Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa
File:                     e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa (raw, json)
Hash identifier:          QEeFeWL7kA0y3KkJ2y+/hUtuvMD4UzeOJkpbE3xIYNo=
Subject key identifier:   31:85:BF:41:BB:DF:B4:E1:12:63:76:E5:91:5F:57:35:41:C7:AB:1F
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584F71EDA70ED6073F9D73ED2A40
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     139358
IP address blocks:        2602:f96c:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a7:0e:d6:07:3f:9d:73:ed:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=e3303673-803b-49cc-84e9-878f5b143d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:f2:d7:ba:5a:14:72:67:a6:e5:74:71:ba:
                    3c:f3:06:db:a1:0b:6e:4c:92:e4:e2:4d:26:bb:cc:
                    db:0d:14:4e:21:49:5e:0b:c8:8e:19:eb:d1:8e:48:
                    72:43:ca:9d:be:3f:38:10:c0:cf:75:e6:ff:67:7e:
                    83:8e:6a:2e:dc:3f:b5:fa:e7:cd:26:3a:e7:57:00:
                    6e:3d:78:7f:a3:e9:b4:46:26:59:4b:1f:fb:3a:5e:
                    e6:40:d5:5f:9c:ec:47:68:26:00:2b:ee:06:24:58:
                    6c:2e:37:d2:38:b9:b2:31:52:7e:94:1d:52:ab:0b:
                    e8:5e:b7:7d:0d:da:71:15:f5:92:6b:af:b8:69:61:
                    20:83:c8:f0:6f:f8:63:98:b5:57:15:c2:a5:d0:33:
                    ac:5a:1b:c9:2d:f3:87:6c:ff:eb:09:d4:29:62:d4:
                    85:97:de:9b:6e:ba:8c:dc:de:22:bd:fd:a9:7a:c6:
                    12:78:76:2c:29:e4:5e:5d:e2:1a:5c:e6:12:f1:8d:
                    87:b4:2f:8e:28:99:4b:a6:b9:83:2e:fe:a9:f1:91:
                    f0:82:01:18:21:6f:ad:46:4e:60:53:43:fe:0b:4b:
                    e7:58:da:1d:3a:14:55:8e:7b:15:b1:6f:5c:82:c5:
                    11:c0:25:24:97:91:7f:e3:bc:b3:99:bb:a1:0b:04:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:85:BF:41:BB:DF:B4:E1:12:63:76:E5:91:5F:57:35:41:C7:AB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:66:d0:14:9f:79:22:82:e7:2c:23:02:e1:36:99:be:da:bb:
         f4:80:32:55:02:ff:08:73:3a:53:f9:09:bd:4c:0d:95:06:34:
         1e:3d:64:de:57:db:f3:29:39:31:ac:0b:54:78:a4:d9:1b:f0:
         5e:36:d8:8e:93:67:1b:a3:8b:0b:3e:34:4a:06:06:38:d8:5b:
         4c:cd:bd:f6:a1:c3:29:46:a4:1a:d5:52:8c:04:e4:b8:23:b8:
         04:cc:b4:ab:9b:76:cf:b9:51:e4:a1:c6:be:c8:4e:f0:90:ce:
         0c:94:1a:4a:7e:2d:89:1e:7e:b4:67:47:79:29:f0:ff:48:5e:
         40:8a:1e:f2:97:bc:f2:af:9e:c4:44:07:eb:ce:e0:43:c3:af:
         f9:8a:b5:56:71:e0:03:9d:40:7e:44:73:6f:c7:a4:f6:a8:58:
         b0:cb:57:f2:22:c0:66:39:7b:ad:e7:50:15:24:3c:9f:8f:4c:
         42:f3:9e:f7:59:73:0b:4d:dd:d0:0b:23:54:44:14:e3:92:2d:
         1f:5e:05:13:39:0d:81:5a:15:ed:88:72:cf:9b:33:8a:ed:d2:
         ad:a7:22:7a:37:a6:74:0f:0e:25:5f:24:35:c2:6d:dc:5a:6c:
         0e:28:e7:17:d5:3f:52:59:a5:44:d8:42:71:5b:e2:20:65:c2:
         9d:4e:3e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:17:26 2026 by rpki-client