Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/f1f8f45b-2bec-3b68-9355-111fcc083852.roa
File:                     f1f8f45b-2bec-3b68-9355-111fcc083852.roa (raw, json)
Hash identifier:          PZHnCxyJ0Be7+2hgZFmTGslDyTiGgMg7nwmuae3SDv8=
Subject key identifier:   8E:DD:03:98:02:BB:78:A8:F9:F6:E5:DA:13:56:5F:45:07:C9:32:84
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F23C2556B0254D2ECA456DD40
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/f1f8f45b-2bec-3b68-9355-111fcc083852.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54641
IP address blocks:        2605:f400:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:55:6b:02:54:d2:ec:a4:56:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=b2cd2ac2-994a-4878-8112-3bed88f47331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:f7:28:f1:91:49:76:17:c7:5f:71:df:30:
                    bc:f7:e8:30:d0:1e:28:71:1a:cf:c2:a9:03:af:78:
                    88:54:e9:94:3e:bb:f8:14:b5:1b:54:46:05:55:8d:
                    23:7e:8b:1a:ab:5b:8c:ce:ea:d6:db:d4:40:57:0b:
                    0a:75:73:5c:6d:99:f7:b3:06:67:19:a8:47:40:2e:
                    00:43:ee:7a:4a:67:3f:54:66:66:01:a2:5f:c1:92:
                    12:e4:ea:b1:45:82:64:40:0d:11:7b:91:cb:13:06:
                    b0:76:74:8d:ba:e5:b1:44:36:15:3a:38:18:87:3c:
                    64:9f:e9:ce:e0:0c:6a:bb:84:e1:20:c2:11:fa:e2:
                    2b:8c:45:bb:fa:84:48:8a:5b:3e:9b:44:e6:ba:7d:
                    71:02:36:1d:3c:6b:cd:b8:41:8f:0f:97:e1:20:50:
                    71:f2:db:f5:e3:71:8d:12:c1:e9:44:bf:85:33:62:
                    81:25:2b:71:19:47:ea:70:3e:84:47:44:53:f2:af:
                    56:09:7c:73:db:74:57:59:d0:74:f4:6b:08:40:3c:
                    18:3e:0a:ad:c2:db:56:7d:19:e2:41:20:cb:6b:95:
                    8f:93:5e:2a:bc:90:a9:79:ae:38:9a:33:a1:12:af:
                    2d:7a:31:49:56:fc:5b:20:25:a7:bf:7f:29:a4:17:
                    8b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DD:03:98:02:BB:78:A8:F9:F6:E5:DA:13:56:5F:45:07:C9:32:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/f1f8f45b-2bec-3b68-9355-111fcc083852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f400:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:5f:cb:7e:8c:e2:21:4c:1b:1b:2f:5e:23:3e:21:bd:71:f3:
         66:69:68:ae:e5:5c:d3:99:ec:94:5f:53:13:61:36:f8:53:b5:
         16:53:c0:57:14:4c:c1:b1:61:91:52:cd:78:a6:00:5b:1c:22:
         62:f4:0a:bf:f7:e9:97:f1:2e:44:37:3f:e1:90:82:05:7b:d2:
         2d:d3:6f:39:5d:24:b0:a3:bd:92:5c:d7:34:d0:bb:0b:77:17:
         5b:72:bb:66:2f:e3:2d:d8:47:9b:80:8b:07:d2:e7:16:2d:30:
         4e:3d:8a:74:1f:92:9d:6e:01:35:da:b6:87:4a:2e:a5:1d:f0:
         fa:4c:92:3d:98:1e:c9:ce:0e:36:c6:f1:7b:79:31:ec:8f:d0:
         1a:53:c3:ff:70:8e:ff:32:a8:84:ba:99:2d:65:ed:9b:71:44:
         42:61:59:b4:ad:21:0f:eb:89:48:68:8d:91:bd:d1:71:42:e5:
         8c:7d:51:45:dd:70:1f:ea:f7:a3:0e:ec:be:7b:8f:a4:04:5e:
         27:c5:23:70:7f:bb:9f:bc:4b:62:48:a4:c0:d4:9a:79:43:cd:
         e8:11:48:e0:dc:a6:e9:b0:27:74:cd:83:f7:57:a3:2f:1a:a1:
         ae:2a:07:39:22:00:95:93:43:fe:48:53:4c:04:80:ef:39:fa:
         75:88:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 00:17:09 2026 by rpki-client