Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82195deb-266a-3197-a51b-8e2bdcc27e43.roa
File:                     82195deb-266a-3197-a51b-8e2bdcc27e43.roa (raw, json)
Hash identifier:          QH2zO03ZUc9lSpMo+ZhjjPn9Q/3n9vV19vEAhCxi4zg=
Subject key identifier:   C3:0B:EF:20:3E:01:85:9C:F1:02:48:D0:10:C4:6D:32:DE:27:63:6C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584FA1633600BBD95304A6B85D00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82195deb-266a-3197-a51b-8e2bdcc27e43.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     16509
IP address blocks:        2605:4300:3907::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:36:00:bb:d9:53:04:a6:b8:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=bdf6660c-18f0-4032-8552-95a4009623e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:76:ff:87:11:ae:40:4a:75:73:5c:f9:84:
                    40:4f:e2:0a:fa:51:a9:cf:9c:70:4c:46:27:2a:76:
                    f3:c0:02:70:9e:8f:c1:2a:48:de:2c:fc:0a:7f:8b:
                    d7:be:2b:fb:3d:cc:ee:7f:1a:39:76:73:b5:35:77:
                    07:8e:f9:b6:10:07:6f:31:f1:14:45:c3:a5:b7:6b:
                    8d:82:be:10:8a:23:28:97:4d:8e:da:c6:25:88:b8:
                    8c:41:b5:47:ae:6e:e7:5d:c9:49:1c:29:77:7e:96:
                    3f:ac:11:6c:d6:d9:d1:9d:2e:ac:86:ed:9e:db:53:
                    de:8e:b5:9f:09:7d:d4:04:35:97:7b:27:56:4a:da:
                    5b:9a:55:10:cc:ec:f4:12:a8:90:67:72:f2:d8:1a:
                    79:29:89:9e:bc:58:44:36:25:3a:71:2c:68:99:44:
                    21:3e:46:6d:6d:3c:1e:ea:54:35:2b:d3:20:82:51:
                    76:89:51:9b:c7:35:2e:a3:b9:db:25:9f:8d:1a:d2:
                    f3:55:46:fe:b6:c3:80:db:86:35:15:7f:f4:95:f8:
                    55:eb:ed:98:9b:0b:bc:7f:7b:40:89:a7:cf:6d:39:
                    1f:25:e1:ea:3d:bc:be:d9:fd:65:28:6a:2c:0d:61:
                    3d:2e:03:14:66:15:e9:15:99:31:7a:8f:7a:f1:f5:
                    62:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0B:EF:20:3E:01:85:9C:F1:02:48:D0:10:C4:6D:32:DE:27:63:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82195deb-266a-3197-a51b-8e2bdcc27e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3907::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:97:c3:b1:a6:9f:3f:bf:d1:f6:79:df:46:19:d2:80:50:
         eb:a4:97:54:19:84:f6:5b:93:c3:4f:87:bd:44:fa:65:eb:90:
         a3:b1:a0:df:8a:6d:cb:b9:57:e7:54:1d:b6:2d:1a:ab:58:37:
         2f:0f:73:8d:64:1b:8d:4c:7b:fa:b7:75:d9:59:eb:7d:9b:f2:
         c7:46:58:ce:82:34:70:13:62:29:06:d1:8e:a0:af:d7:f7:d7:
         cf:72:91:04:90:85:4c:26:d8:43:bd:a4:1f:7d:aa:9e:ae:38:
         9f:c3:0b:38:fe:7b:52:6d:b8:24:38:5e:bb:20:f9:31:2f:b9:
         7e:dc:7a:3a:75:33:5c:db:c6:c8:57:4b:20:da:77:e9:90:80:
         be:ec:fc:44:8a:00:26:50:68:50:ee:c3:18:cd:7c:f9:84:5f:
         0d:e7:52:15:91:f2:09:03:c1:8b:0b:3d:50:60:42:d9:7b:1d:
         a2:39:c3:d8:e4:c2:2d:9b:cf:e3:85:b8:8d:d3:a3:fe:31:5e:
         98:84:64:9b:11:d0:52:3b:e5:a2:1d:e5:75:e0:3a:50:fb:6d:
         46:1a:90:1a:46:e6:53:95:de:c5:62:ae:a4:4b:ad:f7:d8:e9:
         4b:4b:c3:07:c2:d3:fe:f1:25:5c:da:fe:04:1a:e4:a8:fc:60:
         ca:70:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:03 2026 by rpki-client