Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/265a8988-b948-36f7-b6a6-af2bf112ce1a.roa
File:                     265a8988-b948-36f7-b6a6-af2bf112ce1a.roa (raw, json)
Hash identifier:          gEiiku3zwjAX2w0ffqv01rwIjegw3ZIPBSeVO8JtzMY=
Subject key identifier:   CE:79:D7:0F:A5:5A:F5:52:4F:BB:D5:5D:3C:16:E4:30:D7:91:6C:28
Certificate issuer:       /CN=d02f9f9e-7a3e-43b4-992e-2ccf0b69f601
Certificate serial:       010D0C9F4328584F4987C862C7BCE25CF4476DC0
Authority key identifier: C8:5B:37:E1:79:5F:04:79:81:8A:73:37:EE:44:7F:6C:1B:37:91:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/265a8988-b948-36f7-b6a6-af2bf112ce1a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     197696
IP address blocks:        2607:e080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:c8:62:c7:bc:e2:5c:f4:47:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02f9f9e-7a3e-43b4-992e-2ccf0b69f601
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0744b730-276d-4156-b96f-aef0d8f21a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:7f:22:87:bf:72:5a:c5:5b:bd:25:46:67:
                    09:04:f6:27:f4:64:86:14:4b:0c:e3:59:51:19:8c:
                    fc:1f:83:e9:c8:5a:21:cc:19:c2:54:a5:56:2f:df:
                    ae:5f:3a:33:4c:20:19:23:42:87:5e:51:01:92:4c:
                    62:96:4c:94:cf:39:dd:67:4a:ef:4e:9a:e4:54:7f:
                    81:44:aa:0f:02:45:61:a1:6b:62:d9:a7:59:bf:8c:
                    75:40:e2:af:6d:88:7d:cb:88:2e:70:35:a6:fc:70:
                    0b:33:7f:f9:7e:4d:c7:cc:46:3f:f5:fe:d6:9a:c5:
                    92:fd:64:65:da:41:40:d8:61:63:e7:d0:bf:f0:91:
                    40:83:c0:79:a3:d6:16:c5:b4:82:49:00:cf:89:9b:
                    56:80:5a:d4:d9:00:23:e0:eb:e5:35:cb:b1:99:15:
                    2b:30:5a:89:61:21:89:8c:61:cf:6e:6f:eb:cb:18:
                    0f:58:36:66:89:2c:5a:93:86:00:11:ac:a0:89:39:
                    58:2d:c1:b6:c9:98:58:06:59:7c:68:68:80:b9:7e:
                    09:6a:1b:02:34:8e:de:1e:d6:86:a6:f1:07:cf:25:
                    d3:96:63:00:25:c8:f9:cb:91:d8:ef:42:83:51:48:
                    87:4f:f0:36:14:aa:04:dc:f5:7c:ff:a9:36:15:37:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:D7:0F:A5:5A:F5:52:4F:BB:D5:5D:3C:16:E4:30:D7:91:6C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/265a8988-b948-36f7-b6a6-af2bf112ce1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5B:37:E1:79:5F:04:79:81:8A:73:37:EE:44:7F:6C:1B:37:91:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:83:53:a0:b8:27:44:fb:ee:15:f2:4e:d9:fa:46:dc:76:06:
         00:7f:75:6d:52:1c:61:82:25:40:73:3b:3a:18:ad:04:53:ee:
         79:02:77:de:3a:c7:a1:1b:09:26:df:a4:c8:91:43:04:2b:3e:
         59:58:63:de:2f:02:a3:30:6d:82:68:eb:13:db:00:25:12:e0:
         9b:40:56:f6:58:54:6f:75:75:3a:18:8f:35:a1:e0:a2:c6:ca:
         fe:10:c7:b5:f0:bb:5f:09:eb:d6:6d:ab:d8:3b:20:c5:97:54:
         83:a7:f2:a4:a8:8b:c5:c6:71:0d:34:7d:a9:ee:97:a1:2c:28:
         9d:07:c4:5a:96:9c:53:e1:e0:be:b3:fe:a8:83:9f:aa:7c:1a:
         72:5b:02:19:b6:31:4b:4a:12:bc:ca:77:42:88:79:86:5f:dd:
         fe:7b:c7:40:34:62:fa:a1:4f:d1:09:48:91:f1:63:e8:aa:53:
         be:a5:ec:7a:ac:79:8a:f4:a0:a3:f6:6c:77:a6:5e:e1:1a:8e:
         f8:3c:5d:0c:a9:19:0a:86:38:11:ee:89:05:0b:12:f6:f7:8c:
         52:64:26:f5:0d:d3:be:0a:6e:45:b5:5f:1d:2d:1f:40:4b:5d:
         e6:a0:d6:67:ac:13:70:7d:d0:5a:07:f5:b5:09:b8:b9:7e:66:
         88:ec:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:28:30 2026 by rpki-client