Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/943db393-92ab-3c1d-b437-b860fcc65796.roa
File:                     943db393-92ab-3c1d-b437-b860fcc65796.roa (raw, json)
Hash identifier:          pUC7hqrcG8/xpKvCrhWVcshpfV0jc2kC+Ys6cl6MW18=
Subject key identifier:   11:AC:8E:1D:BE:D3:1A:05:3B:76:B6:AB:EE:3B:37:3F:09:8B:5A:E4
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F14678E9B5E8D3D9E9EAF4200
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/943db393-92ab-3c1d-b437-b860fcc65796.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        2607:dbc0:c00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8e:9b:5e:8d:3d:9e:9e:af:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=6e259359-4cce-401b-9b24-0131b7e3005f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:92:45:7f:ac:a2:2d:c6:91:d5:7d:f8:0e:
                    e2:f0:ce:4f:44:be:1d:b1:f8:e7:a6:58:dd:a5:ba:
                    0b:2d:c9:dc:a5:f6:7c:90:55:20:96:25:37:85:4e:
                    2e:33:e6:c9:1f:07:9d:6f:fd:ac:5c:2b:7a:66:68:
                    84:27:14:0b:eb:65:b0:f7:c2:68:b7:c8:4c:e4:9a:
                    c0:27:86:05:49:e4:e5:a2:5f:a1:4c:ef:0f:91:2b:
                    ce:f8:a7:3e:24:17:50:c1:ac:23:c2:61:66:30:5d:
                    62:1a:76:d4:b4:bd:f4:58:53:39:e6:3d:fb:6a:91:
                    f3:31:6a:c6:3c:d4:4c:71:d9:32:39:a8:72:3d:fc:
                    84:37:0e:83:2d:a9:83:89:76:e6:4b:c9:cf:23:30:
                    cc:42:29:5c:76:16:ab:df:6d:b1:14:61:65:0a:0b:
                    36:8d:a5:e6:09:00:8c:fc:af:c9:df:2a:9a:f0:fe:
                    5c:46:dc:3d:2b:41:49:77:47:3d:58:a2:25:e9:c8:
                    69:eb:d4:95:e6:7d:bd:fe:7a:7f:35:0c:e7:4e:45:
                    bd:f1:0c:98:8e:89:6e:a6:86:a2:d9:09:f2:5a:bc:
                    a3:7d:a8:cd:89:5f:94:77:bf:f6:b7:96:14:f9:12:
                    15:74:c5:45:cf:56:a7:f3:71:d7:e7:d0:69:69:5b:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:8E:1D:BE:D3:1A:05:3B:76:B6:AB:EE:3B:37:3F:09:8B:5A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/943db393-92ab-3c1d-b437-b860fcc65796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:c00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:09:0a:f0:b0:d0:60:59:e0:eb:2c:ee:30:45:15:9e:5b:
         fb:0d:47:10:de:b8:e4:5e:1f:bc:24:af:d6:f6:2f:0c:c1:76:
         45:3e:b6:16:72:ab:00:a9:01:19:04:7c:8e:4d:fc:12:5f:65:
         8f:d1:9b:2d:7d:2a:a2:ad:fa:55:14:1c:9b:f8:f0:bd:42:35:
         6d:3f:f2:3b:2b:9c:be:c9:d8:6a:dd:27:f6:94:6b:0a:1d:6f:
         33:81:a6:15:e0:19:b9:0a:78:31:9f:61:98:7a:00:ef:c0:87:
         32:3a:cd:c7:83:4c:dd:91:da:c3:f8:6d:e5:b1:0d:cb:30:63:
         c9:28:2a:81:97:95:88:f0:aa:7e:1d:23:b1:36:fd:6a:21:c3:
         c5:8d:61:76:30:5a:1a:c8:af:8e:10:02:ef:8d:b3:8b:46:29:
         00:6e:30:7b:3b:d6:86:f2:a8:fb:04:32:90:f5:e5:34:a8:88:
         b7:93:49:84:9a:56:b6:a5:82:37:23:8e:d7:5f:50:ae:9a:02:
         07:c9:eb:d4:e9:e9:f9:13:f0:c2:7b:9c:41:ea:bd:1e:a4:4d:
         e7:d4:fe:4a:72:58:9e:5c:11:4b:1f:37:6e:0f:2b:54:c6:b6:
         de:05:ff:21:2f:d4:e2:d6:fb:dc:a5:4e:f7:8c:af:80:09:92:
         5e:d8:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:54:13 2026 by rpki-client