Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/6f383ffd-4b8a-3a94-893f-35d509396341.roa
File:                     6f383ffd-4b8a-3a94-893f-35d509396341.roa (raw, json)
Hash identifier:          79dM/M4o7pnEi5TkeHY1bHyS4nNBF8Og+ppELHCBAqo=
Subject key identifier:   D5:56:23:50:53:D6:79:9F:9D:AC:5D:CF:87:04:A8:E5:3C:59:D6:F4
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F4328584EABB6E3394E1D67402E7E9400
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/6f383ffd-4b8a-3a94-893f-35d509396341.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     26347
IP address blocks:        2607:f298:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:e3:39:4e:1d:67:40:2e:7e:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=633d9c35-5830-45de-a3dd-e5e72d630895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:e8:0b:fe:a4:a5:36:bd:1a:42:cc:4c:e5:
                    ba:c8:56:0c:8c:df:48:29:22:7a:35:89:00:9f:69:
                    62:e3:e7:d9:cf:62:d4:49:85:b3:50:78:0e:f5:ac:
                    b7:a3:27:3a:a3:bb:4e:c6:0b:a8:99:10:d7:18:5e:
                    c6:97:79:37:b6:12:64:ef:6b:8e:f5:e5:24:74:03:
                    cd:98:08:25:c4:a7:b9:9c:01:a8:28:69:a1:17:b7:
                    34:a1:3e:b3:ba:c1:e4:63:16:4b:20:d6:c1:e9:6a:
                    8b:00:57:da:bc:58:13:98:9d:11:ce:a2:88:92:6b:
                    2b:54:4c:a6:e7:68:fd:48:7b:4c:a7:da:81:66:c9:
                    bd:6e:84:9b:39:6c:08:68:e2:bc:5e:47:87:f5:c6:
                    18:37:cd:e0:b6:9d:0b:f3:52:9a:e7:2b:08:a7:f2:
                    1c:d3:4f:89:55:4c:fd:6d:6b:29:f3:b7:21:56:81:
                    bc:2b:a5:b9:29:96:7d:12:8e:46:9d:b4:a0:1f:37:
                    93:5c:cc:26:30:7d:15:60:8a:6b:eb:25:06:99:d5:
                    14:58:28:ff:5c:ca:97:05:95:a4:fd:7b:b8:89:80:
                    5b:ff:7e:5f:20:55:a6:50:71:e9:33:47:24:3b:2c:
                    65:91:19:5e:86:71:03:88:25:3c:25:95:62:8e:0a:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:23:50:53:D6:79:9F:9D:AC:5D:CF:87:04:A8:E5:3C:59:D6:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/6f383ffd-4b8a-3a94-893f-35d509396341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f298:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:24:7d:71:d6:c4:4c:e0:c5:df:50:c2:5e:b2:47:6c:14:13:
         1c:e4:a1:ea:50:da:8b:53:2a:a8:59:59:c0:fc:73:6b:22:0b:
         77:29:d6:34:8a:a9:2e:4f:95:7a:0b:ff:e8:94:6e:ec:4a:71:
         21:03:78:91:91:fc:40:68:c2:aa:3a:e4:c0:99:04:4c:bf:5c:
         a8:b5:8f:f3:1d:68:97:bf:83:dd:59:e4:eb:a9:a5:c6:f6:92:
         45:93:a9:b7:52:1b:f9:3a:e7:12:36:fa:cb:53:92:a7:8f:fa:
         59:f5:67:33:32:99:f1:07:18:7f:74:63:4a:bd:60:5f:ad:08:
         9f:ae:0e:45:58:a3:c0:ac:38:0c:b7:f6:f6:0d:13:54:0d:fb:
         88:a8:e5:c6:c9:dc:92:c5:d2:f5:bb:33:a2:f7:79:f8:c6:e4:
         c5:45:25:1c:1b:71:9c:ca:8f:73:b9:35:9a:5a:aa:fa:b0:0c:
         17:b1:c7:a4:41:0d:6c:15:2e:1a:37:f0:11:04:5c:f5:63:32:
         c0:5e:08:fc:cc:f5:19:56:43:c8:7f:b1:05:c3:6e:4b:0d:3e:
         da:6a:e6:33:cf:f9:d0:0b:66:64:d5:68:d1:65:6f:15:24:fd:
         09:b4:15:6e:36:ad:9d:f7:f6:73:e1:71:9e:67:58:44:b8:0a:
         30:bb:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:00:43 2026 by rpki-client