Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa
File:                     a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa (raw, json)
Hash identifier:          iaB6JRjM2Ey0b5gV+NmvS6qUZxri1mTd6EVLkDMj7j4=
Subject key identifier:   6B:E0:D8:57:1E:49:BC:ED:26:AC:1A:67:6D:A2:8E:69:90:AD:59:D5
Certificate issuer:       /CN=60e6a30d-f63a-493d-8227-28d94c142383
Certificate serial:       010D0C9F4328584F2957AE3D1D638182009DCF80
Authority key identifier: 3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     19163
IP address blocks:        2607:b340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ae:3d:1d:63:81:82:00:9d:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e6a30d-f63a-493d-8227-28d94c142383
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=959be8fb-bd3a-4f49-8c72-9750dd84fbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0b:07:3a:f2:6b:7e:7b:3b:63:e3:03:c2:1f:
                    a6:b7:27:be:79:06:29:c6:b9:3d:e9:33:cb:3f:52:
                    e2:e7:06:43:b5:67:cc:0a:cb:e6:08:22:86:fa:af:
                    bf:56:c2:e8:ca:e2:8e:9e:27:1e:25:1e:03:f3:72:
                    15:55:ad:7a:22:4c:51:41:d9:49:a9:d9:84:ef:5d:
                    e6:e0:4b:31:04:48:f4:a7:e4:8a:87:12:f2:1b:5d:
                    c7:a3:dd:16:cd:87:ab:79:2b:16:83:d0:26:ed:37:
                    76:d0:09:fa:4c:ba:08:16:aa:98:e7:0d:de:ca:10:
                    20:45:fc:78:7d:a4:94:a1:69:0a:5e:3c:23:01:73:
                    c5:1f:14:35:72:c4:cc:34:c1:1e:b4:52:1f:b6:52:
                    78:99:8a:2a:c6:3f:5c:f4:9e:c6:6f:19:0b:82:8b:
                    6b:aa:01:df:78:53:36:ba:b9:ea:a4:55:9e:af:c1:
                    c2:35:93:0b:c4:15:9c:d3:60:fd:26:ca:e0:4a:67:
                    ab:45:9e:41:56:b4:39:37:46:26:b6:69:fa:4d:18:
                    7d:ff:ab:91:13:c7:aa:8f:90:15:64:dd:5e:dc:21:
                    a1:be:72:92:6b:68:46:ce:48:70:02:20:ce:96:f5:
                    f3:07:5b:44:cf:4b:bc:f9:93:2e:7d:45:57:94:66:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E0:D8:57:1E:49:BC:ED:26:AC:1A:67:6D:A2:8E:69:90:AD:59:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl

            X509v3 Authority Key Identifier:
                keyid:3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:01:fe:a7:61:ac:89:b7:30:ed:6d:7a:fd:e0:c4:47:a9:eb:
         8f:66:e2:47:a5:21:65:0a:10:12:a4:da:de:90:bb:3a:cc:b2:
         eb:41:72:31:eb:a1:18:9b:94:f6:48:6f:71:54:4c:ef:f4:5f:
         a5:bc:3d:35:9a:7d:ce:7f:d7:4d:a1:5f:3f:c9:04:10:e5:89:
         03:65:82:6a:60:c4:ef:f7:e1:93:1e:17:6d:20:ac:1b:0a:af:
         1e:04:51:55:ad:27:a1:e5:b5:b0:81:8b:02:d4:19:e5:38:d0:
         ee:73:03:91:21:74:39:51:e0:f1:13:67:d3:a7:3f:94:68:a8:
         db:75:5a:cb:ac:5a:9c:a4:dc:b5:8e:aa:73:26:53:c0:9a:c7:
         15:51:59:14:ec:ca:70:de:bd:f7:10:92:07:29:ea:59:f6:aa:
         2b:df:ca:60:18:23:b3:0e:b6:17:e5:c6:74:f8:d7:bb:a5:07:
         0d:3a:64:74:42:71:bf:84:8a:5d:da:28:f5:1f:4b:38:56:6a:
         41:a2:9c:dc:ff:ca:4a:bd:b0:b4:5b:ee:a0:b0:8a:79:ed:af:
         5c:fc:e6:bb:55:8f:1e:4c:66:9b:85:6e:66:a0:db:e9:d3:72:
         37:be:95:c7:d8:21:9e:c8:1d:8e:f9:72:6c:2e:ee:ae:d1:fc:
         02:1c:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:41:53 2026 by rpki-client