Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/d759f97c-422c-347a-9ffd-e064b13d818a.roa
File:                     d759f97c-422c-347a-9ffd-e064b13d818a.roa (raw, json)
Hash identifier:          4see9qFY8qwP4YwzeFyNclNHTlp6gh7Hdd3iiF2fnKc=
Subject key identifier:   AE:A9:BA:1F:DD:78:17:24:C6:70:A8:58:99:A6:7D:B1:AC:FD:3E:DD
Certificate issuer:       /CN=6f71acdb-298c-4b21-93cf-54605ad5edc5
Certificate serial:       010D0C9F4328584F3CE2B6B9919617BB4053C580
Authority key identifier: BC:B1:D1:06:9A:6B:14:36:16:87:1C:98:34:18:D1:B1:74:C8:40:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/d759f97c-422c-347a-9ffd-e064b13d818a.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     54270
IP address blocks:        2605:e6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/6f71acdb-298c-4b21-93cf-54605ad5edc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/6f71acdb-298c-4b21-93cf-54605ad5edc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b6:b9:91:96:17:bb:40:53:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f71acdb-298c-4b21-93cf-54605ad5edc5
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=48030c38-7c43-4df7-b143-d75d8a74370b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:63:3d:7d:c1:b9:9b:71:99:50:4b:87:cb:
                    43:8c:80:ee:64:75:6d:54:92:ba:1a:90:d2:1b:be:
                    7c:2b:55:58:76:d3:4a:26:9a:40:4e:4d:98:b3:03:
                    84:3c:b0:fe:09:a0:3e:d8:b1:2a:2e:8a:57:06:06:
                    4e:e5:a6:f4:5e:af:48:1c:b3:d1:10:92:7e:f8:c9:
                    db:d9:ed:20:f2:fc:1e:0f:4f:2f:8b:14:66:21:40:
                    99:c5:3b:85:80:f3:ea:2e:1e:c5:8d:da:df:00:81:
                    c2:0a:08:46:ff:71:ee:00:c4:e0:ca:f8:ca:54:7a:
                    50:35:14:59:55:59:67:54:a4:82:f6:dc:f3:c8:a8:
                    b0:c0:d3:b1:67:6c:2c:25:53:d3:fa:03:13:04:60:
                    f5:ea:49:92:15:73:7e:79:30:a8:c2:f0:26:3f:2b:
                    4c:23:8e:58:3a:67:8f:13:50:29:94:5d:f5:33:1b:
                    fe:29:44:c6:1a:7e:8a:89:1a:41:95:12:ec:95:1c:
                    50:65:63:63:c8:72:6d:17:b6:a1:14:c4:34:4f:de:
                    7a:48:e9:79:33:10:9a:3d:55:0e:57:18:71:85:4b:
                    89:40:75:18:c4:b1:97:da:3c:74:b4:b4:a0:90:08:
                    7c:4d:3e:81:cc:8f:f4:a9:ae:08:f5:94:95:b3:c0:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A9:BA:1F:DD:78:17:24:C6:70:A8:58:99:A6:7D:B1:AC:FD:3E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/d759f97c-422c-347a-9ffd-e064b13d818a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/6f71acdb-298c-4b21-93cf-54605ad5edc5.crl

            X509v3 Authority Key Identifier:
                keyid:BC:B1:D1:06:9A:6B:14:36:16:87:1C:98:34:18:D1:B1:74:C8:40:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:ab:5b:ae:c7:6b:d0:44:29:6b:48:e2:1f:1a:92:9b:05:
         f6:15:2e:20:c5:9d:15:d1:d6:88:1c:1c:e7:7e:45:1a:5f:57:
         29:76:52:30:9b:9e:a9:87:f7:ac:99:ed:a1:1d:bb:34:8e:e1:
         a7:7b:3b:5a:b5:09:b7:6f:52:37:b4:a3:46:d3:71:f3:b5:2f:
         5e:39:d4:c1:1c:44:ca:43:dc:71:e1:1d:27:6e:f6:b9:08:df:
         32:34:70:4f:4a:c0:4d:7c:e4:70:80:47:78:a3:67:68:65:10:
         92:b5:4e:02:0e:b5:c4:2e:29:ac:7a:4e:c3:8a:5f:f7:65:eb:
         b8:a5:c7:da:0d:5d:86:95:3c:f5:d4:0a:b8:4e:40:2c:76:90:
         cc:21:26:d7:b7:8e:ff:db:3b:b4:6f:40:ab:8d:6d:2b:a2:84:
         94:33:93:a6:67:41:7e:2d:04:fc:6f:ae:e8:20:26:44:b8:dc:
         6e:7a:57:93:3c:bf:a5:e5:e6:ad:6d:a2:c1:64:05:1f:e6:97:
         7a:4b:20:74:ea:79:cb:3a:30:45:64:0b:17:cc:69:3d:6c:ba:
         15:97:a3:70:26:3b:16:56:e8:5d:0b:6e:76:8f:f5:a8:2a:58:
         51:31:99:81:83:5a:db:0d:48:64:d5:d1:4a:f8:7c:4a:ff:76:
         ec:e4:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:50:24 2026 by rpki-client