Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/eca10e9e-134a-3754-87cc-2a67de6c534b.roa
File:                     eca10e9e-134a-3754-87cc-2a67de6c534b.roa (raw, json)
Hash identifier:          hWnrUa+vTVSstNIfcyFDnl+HbhqSkKriqiv7krJLyTU=
Subject key identifier:   EB:59:17:91:3C:8C:06:F4:51:D2:B1:BC:41:F0:97:66:31:72:4D:D0
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EFF7769EBAA1C5D34C0CA4380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/eca10e9e-134a-3754-87cc-2a67de6c534b.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2605:4300:e602::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:69:eb:aa:1c:5d:34:c0:ca:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=a6ac25b8-b34e-49bd-ae92-2eeeae3c6e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:29:4e:6c:fe:de:50:88:97:c3:92:72:b9:
                    fe:59:39:fd:12:20:1d:d3:39:73:26:51:c6:18:15:
                    2a:66:4a:1c:10:00:a1:d6:27:10:11:7e:78:b7:d6:
                    8d:cb:32:e2:41:15:80:da:dc:84:c9:12:dc:ed:3e:
                    ec:aa:96:ea:26:5c:00:6a:ce:c2:72:03:06:6a:e4:
                    d3:63:40:85:0a:83:be:53:a7:9e:9c:f9:aa:8b:ba:
                    c1:b4:5c:41:9b:c9:37:3a:17:83:12:e8:91:1a:2a:
                    fc:18:94:74:56:5a:be:1c:8f:1d:2c:c5:2c:20:f1:
                    f7:e8:66:fc:bb:7d:9f:aa:a6:53:68:77:2b:69:b7:
                    10:cf:55:16:ca:9c:6e:6e:44:48:c9:d5:ac:18:52:
                    ef:a1:90:67:a5:4d:0f:5f:e5:51:46:cf:66:e3:af:
                    e7:5a:d8:01:c5:1b:7e:eb:45:48:5f:91:8e:45:47:
                    25:5a:69:82:4f:59:ea:ea:2b:3c:21:93:1e:d0:f9:
                    c2:aa:5f:ce:d5:10:63:b7:79:dd:db:42:e0:16:17:
                    65:9c:59:66:18:1d:dd:c8:35:4b:f8:d9:8f:38:38:
                    89:ba:b4:44:8d:e2:55:ee:63:98:aa:bd:1b:37:ab:
                    f9:b7:a3:ea:dc:59:4a:bc:53:f9:02:37:de:06:fb:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:17:91:3C:8C:06:F4:51:D2:B1:BC:41:F0:97:66:31:72:4D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/eca10e9e-134a-3754-87cc-2a67de6c534b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:e602::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3e:59:0a:2f:bf:ac:f0:85:7d:41:23:13:98:3d:78:d3:3e:
         65:e1:a0:9b:82:b1:81:fa:99:0e:9f:2e:71:9a:9b:b1:c2:05:
         0c:8e:fc:00:27:99:c1:89:7d:6e:b9:39:57:d1:3a:84:85:48:
         31:45:e4:58:5a:2a:22:3e:fb:59:e9:cd:cd:7f:ce:88:a7:78:
         41:cc:70:33:68:db:9b:49:13:98:69:d7:7c:4c:bb:aa:75:f0:
         be:fb:2e:18:57:d4:68:a0:8d:02:d1:d5:5c:98:27:bc:a8:78:
         52:09:75:fe:a2:db:fd:f7:85:a2:bd:d2:34:e0:7d:dd:c6:cc:
         64:28:47:de:95:22:9d:6a:66:11:dc:c2:ac:45:e3:5e:cf:95:
         e4:84:1c:61:b7:47:1b:e1:7d:ab:e5:30:a5:2c:fd:4f:4c:c5:
         8a:61:b6:14:97:95:ef:9a:79:28:54:cc:9b:3e:67:af:0c:4e:
         5d:1b:e8:17:4a:dc:9a:6a:7e:b7:a7:cc:11:95:0b:68:38:8d:
         36:e7:ad:39:8e:fe:36:08:28:ac:68:25:87:32:02:43:e4:a5:
         5f:66:a0:d1:4c:c4:47:fc:65:b4:da:42:03:fd:5c:a6:36:fc:
         eb:bb:38:ba:1c:14:44:f9:c6:30:ef:9c:70:ad:e2:89:df:bf:
         71:cd:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:01:49 2026 by rpki-client