Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/14e0af1a-2382-3934-9320-be016ebfc1e7.roa
File:                     14e0af1a-2382-3934-9320-be016ebfc1e7.roa (raw, json)
Hash identifier:          wQhN60XxZFQ873EnEELYLXy+5bFUMV+Ji822DUi3lac=
Subject key identifier:   13:AC:17:49:83:9F:A5:57:AE:70:7A:EC:56:E8:42:20:02:C0:FD:E6
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584F497575858DDB092C81C18380
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/14e0af1a-2382-3934-9320-be016ebfc1e7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393249
IP address blocks:        2607:f8f0:611::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:75:85:8d:db:09:2c:81:c1:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=88e4c9b3-d534-4d8f-90b6-d63495ac1434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:c9:a1:55:5e:68:0c:9d:b9:16:98:e3:11:
                    ff:6a:36:80:f4:ca:41:0a:a7:5c:3c:f0:62:51:bb:
                    21:d2:b8:de:9a:9a:3e:83:c7:72:65:c1:28:34:bf:
                    0d:e7:df:8a:0e:ac:c9:71:a3:d3:25:78:7f:a5:e4:
                    68:9d:17:a3:2d:32:a4:9f:75:5f:9d:f8:1d:54:59:
                    50:a7:18:54:f4:6c:36:9a:f6:ab:b8:49:a7:e5:9d:
                    0b:95:00:78:e0:9a:54:4a:e9:ef:19:3d:8b:c6:60:
                    bd:ac:e0:be:70:48:3d:fe:10:76:94:23:4f:37:99:
                    43:19:8e:3a:b9:99:8c:dc:0e:b3:a9:86:9c:1d:79:
                    ad:70:c6:6b:31:ec:73:0d:8c:47:af:cd:97:31:f4:
                    3b:72:e9:f7:e2:59:65:fa:b0:42:cd:9b:e7:62:b2:
                    3c:a6:8b:f8:ec:82:0a:23:a0:ab:ab:47:82:8c:d8:
                    79:07:ae:a6:97:da:3b:79:ed:96:41:18:68:76:f0:
                    8a:09:17:de:f6:0c:31:da:fc:c4:37:5a:1e:cd:d6:
                    36:ea:f2:a1:9a:a8:51:72:9e:0f:20:d6:72:3a:a0:
                    be:ea:38:5c:aa:7b:99:ae:d6:e4:c6:3e:bd:71:a7:
                    23:45:5f:43:76:38:bb:3a:23:d0:24:09:2b:90:ca:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:17:49:83:9F:A5:57:AE:70:7A:EC:56:E8:42:20:02:C0:FD:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/14e0af1a-2382-3934-9320-be016ebfc1e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:611::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:4d:69:af:6e:8a:67:73:bb:d7:d2:6b:f6:1b:0a:c8:3d:
         b6:76:fd:cf:32:61:d4:bf:a6:a0:78:00:11:3a:8e:d9:0d:47:
         e6:c9:13:b5:30:e4:24:0a:28:cd:5c:b9:81:31:03:3f:08:88:
         26:17:e3:9f:8e:37:73:ba:59:72:3e:73:31:08:0b:ee:22:8b:
         a0:c4:b5:a1:f6:56:d7:05:e1:9f:3f:4a:5d:e5:62:a0:4c:db:
         bf:32:95:a0:b3:b0:31:d5:cf:cb:27:5f:04:de:9f:23:d4:a1:
         83:13:36:a5:de:cb:0e:02:59:81:44:47:5c:6e:0a:74:61:9d:
         bd:53:ee:f9:00:90:31:c6:74:48:22:d1:9e:76:4b:4f:58:c2:
         99:6c:a7:a5:18:e6:d6:c2:20:7d:1e:bd:27:8f:59:d9:cf:d6:
         ef:86:ab:08:b6:7d:ec:98:96:13:c6:d7:52:3e:fc:01:e7:e5:
         ab:29:81:c9:5d:18:d7:a4:78:c5:14:b4:05:fc:a5:48:7d:6f:
         07:e3:c2:49:52:60:f8:c0:bc:93:07:f0:10:61:9e:5f:1a:e3:
         12:70:3d:46:6a:66:28:78:23:6f:08:10:38:a7:6f:fa:31:0f:
         83:7e:2a:9d:eb:8b:cc:73:14:16:43:13:80:7a:15:91:c9:f4:
         ea:ab:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:56:36 2026 by rpki-client