Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e019b294-1ef2-3095-b192-bae0b7056e2e.roa
File:                     e019b294-1ef2-3095-b192-bae0b7056e2e.roa (raw, json)
Hash identifier:          tVqzNdY4tMijpRJ+O3s4ZF5h4wk1P7mcMrgHcrdAkm4=
Subject key identifier:   4A:21:D0:1B:5E:EA:83:9C:B6:ED:B7:5B:02:03:6E:D1:90:87:2B:3C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DFB4F382721A542FBE480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e019b294-1ef2-3095-b192-bae0b7056e2e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     3834
IP address blocks:        2605:ed00:6887::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:fb:4f:38:27:21:a5:42:fb:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=9c60dee9-7895-49ac-b6f6-d57cd0b44325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:85:5b:7f:80:19:c4:e2:29:dd:1a:33:ec:
                    4c:b1:e6:ed:fd:da:f4:9c:98:a6:13:f5:13:f0:da:
                    4b:b9:e5:78:06:e7:73:8a:0c:29:51:fa:8a:41:24:
                    f2:28:1e:b9:dc:3a:55:d1:42:21:51:0d:84:60:a8:
                    ee:40:98:ee:1e:aa:2a:17:2d:1e:3a:64:c5:4c:27:
                    1c:e9:e8:9f:a9:d1:df:f4:5f:cd:ef:68:8a:ab:3f:
                    cd:4c:fd:7f:f6:82:2b:54:b0:fb:53:87:9b:c8:11:
                    39:ae:9b:2a:4a:a9:72:97:61:82:4c:23:1f:91:d4:
                    7c:1f:6d:35:c2:10:fc:85:db:5e:65:8b:de:17:87:
                    41:ba:94:1b:7f:52:d9:93:e2:8c:9b:96:57:f9:f6:
                    b9:c4:bb:22:93:94:99:bd:99:ba:0c:0a:e0:39:a1:
                    a4:61:fb:3e:0c:bc:c3:5a:c4:4a:35:d6:f4:41:3c:
                    8a:c1:ca:2b:a0:4d:7d:c8:5d:bc:7d:93:f8:64:b9:
                    74:a1:0f:d3:af:8b:03:26:11:c1:79:63:75:ef:e2:
                    c6:89:63:cb:6d:75:b5:25:bf:fc:23:1d:96:9d:f8:
                    b7:81:1a:5e:d0:f6:8f:a6:30:be:a0:ac:a3:34:5c:
                    b4:55:7a:a8:09:c2:fd:47:97:03:87:ea:fa:7b:36:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:D0:1B:5E:EA:83:9C:B6:ED:B7:5B:02:03:6E:D1:90:87:2B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e019b294-1ef2-3095-b192-bae0b7056e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed00:6887::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:96:bb:6b:42:0f:a6:7c:33:3e:7d:27:82:0f:12:5f:63:5d:
         74:bf:ea:2c:c7:89:c9:fa:64:f8:02:ec:28:fe:f8:8b:0c:9b:
         22:ab:59:c3:e2:d1:94:bc:89:ab:1c:88:2b:52:5d:11:f3:03:
         d3:d0:f0:8c:85:69:2d:b8:00:fc:a8:68:fd:95:80:b0:f0:58:
         2a:26:dc:d3:2c:ba:47:63:3c:af:1f:40:bc:90:55:94:b5:38:
         5a:99:2e:80:2b:67:08:9c:8a:1c:08:cf:b1:b6:1a:a0:ff:11:
         10:d7:73:e4:81:ed:39:dc:8a:9a:59:ed:e4:66:7d:5a:33:c4:
         97:42:55:a2:66:dc:1b:07:e5:8f:36:d8:d9:ae:d4:a6:89:87:
         13:f0:02:ef:b0:ec:b8:2e:a1:43:98:f9:d5:9e:3c:37:b8:76:
         17:3b:b3:dd:b6:99:7f:13:43:27:54:6a:d1:c2:81:ef:84:a1:
         20:a1:a9:5f:d9:6b:52:5d:b5:7f:0c:fe:2b:f0:24:16:7c:55:
         5a:87:9f:42:ea:f9:bd:2a:7f:ec:70:ab:22:92:90:19:53:00:
         32:50:b5:37:d9:c7:ec:46:98:39:fc:80:5e:26:79:c1:e3:35:
         b0:e9:3c:74:de:6a:27:29:6c:51:bd:30:4b:be:27:2c:eb:1d:
         53:46:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:21:24 2026 by rpki-client