Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5dff1f97-4f6b-3c14-910a-0209f09a64d1.roa
File:                     5dff1f97-4f6b-3c14-910a-0209f09a64d1.roa (raw, json)
Hash identifier:          YYMR7aAq5B+ZGheHwdw9nloMXVpJIL+J2OQxfdc6+BI=
Subject key identifier:   5B:E9:5D:1A:DF:3C:3E:67:86:14:80:9A:3D:BB:11:3D:BD:DB:90:77
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F14678BD651AD0F6B7E4279C0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5dff1f97-4f6b-3c14-910a-0209f09a64d1.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        2607:dbc0:c30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8b:d6:51:ad:0f:6b:7e:42:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=5a21c9a1-3452-4654-9650-da995711c6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:fc:7e:a6:a6:14:40:fa:ff:84:e7:41:e4:
                    5e:6a:94:6b:c1:89:73:d1:ef:f1:aa:bd:38:29:40:
                    22:91:90:e4:ab:87:d6:76:ff:ca:0c:1b:5a:9e:6a:
                    7a:ee:10:80:5f:26:ec:6a:8d:94:47:11:34:bf:80:
                    1a:b8:ee:aa:67:10:fe:9e:c5:c7:f8:8f:e2:fe:5c:
                    e6:b6:81:2e:dd:29:10:c8:b6:ac:2f:1c:97:54:75:
                    98:2d:8f:96:f5:d6:14:fb:32:1e:a9:be:d5:88:8d:
                    9a:27:29:04:d0:45:f0:41:04:9d:a0:91:7c:6e:85:
                    f2:13:94:2c:f7:26:e8:7f:e3:6e:cc:15:0b:ed:66:
                    9a:e3:3e:da:aa:84:cf:ba:23:2b:94:45:fd:79:15:
                    dd:2e:70:92:e3:0d:22:1b:b2:2e:9f:1c:ec:0d:0b:
                    bb:1d:40:b5:58:bf:bf:de:cb:a3:c3:73:ad:28:86:
                    db:65:aa:69:ce:70:7e:0b:77:3f:f4:52:78:1e:f5:
                    7f:21:3e:98:36:ed:61:8e:fa:42:a4:69:41:6c:a2:
                    39:c0:de:35:28:eb:70:f7:2f:a2:cc:d9:d2:3f:c0:
                    56:52:c5:e5:e8:53:ec:e5:b7:10:e3:e4:80:09:34:
                    69:ac:2b:a6:88:ef:87:79:34:eb:be:1a:e3:91:94:
                    93:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E9:5D:1A:DF:3C:3E:67:86:14:80:9A:3D:BB:11:3D:BD:DB:90:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5dff1f97-4f6b-3c14-910a-0209f09a64d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:c30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:82:95:f0:ac:7d:25:cd:70:8e:f8:db:ba:59:fa:84:fd:a2:
         bd:2b:7f:4e:48:67:4e:18:34:25:33:91:69:90:ec:09:99:3b:
         ab:f4:17:04:7d:a7:d0:58:a0:a2:26:57:17:39:67:99:6d:65:
         08:86:75:13:e1:4c:6f:dc:8e:08:da:17:37:0c:40:49:68:a1:
         8d:79:d2:4b:a0:24:2d:fa:83:95:b8:5f:93:bd:c1:74:98:da:
         e4:68:23:2b:46:e4:c0:c4:53:91:bb:f5:e2:8f:6e:94:03:c7:
         6a:34:a6:27:be:6d:83:33:c2:9f:f8:91:97:12:df:5c:c6:4f:
         0b:96:02:07:c3:8e:9b:fb:dd:e5:ce:d5:54:b4:08:68:44:0f:
         c6:0b:51:ba:97:18:17:ad:e9:88:e5:c7:ac:90:11:92:c2:df:
         4e:9c:2d:4e:f2:08:52:36:4c:73:01:46:d1:6a:74:06:40:fb:
         cd:ef:0f:e0:4d:4f:be:c8:dd:f5:46:fa:d1:f7:de:54:0f:04:
         8a:5a:70:a9:a6:c8:65:8a:6c:8e:5b:2c:8f:f7:51:25:f6:90:
         4e:f8:1f:93:d4:32:8d:fe:94:39:1d:41:9d:64:b3:4a:fb:b3:
         ef:e7:93:fc:92:19:cb:f2:d3:f3:2f:1e:24:89:5e:e2:5a:e1:
         f3:02:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 01:24:07 2026 by rpki-client