Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7e0b38fa-7659-368c-95cd-07430f61b05d.roa
File:                     7e0b38fa-7659-368c-95cd-07430f61b05d.roa (raw, json)
Hash identifier:          CSLNFSs91m4NN/HcDHoSJNtSBqGYKV2cP21xzWB9XTo=
Subject key identifier:   5F:20:28:A8:F6:A8:BE:49:95:4A:96:26:65:D7:5A:A4:DB:35:55:DC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D382D5EC90347328B7350
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7e0b38fa-7659-368c-95cd-07430f61b05d.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2620:11a:c00d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:38:2d:5e:c9:03:47:32:8b:73:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=629f4f62-9cb7-4a75-a6db-d49cd686786a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:b7:79:41:cd:7f:fa:a5:08:44:85:d8:d2:
                    e5:7c:67:fe:4d:63:53:c2:41:73:c1:c3:39:51:2a:
                    82:04:cc:9a:48:05:ed:5b:c6:dc:45:11:da:fc:98:
                    02:ab:75:30:1a:3c:ec:ae:1c:20:94:34:d2:1f:5d:
                    e6:a3:8e:f2:69:8c:19:79:8e:01:32:d9:2a:83:5b:
                    94:30:ad:3f:87:84:55:bb:ac:a8:b1:c1:ce:14:c6:
                    c3:44:38:fc:f3:aa:eb:47:83:68:5e:2e:f7:fe:0a:
                    db:ba:cb:2e:2d:ce:e9:ff:50:33:a2:fd:58:6c:87:
                    8f:28:77:51:5c:fa:56:14:1a:24:77:92:9e:70:73:
                    8a:a1:71:03:39:d3:eb:fa:d5:90:24:4d:6a:43:cd:
                    b6:d0:e1:1e:38:24:5c:eb:0d:f6:4b:1f:38:a9:80:
                    d7:95:c6:40:9c:8f:67:02:7f:73:10:3b:07:32:c7:
                    9a:2c:f4:b3:19:8f:38:a5:28:ab:9c:7c:ad:b3:e2:
                    7e:27:d2:45:fd:dc:71:ef:61:3f:98:f0:05:f8:9c:
                    30:3c:66:b2:a0:4b:42:5c:9c:23:36:34:f2:0c:2e:
                    1f:44:af:bf:ca:48:ff:7b:96:9e:05:f4:80:ba:47:
                    d6:1a:a3:89:c7:0a:cd:4c:fb:2b:df:8e:35:69:a9:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:20:28:A8:F6:A8:BE:49:95:4A:96:26:65:D7:5A:A4:DB:35:55:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7e0b38fa-7659-368c-95cd-07430f61b05d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c00d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:96:74:7b:3f:1b:d5:f2:5d:91:18:1a:4c:f1:57:b3:3f:e1:
         cc:c3:cf:95:5c:6e:03:c5:74:b2:a8:f1:53:87:28:ac:23:f3:
         41:0e:d1:6e:b5:b7:08:d5:46:dc:f6:c7:2d:79:a1:d9:a3:66:
         70:20:64:5a:c1:65:b1:fa:44:b8:bc:6a:e9:86:f4:e0:7d:ef:
         39:ea:a9:fb:03:ad:aa:1d:3d:82:2e:9e:dc:d2:72:62:b8:88:
         04:7a:de:a3:c2:af:d3:88:1b:20:d1:de:d6:0c:be:7d:34:7d:
         b3:30:dc:58:90:89:3a:e9:ca:f9:e3:d7:09:ad:86:76:9f:7f:
         d4:13:ea:fc:e0:5f:6b:49:d1:e0:54:17:a3:b7:e3:cf:91:bd:
         2a:e5:ed:62:35:71:ed:55:da:32:c1:16:c5:7f:9f:30:2c:fc:
         3e:af:3d:ae:fb:b0:2c:dd:a5:f6:f9:11:9c:af:f7:a9:aa:99:
         67:bb:33:a7:54:e6:3c:72:e6:38:cf:f0:e4:db:6c:4b:24:aa:
         8c:70:60:10:7b:3d:a0:e2:07:12:4f:be:17:e9:3f:6b:6a:30:
         cf:81:71:80:a3:a1:98:20:67:6e:56:e5:c2:b3:27:6f:65:c8:
         6f:73:2a:ee:de:11:fb:18:fe:f7:fe:ba:4c:eb:cb:b6:31:bd:
         49:77:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:16:06 2026 by rpki-client