Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/7ee1011e-192f-3a73-8d30-d36a61096104.roa
File:                     7ee1011e-192f-3a73-8d30-d36a61096104.roa (raw, json)
Hash identifier:          EJ8Lrh8DcKnBYUYbYx2fptxaUpiaC7YDU6IHgj5Hst8=
Subject key identifier:   E2:58:7C:6F:EE:D9:F2:80:DC:6A:B8:8C:88:A6:37:79:58:3C:29:B1
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584EDC9206D3DFE1F7F702ACC380
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/7ee1011e-192f-3a73-8d30-d36a61096104.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2620:1f7:c023::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:06:d3:df:e1:f7:f7:02:ac:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=85f9b485-01ab-49c5-b29a-0bd0e50ab7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:50:8c:05:98:2f:b3:83:af:ea:b7:b3:ce:
                    b6:26:99:3d:a7:bc:3d:60:e0:99:28:0a:9f:94:d7:
                    ff:7f:c0:3a:a5:16:4a:e9:12:88:d1:f1:02:8a:72:
                    1e:57:73:b0:fb:2b:da:e1:a6:ca:e8:7d:54:b5:14:
                    09:56:03:8b:2b:4b:53:31:e0:b0:01:00:73:c6:43:
                    d5:a9:78:7f:91:79:c3:e0:f1:ef:8a:a0:42:61:ee:
                    72:18:27:a9:8f:64:e7:a8:c7:0e:9e:8c:4b:88:d2:
                    d0:b3:02:ef:83:12:b4:70:8d:3d:7f:cc:5e:2c:e2:
                    85:34:ab:74:f6:bc:9b:dd:2b:be:b0:f7:35:84:02:
                    98:29:82:fa:18:14:e4:b5:86:ec:04:ec:a3:04:52:
                    05:84:bc:fb:63:36:c7:99:85:2d:51:66:75:53:a1:
                    25:04:3f:e1:91:b2:7e:3c:af:f3:c1:4a:96:25:9c:
                    e6:13:af:9d:07:c4:86:7d:27:db:6c:72:61:11:32:
                    07:2d:a5:50:5b:22:12:6f:03:05:82:0f:21:0f:40:
                    97:32:5e:c7:5b:25:a1:8b:9e:6b:06:7c:28:3f:0d:
                    4b:e1:9b:51:7d:93:90:9a:4e:9a:0c:44:d2:fb:38:
                    6e:b3:0d:7d:14:b4:1a:85:93:dd:3f:ff:4d:85:dc:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:58:7C:6F:EE:D9:F2:80:DC:6A:B8:8C:88:A6:37:79:58:3C:29:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/7ee1011e-192f-3a73-8d30-d36a61096104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:5e:d5:f7:e2:d9:45:04:69:48:ba:13:2d:e4:02:c8:29:
         40:0e:68:35:61:07:71:5e:6c:b9:45:79:08:c1:b8:71:3c:48:
         4a:23:c5:f1:a0:87:be:89:e6:81:fc:9f:24:de:c7:b7:19:46:
         e7:f4:af:96:9b:d6:8b:72:38:b8:89:0a:06:29:4c:d5:c2:49:
         5f:e1:70:ed:bf:60:de:90:e1:4d:e7:e0:2e:30:ba:9f:90:89:
         5a:55:8d:61:c8:2a:f6:72:bf:58:f2:39:54:c4:67:85:74:bc:
         09:e3:67:2e:eb:e6:d1:a1:52:9c:13:63:7e:8a:86:1d:44:8c:
         15:48:d3:80:95:fd:43:25:ea:ba:8f:0a:90:b5:80:e9:fd:6d:
         2e:23:6c:4d:15:07:cb:70:60:cf:0d:12:17:91:b9:8e:17:52:
         86:68:bd:47:82:59:4d:44:3b:3a:c6:a5:6e:4c:b5:59:44:96:
         70:68:02:58:e3:9a:cc:dc:d2:38:34:16:4f:89:a7:3a:9f:55:
         c0:b0:72:fc:dc:14:30:af:e4:27:6b:a1:9b:56:a2:4e:9e:43:
         0a:f3:c7:11:a7:4f:f0:c7:88:24:6d:47:7a:e0:5a:d4:12:88:
         9f:71:a2:7b:73:09:74:7b:c6:eb:8b:88:59:ae:ce:93:b4:46:
         7b:80:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:46:21 2026 by rpki-client