Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa
File:                     3765e690-a0b2-35d2-83fa-36c840834e2c.roa (raw, json)
Hash identifier:          KKExEg+BEkmMwlRCB5pBDZpHjtHvz5ccwsKH8+yVgak=
Subject key identifier:   4D:1B:CF:CA:44:31:D5:7B:8E:59:31:25:99:2F:2D:F4:4E:76:6D:07
Certificate issuer:       /CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
Certificate serial:       010D0C9F4328584F268D059E74F8CE135D42A580
Authority key identifier: EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     16509
IP address blocks:        2602:f883::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:05:9e:74:f8:ce:13:5d:42:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=c5b24c6c-d818-4c2b-bc14-535afb47f8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:11:82:b8:6e:61:55:07:2d:08:db:63:c8:
                    2a:9e:33:4f:83:fe:29:9a:01:93:cf:e5:57:b2:83:
                    5a:31:38:fa:f4:ec:55:1f:08:5a:de:61:26:6d:e4:
                    e6:18:5c:8f:d0:d2:cb:0e:a2:15:0c:f4:db:bb:1b:
                    7b:79:62:88:0f:4f:5e:a4:61:06:69:24:27:d3:c5:
                    b7:a6:ee:f8:ab:20:f4:42:5b:22:c2:67:10:ff:f0:
                    ad:18:60:cd:be:b1:17:bc:20:d1:6b:58:f7:00:b1:
                    7c:45:d9:05:70:7d:d3:35:07:d2:67:78:b7:3c:48:
                    b1:7e:b1:2b:d5:57:78:97:04:08:26:7d:f5:e6:f1:
                    9b:d9:0b:64:9e:3c:47:75:35:99:40:c7:99:37:2d:
                    15:7d:03:92:a3:ef:e6:53:bc:10:ab:a1:3c:f1:62:
                    5d:cf:20:28:7b:2f:29:06:da:f9:63:45:16:9b:96:
                    5f:66:db:e9:49:b5:5e:d5:61:62:61:d4:e6:04:6a:
                    bd:c8:8c:0a:1f:ec:d3:3f:92:e4:35:12:10:26:d6:
                    1c:da:df:b3:f9:2a:58:41:c2:80:8d:32:1a:10:5b:
                    e6:8f:0e:cb:56:70:00:d7:4a:38:e5:1b:ee:7f:e0:
                    ad:44:18:c0:ee:90:58:6f:14:7a:35:6b:0e:d4:96:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1B:CF:CA:44:31:D5:7B:8E:59:31:25:99:2F:2D:F4:4E:76:6D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3765e690-a0b2-35d2-83fa-36c840834e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl

            X509v3 Authority Key Identifier:
                keyid:EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f883::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:f7:95:72:f0:82:c5:f4:ac:f7:57:9e:7e:e7:96:b1:a3:
         5f:dd:9c:87:3d:79:4f:c6:1b:9e:9c:51:76:4c:0f:94:88:dd:
         5f:fa:04:b7:28:35:cf:ba:a2:27:14:92:e1:83:a8:da:86:d0:
         72:a7:c9:77:83:73:0b:1e:c2:6e:fc:30:b3:6a:98:f9:9f:3d:
         40:be:b3:d4:51:48:80:ac:e3:f6:96:34:4a:08:3d:90:1a:d4:
         d7:3a:bf:10:f0:b1:de:32:14:22:a8:1b:c6:bc:13:d2:f5:82:
         8a:3a:89:db:58:69:70:2d:19:a6:ac:c1:78:de:66:94:ce:5b:
         74:fc:70:9b:43:5a:b6:6c:2a:1b:4b:41:ba:14:d8:ff:b0:62:
         cd:98:f5:af:ca:1f:d4:c2:b0:0b:a7:fa:bd:1b:ab:c1:e0:ef:
         a4:d8:78:b1:49:bc:6b:8b:d6:1b:c4:8f:ad:64:35:87:e5:9c:
         f5:25:de:36:76:9c:69:17:ff:39:e5:6d:a8:32:ce:75:fe:b6:
         5b:a9:d4:33:8a:70:4d:cb:1c:2d:52:43:ca:95:6e:cf:c7:f8:
         88:d6:f0:35:97:ba:f1:8e:ac:2a:a0:de:07:54:72:34:7e:43:
         55:1a:f1:34:8f:5e:b7:42:55:b9:38:ac:09:70:65:fd:f1:a3:
         92:1e:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:33:51 2026 by rpki-client