Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/7f753e12-673a-3a2b-9155-84fc15154977.roa
File:                     7f753e12-673a-3a2b-9155-84fc15154977.roa (raw, json)
Hash identifier:          7d6lECAc+4Y0IuzWfp8DvnWNzOIxlsX7TicmQ/waWFc=
Subject key identifier:   C9:F4:D5:B8:D4:CD:51:5A:2F:91:69:85:4F:78:65:FF:29:50:54:F1
Certificate issuer:       /CN=841d3ce8-d29f-40af-b883-2f114aee4d29
Certificate serial:       010D0C9F4328584F49897050B0E3D563835845E8
Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/7f753e12-673a-3a2b-9155-84fc15154977.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46696
IP address blocks:        2607:e100:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:70:50:b0:e3:d5:63:83:58:45:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e8d6835b-ffda-4e30-a500-6f767b5ca98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:75:ed:cb:f2:6d:bd:f1:c2:0c:2c:5b:4d:
                    ea:0e:99:ed:bd:0b:d2:9c:d1:93:22:5d:27:cc:20:
                    21:cf:7c:f9:82:3b:b1:e2:7f:15:95:48:71:a5:a9:
                    d7:96:03:8d:e0:5b:f9:49:ef:75:f8:9d:aa:ef:51:
                    48:71:76:a9:bd:02:54:83:21:f4:16:f8:ca:e7:73:
                    54:48:8d:91:5e:54:46:1c:ac:25:8f:2c:c4:a0:83:
                    e2:65:86:01:cd:19:97:c9:24:f2:30:55:37:7d:7a:
                    d0:c1:61:95:99:66:8c:63:20:8b:d1:d6:66:f5:6c:
                    d5:26:f1:5d:30:52:5a:e9:21:7f:56:ed:03:30:b0:
                    86:27:de:6e:21:3e:74:21:d7:7c:83:46:d0:72:eb:
                    54:f9:2b:0b:03:1c:50:dd:7f:95:24:7d:a5:26:3f:
                    07:8f:c7:85:b6:b9:78:08:31:8f:47:ba:e9:49:74:
                    0f:86:96:d8:20:fe:de:bc:27:ce:db:57:11:71:98:
                    31:8c:96:04:3c:d3:49:d5:c9:e7:4d:ee:b6:be:e7:
                    70:22:82:e0:04:67:10:e4:5d:57:64:3c:2d:9e:01:
                    f2:48:48:23:c6:92:15:40:67:7c:4e:af:20:2d:a1:
                    14:b9:e9:3a:8d:5f:e4:3f:58:16:70:b5:36:b4:87:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F4:D5:B8:D4:CD:51:5A:2F:91:69:85:4F:78:65:FF:29:50:54:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/7f753e12-673a-3a2b-9155-84fc15154977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl

            X509v3 Authority Key Identifier:
                keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e100:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:4c:87:08:06:81:8e:e9:fe:e3:9e:0e:a7:05:27:1a:7c:3c:
         a7:c6:78:a8:01:52:2d:5b:1f:a5:af:bc:b0:fc:a2:e9:43:a9:
         3d:f0:42:b3:d4:aa:19:46:d0:6a:a2:64:b1:b3:71:05:4a:4c:
         a7:a7:ab:dd:19:6b:99:c6:ac:a5:60:3b:7f:c6:c4:46:21:09:
         b7:25:b4:34:c2:5c:85:d9:50:6a:12:72:2a:65:d7:a3:7f:27:
         6d:17:1a:25:77:ee:e5:06:b6:ed:5c:48:e6:9b:9a:5b:da:de:
         28:36:02:8e:88:98:18:0a:61:40:50:68:49:87:89:a2:a6:33:
         e5:8c:cd:07:01:62:bc:59:33:43:6e:c3:10:46:b2:ae:b8:54:
         44:ab:ac:1d:fa:17:ae:00:a9:f0:e8:a3:2d:b8:1b:85:2b:0c:
         7b:c1:18:f2:c9:14:43:20:4b:89:1b:5d:65:ec:3b:b6:b6:21:
         d7:dd:b8:6b:75:10:9e:9c:ca:98:52:75:8c:5e:00:00:76:78:
         3a:54:f6:b0:6b:f2:e4:de:20:78:d8:da:8b:e7:9b:c9:b7:4b:
         8c:c1:f6:bd:d2:a7:22:9b:6e:7c:af:8d:52:b0:a4:62:ef:c4:
         34:03:8d:04:5c:6c:9f:60:b6:22:b1:49:03:ae:fd:ea:02:95:
         29:40:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:57:38 2026 by rpki-client