Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
File:                     9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa (raw, json)
Hash identifier:          XXry6qxi5bEhOTHsk6gEGqTQOKPJyxHp+HHPd/89bKc=
Subject key identifier:   06:14:C8:BD:9C:B7:2B:A9:49:96:91:A7:9E:90:97:AF:94:0E:E7:AD
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584F63F818BFB4712C40CA082500
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     36734
IP address blocks:        2607:5100::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:18:bf:b4:71:2c:40:ca:08:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=43abc3d4-1a2a-4b87-9265-619a163b99c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:9a:00:dd:b0:6a:eb:7c:4e:1d:db:65:f7:
                    1d:04:3d:4f:71:32:9d:59:bd:8b:e8:d4:52:1f:04:
                    0b:fa:80:4b:97:9e:44:c1:bc:97:32:92:08:28:68:
                    5b:c0:9b:1f:5c:d1:7d:ac:32:09:5f:b6:e3:01:64:
                    23:85:b5:47:4e:6d:31:85:4d:b0:3b:3f:9d:90:65:
                    ab:64:f3:fd:16:c0:0a:66:c4:78:ac:78:00:51:25:
                    17:78:60:ac:7a:c3:e3:f5:f6:47:16:1d:b9:42:de:
                    c7:ec:77:f5:34:c1:94:1d:76:09:63:55:ad:e9:0e:
                    bd:bd:cc:f9:02:31:dc:ef:a6:74:5e:cf:a0:a4:e8:
                    5f:45:b2:58:55:aa:45:4e:ab:a0:ea:06:b1:2f:1b:
                    c8:9c:48:79:2a:44:ca:3f:50:bb:bf:71:3f:da:97:
                    7b:8d:b5:41:2e:6d:2f:65:2f:1b:00:d7:f2:90:0b:
                    84:ff:2d:9a:95:27:cb:42:36:4b:ae:38:b3:0f:98:
                    3d:1a:81:a1:1c:b0:77:a7:21:93:c1:df:90:6f:0c:
                    7b:66:90:7f:08:97:ce:1b:38:a9:48:60:23:5f:61:
                    0d:0a:f6:66:a7:f6:09:ed:af:5e:94:47:32:e4:99:
                    23:9f:b5:c9:64:aa:1d:4c:c4:c3:cc:77:9e:61:bf:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:14:C8:BD:9C:B7:2B:A9:49:96:91:A7:9E:90:97:AF:94:0E:E7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:f1:2d:b7:ac:dc:36:53:09:f9:0b:39:a9:30:76:04:f7:17:
         2f:95:87:a3:0a:fc:23:38:80:e6:a3:16:90:34:ad:0d:c2:0c:
         a8:ca:07:9e:3e:56:b2:f6:b5:dc:57:55:b1:ff:f0:f5:f8:e4:
         bf:44:57:e2:85:9e:64:b3:b4:9f:b5:89:04:ae:81:ce:e4:c5:
         7d:dd:33:f2:cd:b2:44:df:bc:be:05:00:92:49:f1:18:81:d9:
         f8:64:86:38:79:1e:df:12:8e:c3:dc:07:b0:17:9f:ce:cb:61:
         b5:4d:d5:e4:0d:a8:24:df:e4:f5:75:e2:31:b3:a2:10:92:90:
         9e:41:9e:1b:18:13:ce:04:f0:f1:d1:f2:61:43:93:8d:e0:47:
         4e:80:f0:42:7a:50:fa:18:aa:af:e7:48:db:54:68:6b:b7:7d:
         db:66:08:cf:34:e1:e4:63:e1:c8:38:36:d1:06:6a:7c:3b:41:
         f2:a3:23:a2:4f:64:cc:78:fd:53:f4:e0:4f:07:bf:ba:d4:2e:
         a5:8e:1e:57:5d:a6:35:ff:c6:13:e8:2d:a7:12:20:b7:37:e2:
         60:3c:f1:9e:b5:cf:79:ec:3a:af:4d:c5:aa:b9:0e:25:d0:bb:
         6d:98:4e:96:9e:47:e4:50:1c:31:22:a1:d3:c3:8c:e4:c0:dc:
         c5:6b:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:26:54 2026 by rpki-client