Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ea91aec7-ca67-38d1-8dd0-545feb17592a.roa
File:                     ea91aec7-ca67-38d1-8dd0-545feb17592a.roa (raw, json)
Hash identifier:          WyZYtIgM6XjidRiZKU9nUoy/OEb3zqNp2bp34yrwb+U=
Subject key identifier:   2A:C6:42:F7:21:7C:11:01:8C:B7:81:12:BA:09:00:91:46:93:CA:13
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F4328584F119CF6DF703DE9BD362BC480
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ea91aec7-ca67-38d1-8dd0-545feb17592a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        2605:3b80:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:df:70:3d:e9:bd:36:2b:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=ee0a0d69-fd7e-43b2-8f44-2d2b2583dcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:d4:99:31:b1:77:72:57:8a:a5:ae:20:b6:
                    a0:ef:26:61:46:2e:b8:8c:62:c6:d3:86:ba:9f:d0:
                    2f:24:a7:7a:47:a1:cb:07:79:93:15:57:49:d0:24:
                    08:09:c8:fe:3c:f0:fb:eb:87:2e:c3:af:42:37:1d:
                    c5:84:25:00:01:82:05:81:12:2c:59:aa:e2:96:a5:
                    87:70:68:57:d2:a3:62:32:4d:97:56:60:1a:b3:86:
                    0a:b5:81:23:85:a8:e0:03:6e:2b:7b:ed:ef:7a:84:
                    1f:6e:5f:32:cf:42:57:8d:91:24:98:0b:94:d6:6a:
                    8b:7f:3b:3b:16:a0:aa:34:60:7b:ef:bf:bb:31:af:
                    c0:bf:49:5f:a9:0a:e7:05:4b:66:9e:a9:ff:9a:57:
                    16:6f:f8:d2:c4:99:32:ff:cb:cf:e3:d5:39:00:78:
                    a9:1c:4f:e2:ec:4e:a4:ef:82:5c:ae:9e:16:7f:e4:
                    21:43:97:9c:fa:35:de:0d:1e:d2:8d:55:57:07:c7:
                    4d:9a:41:3a:4a:5b:ce:a1:91:94:5d:a3:df:7c:1f:
                    4d:38:24:22:0f:43:24:9b:26:d4:d3:e5:4c:f4:50:
                    fc:93:d4:6c:e9:a2:89:df:f5:0b:62:ff:cb:e8:d7:
                    b0:a3:c3:eb:c3:23:df:df:8f:04:62:c6:9e:1b:59:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:42:F7:21:7C:11:01:8C:B7:81:12:BA:09:00:91:46:93:CA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ea91aec7-ca67-38d1-8dd0-545feb17592a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3b80:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:54:ea:13:9c:b5:f0:25:5d:03:1e:ec:23:7e:cc:73:6a:
         cb:e2:b0:56:0f:bb:9a:90:27:a0:9a:e2:56:09:07:c2:c1:5e:
         40:3c:cb:d0:a7:3f:4f:28:92:ec:84:94:42:db:57:8b:6d:ee:
         55:12:7b:81:ae:36:72:36:f2:00:60:a4:b8:af:94:3d:45:72:
         11:58:9d:97:8c:b0:7b:27:71:79:d0:23:e5:b7:6e:6d:8f:2c:
         c9:ae:da:91:e1:60:d4:b5:75:38:13:8e:e9:0d:d0:47:3a:5f:
         21:ef:2e:23:7c:8d:11:15:8a:ba:e6:42:ed:84:38:bd:b7:c7:
         f4:8e:59:53:ac:3b:df:8a:7e:90:bd:22:0e:e2:a4:2e:a2:3b:
         c5:0a:2c:3b:0d:dc:5d:ca:74:10:8b:b9:56:f3:d4:11:bd:ca:
         3a:6d:1d:60:20:1a:f7:e1:fa:c2:68:46:e5:0b:5b:76:61:85:
         d5:59:dd:c8:20:3c:b6:cd:26:fa:26:0c:23:e4:8d:62:b4:50:
         22:42:7f:96:fe:2a:79:4f:f3:ee:98:7b:72:34:c0:97:00:05:
         5a:b9:1a:57:de:f0:51:55:fd:8c:e9:cc:b7:dc:4e:3a:11:8c:
         3f:e2:45:94:a7:f3:c0:dc:2b:bd:78:f4:85:2f:28:1b:18:45:
         11:2a:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:45 2026 by rpki-client