Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa
File:                     048a3109-db11-313b-a682-3462d66d1f6a.roa (raw, json)
Hash identifier:          GKCF4JPpNDSyUEqwvcOgalIgP3dut6DXW6GdTk4T+A0=
Subject key identifier:   06:6E:6F:62:36:11:0B:A4:B8:80:43:8B:D5:BC:A0:8C:C3:4F:01:73
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584F3CE2A1061F84AEDA21008D00
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:a1:06:1f:84:ae:da:21:00:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=a87dbf6d-b82d-4a5e-8ebd-25ba702c3731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:39:d8:d7:dd:6c:9e:5b:32:d3:d6:0b:a1:
                    95:5c:c2:0e:c8:e3:fb:34:6f:f1:6e:f4:63:83:33:
                    23:56:cb:b9:d2:0e:3c:d8:38:b1:5e:8e:c0:4d:02:
                    74:e7:3a:fc:75:f6:81:6d:ae:5d:00:57:ed:32:0b:
                    ad:7a:76:24:e2:af:2b:89:78:aa:0c:35:6c:ae:80:
                    4b:4a:0c:ba:0f:5f:af:c8:c7:15:d4:3f:ae:d8:3c:
                    c7:bb:09:a4:88:3c:25:f1:55:72:6b:17:4f:89:5a:
                    a7:b2:8c:cd:c2:34:c4:4b:8d:ca:46:ed:19:73:71:
                    9d:bc:c8:72:d9:2d:c7:e6:04:48:04:d6:41:7a:41:
                    3e:1e:57:e1:33:d5:a8:50:2d:85:11:48:d3:64:3d:
                    61:16:aa:53:59:4e:a5:ba:38:da:23:d5:a3:9a:c6:
                    e0:43:1f:17:fb:13:dd:88:f9:64:07:ed:33:c8:c8:
                    c6:e1:e5:30:0e:3c:49:9d:9f:dd:68:fa:df:81:dc:
                    46:c3:28:cd:45:29:b7:a1:76:48:37:57:08:dd:67:
                    cd:0c:08:24:24:23:af:68:b1:48:75:ff:3d:54:2e:
                    0d:4b:c9:f8:79:a3:80:c7:f3:8f:07:e5:89:26:3a:
                    43:06:17:0f:2c:78:ea:4b:d7:da:a5:ee:f1:6a:4b:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:6F:62:36:11:0B:A4:B8:80:43:8B:D5:BC:A0:8C:C3:4F:01:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f7:fb:b4:c0:28:e1:bd:ae:19:3e:b9:cd:b9:e4:b2:c6:49:
         8e:a5:da:5f:29:8a:31:9e:d7:55:7f:11:fb:1e:63:1c:4b:b9:
         2a:b3:18:46:07:40:02:ac:86:9e:39:27:2c:af:24:92:b8:03:
         be:9a:ab:38:1e:99:c9:ce:95:f8:48:f8:9b:59:4c:03:7a:aa:
         96:88:97:ea:91:67:e3:25:1b:fc:e4:2a:7f:f6:d7:0f:17:dc:
         76:71:b6:09:d5:73:85:de:ea:c5:c5:bb:ca:a7:f3:dc:5f:4b:
         bc:38:2c:f7:73:d2:6d:c4:0e:40:55:79:4c:c8:1e:f5:9c:6c:
         25:fe:64:75:33:61:11:e6:c0:36:d4:67:cf:01:1e:0f:68:c7:
         3c:4a:12:b3:41:82:64:7f:60:3e:df:2c:a9:da:3e:ca:b1:8c:
         cc:0b:39:5a:6c:51:2b:fb:c4:57:37:08:1c:3d:c1:d0:15:46:
         6a:f0:b2:13:6c:cb:bf:d9:d4:cb:b9:1b:1f:c9:c8:c7:54:93:
         97:42:65:3f:50:a6:af:47:ea:f0:18:4f:c7:89:d7:88:8b:e8:
         c0:5c:aa:cb:0a:d0:0b:1d:62:b9:34:d1:f8:76:e1:b4:69:c4:
         6d:00:f4:bc:f0:a2:ae:5d:3d:c3:9a:ee:0f:8d:b1:4f:7f:86:
         71:05:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:23:25 2026 by rpki-client