Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/65507cfc-362c-3843-957a-94f28370f7b3.roa
File:                     65507cfc-362c-3843-957a-94f28370f7b3.roa (raw, json)
Hash identifier:          wWN1PH3MIQBSRofd9id3RLRLPwDaw58SGXb9N5uvEm0=
Subject key identifier:   BB:0B:C3:1F:60:DE:72:81:DF:7C:A8:28:60:B0:94:B2:90:ED:66:A8
Certificate issuer:       /CN=09e8ec9f-45c9-4103-ba8f-29090f373418
Certificate serial:       010D0C9F4328584F498A0A625A963625FDDDA280
Authority key identifier: E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/65507cfc-362c-3843-957a-94f28370f7b3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7341
IP address blocks:        2606:ea80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:0a:62:5a:96:36:25:fd:dd:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e8ec9f-45c9-4103-ba8f-29090f373418
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6e781f03-d401-4e3d-89f4-ab92ff4b2957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:81:58:0b:8b:13:9a:29:88:64:86:31:37:
                    4b:62:61:71:0a:a9:e9:f2:a5:06:cf:0e:79:48:4a:
                    49:32:bc:a1:46:c0:c8:82:4a:1a:39:6d:e9:77:d7:
                    53:98:3d:75:db:04:05:59:b5:a6:47:49:29:c1:aa:
                    95:60:14:c0:b6:43:be:5d:da:65:73:b6:9c:08:8a:
                    86:c8:0e:93:20:b0:78:88:5e:f5:bb:74:28:c6:2d:
                    07:17:b7:63:bc:e5:e4:31:76:c1:00:41:10:7f:6d:
                    f0:f0:55:e0:47:ce:82:67:45:ce:bc:62:8a:fa:93:
                    56:ed:ad:ff:f6:61:c6:c5:af:a9:9e:45:bd:b4:48:
                    85:60:41:2b:b6:e5:77:f7:01:a3:3c:8b:60:4a:1c:
                    3b:55:2d:58:eb:ab:ac:32:6f:d6:7b:e2:a3:8e:6e:
                    01:62:c0:93:9b:1e:d7:86:d6:2c:1e:6e:74:dc:2d:
                    97:f5:88:b8:9b:d5:0e:6c:ed:c4:19:70:06:b1:cc:
                    65:30:13:4a:75:75:27:9d:8d:31:ed:bb:b4:7c:ac:
                    28:d2:23:65:5f:60:20:2b:05:84:3f:6e:de:b4:a7:
                    52:68:df:74:57:79:8b:f5:ff:83:7c:cc:20:13:e7:
                    17:00:f9:1f:97:89:49:09:87:34:40:3e:f9:5b:3c:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:C3:1F:60:DE:72:81:DF:7C:A8:28:60:B0:94:B2:90:ED:66:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/65507cfc-362c-3843-957a-94f28370f7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl

            X509v3 Authority Key Identifier:
                keyid:E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ea80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:94:2b:c0:17:0c:ce:db:38:40:af:f1:7a:05:db:4b:bc:
         b7:e2:36:71:9e:8e:fe:69:21:be:cd:a2:ac:d7:b2:91:b8:77:
         99:52:e1:51:e6:35:fe:20:fc:da:7c:06:d8:3a:d6:97:42:a3:
         e8:4b:4c:14:45:2d:a3:6e:12:3c:26:8f:94:78:47:f1:93:4f:
         12:13:72:ba:c2:6b:69:5c:55:d0:4b:04:ba:1b:c5:db:36:94:
         ac:59:98:02:7b:5f:de:5e:1e:46:8a:d9:11:38:be:d5:81:22:
         70:7f:2c:75:1c:02:74:9f:cd:6f:46:1c:58:54:c3:b4:df:9a:
         4c:7c:6c:7e:fa:11:49:b1:9e:bb:a1:f3:68:98:c0:1f:a7:91:
         6c:6b:8b:1a:53:25:a2:17:96:3d:c1:48:8a:b3:32:8b:a5:7b:
         0b:97:c6:2d:b7:a7:18:34:1b:14:33:d3:fb:77:08:5b:40:9e:
         09:5f:c9:cb:f6:46:73:11:22:7e:61:f4:44:ef:8b:21:ce:ba:
         72:1e:22:54:49:17:3d:ba:ad:66:48:8b:4d:6d:73:a9:25:9d:
         55:8c:f6:77:21:7e:80:ba:7a:1e:47:0b:ba:07:7b:75:67:13:
         53:d6:f0:55:e3:a0:bf:4e:92:c4:8d:97:28:67:7a:a0:98:30:
         84:89:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:50:57 2026 by rpki-client