f:77:6a:fd:6f:15:
         5c:9f:69:78:33:6d:15:6a:35:56:7b:87:9a:f7:07:dd:03:0b:
         b7:9a:82:8a:d2:d7:52:c0:bb:6c:65:7b:99:13:50:fa:be:13:
         86:36:b2:66:73:67:b6:ef:0b:89:63:ba:0c:bc:e9:ac:48:63:
         0d:8d:f1:50:53:0c:a6:9e:e2:eb:11:25:40:e4:8e:19:02:04:
         0a:ff:3e:9c:9f:d6:86:26:fb:e5:ed:d1:ca:19:25:3a:eb:dc:
         cb:42:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:36:33 2026 by rpki-client