Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa
File:                     b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa (raw, json)
Hash identifier:          C/jXplyD+bEk4WEZ6iKtov++gIVb+gOW0vQQni18fzs=
Subject key identifier:   28:7E:8D:2E:55:F5:AF:AC:3C:96:1C:9E:2F:A7:51:BF:01:13:76:22
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584F49740B126F4DEE093B0E2240
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400780
IP address blocks:        2607:13c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0b:12:6f:4d:ee:09:3b:0e:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cde80bee-c5ef-4634-b2a5-328e3353d36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:99:f2:b7:27:e6:72:dd:5e:0d:74:96:5d:
                    b1:d0:52:5f:87:5e:d4:7b:1d:73:9f:90:c9:39:db:
                    14:c3:b6:88:51:3d:a0:3b:a2:78:24:f7:dc:79:e3:
                    64:a4:0b:2a:43:2e:e2:98:5c:36:f3:cb:94:12:1f:
                    eb:9f:3d:7b:7d:51:d6:f6:eb:92:52:ad:c9:9a:d0:
                    7f:32:65:73:18:73:77:9b:e3:2c:df:bf:9b:37:85:
                    68:b9:e9:34:f7:5f:ff:02:a0:11:46:dc:7c:55:57:
                    9b:db:5d:a9:50:82:ca:8c:1b:66:3c:cf:3e:65:0b:
                    24:4a:f4:cc:ae:cc:76:a0:4f:36:93:b4:e2:bd:d4:
                    b4:db:bc:ae:22:32:57:34:23:de:7d:d1:ad:33:41:
                    34:65:d1:5d:6c:55:14:c6:99:35:2f:d3:0e:c5:96:
                    19:7e:5d:ab:84:be:ae:1f:ac:e2:9e:78:dd:22:53:
                    34:20:57:6b:d3:8e:99:cd:e6:6a:43:e5:89:63:a5:
                    10:e8:36:4d:f0:cc:c3:d9:6e:db:ac:15:ae:12:70:
                    05:d7:cb:9b:3f:f8:57:bc:b8:52:91:79:21:c9:4b:
                    81:47:42:33:c1:cf:0f:40:13:e2:84:97:c2:7b:25:
                    64:8a:77:32:d4:eb:ff:12:c4:c8:d6:3c:4f:c2:e8:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7E:8D:2E:55:F5:AF:AC:3C:96:1C:9E:2F:A7:51:BF:01:13:76:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:13c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:05:99:20:4e:6c:23:37:38:d6:a0:07:d0:71:f8:0f:c8:b1:
         28:53:11:31:b9:ff:ee:93:ab:1d:8a:3f:99:21:9c:37:13:94:
         78:53:05:5a:e4:03:88:a6:67:3f:3a:99:6d:97:db:07:54:9e:
         ee:1a:2f:d5:b6:71:d2:8c:9e:28:e9:59:8a:9d:61:85:46:c8:
         c1:3c:65:28:f2:e9:a9:b0:cc:dc:14:19:7a:c6:88:34:7b:ea:
         24:26:72:aa:7b:0b:b7:6e:6a:5e:03:17:10:6c:65:fd:c8:40:
         8a:91:c1:2b:65:ec:07:a9:07:9a:3e:54:3b:11:d1:ba:c8:87:
         c8:72:72:c8:a6:a1:ee:2b:b8:f0:89:f3:b2:1b:38:b0:a4:3c:
         a4:50:05:d4:92:ee:96:4e:4c:d1:d8:34:06:e3:28:19:a8:24:
         16:4d:0b:76:c2:af:97:5e:04:e5:be:4b:94:53:9a:51:d9:0a:
         36:14:50:75:8e:d6:88:85:4e:28:9c:47:e7:ad:12:88:15:86:
         a7:bb:d4:47:c5:17:6f:67:a2:de:b8:2a:d1:af:59:90:9a:26:
         c8:6b:1f:35:d0:88:bb:0b:ee:31:6f:a8:50:7b:b7:70:b8:c9:
         d5:61:af:cc:3c:48:c6:6a:6b:c6:14:5b:f8:ba:ca:d2:44:d9:
         f3:89:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:03:46 2026 by rpki-client