Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/11769209-e814-379e-ae55-12845308f49c.roa
File:                     11769209-e814-379e-ae55-12845308f49c.roa (raw, json)
Hash identifier:          ECOgceJMl+EkO2Q0hlyNEeCjmxGdi917Zy1qEbXmhKg=
Subject key identifier:   19:09:AB:51:17:6A:2E:16:91:7A:42:3D:06:32:34:39:2F:3E:43:AA
Certificate issuer:       /CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
Certificate serial:       010D0C9F4328584EA797CCC07E0A09BF16A80B00
Authority key identifier: 9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/11769209-e814-379e-ae55-12845308f49c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40253
IP address blocks:        2602:f494::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:cc:c0:7e:0a:09:bf:16:a8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1d996a9e-b933-4cd7-bf94-34d4a8d1f612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:13:58:20:af:87:1b:03:4a:60:b1:ef:ac:
                    53:6c:16:9e:bc:f0:bd:be:23:54:9a:c7:63:ea:83:
                    38:b6:dc:b0:63:46:0f:36:3f:f7:4f:72:7e:12:6e:
                    45:42:1d:02:85:e1:4f:65:1c:74:bd:91:05:f9:3b:
                    ed:47:a1:d8:b5:a4:7a:c1:43:f3:a5:c4:ec:53:12:
                    1f:05:49:0a:63:e9:34:03:8b:63:9f:9f:c9:3a:34:
                    f5:af:cc:f3:04:bc:29:53:64:e4:bb:19:f4:30:96:
                    a5:8c:ea:ae:27:52:c6:73:a2:9d:b1:50:df:84:89:
                    5c:4c:d0:86:3e:40:07:6c:eb:e5:b1:0f:09:ca:76:
                    db:76:14:fd:9c:f6:fd:f0:62:fa:4c:a0:0c:bb:cf:
                    c8:73:7a:d1:86:38:ba:64:a8:74:61:d4:41:68:f8:
                    0c:e4:2c:35:e7:54:35:56:92:76:31:8f:29:de:1a:
                    d2:c4:f9:a6:b3:52:66:a5:51:35:4e:72:91:49:b9:
                    0f:23:63:78:b5:01:5a:5f:be:c6:26:de:a1:4a:67:
                    f3:85:8b:40:a6:31:07:9e:92:ee:61:2c:0b:4c:34:
                    2c:e5:74:b5:1f:d7:32:64:76:bf:68:3d:d5:de:67:
                    ee:74:55:cc:95:6d:a6:1e:99:6c:ce:cc:f8:b1:33:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:AB:51:17:6A:2E:16:91:7A:42:3D:06:32:34:39:2F:3E:43:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/11769209-e814-379e-ae55-12845308f49c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl

            X509v3 Authority Key Identifier:
                keyid:9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f494::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:73:42:40:9d:cf:c7:e0:48:1f:95:53:1c:79:9f:ec:32:a8:
         40:5d:e4:39:84:f7:54:86:f7:4e:56:9c:25:91:7c:0e:41:9a:
         99:85:b2:13:d4:fb:a0:df:70:90:b4:87:ef:d8:9f:e7:bb:af:
         77:05:d8:04:ae:d5:b9:13:5e:d7:71:80:ee:e8:b0:b3:a7:72:
         9a:53:61:af:7e:c6:99:ed:26:68:b5:0a:2a:17:4c:3d:18:24:
         58:24:16:b0:2d:29:ce:9d:a9:ca:1d:cd:5b:2a:6a:79:20:2b:
         f0:f2:4c:9b:5d:1f:72:de:70:36:ae:78:ff:c5:5e:60:fc:c7:
         56:b1:17:91:97:04:d3:5d:33:9c:33:7b:50:05:50:ec:60:1f:
         2c:cf:eb:60:ce:64:ca:dc:f1:26:4b:8c:2c:c4:dc:d9:93:47:
         90:5a:56:fb:62:56:85:0e:ab:9e:20:44:80:8d:e8:f2:5d:d6:
         ec:27:37:2b:6c:b9:9c:62:e1:86:96:a6:f4:61:d3:24:78:8b:
         f8:6f:5b:8f:2c:87:9b:36:7f:37:75:31:ab:d7:99:d7:c3:ab:
         fd:94:c3:1d:8f:fe:ab:af:5e:aa:6c:d1:5c:ea:b5:ba:a0:4c:
         8f:8a:53:56:fd:0f:41:59:a2:b1:b4:17:45:cb:22:fd:59:0e:
         fa:8e:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:09 2026 by rpki-client