Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa
File:                     87423d02-64d1-33bf-971d-fc872853d448.roa (raw, json)
Hash identifier:          DOUghZMYBkJNwXW1iShDMQwZozMSR0jKo0syKup14i4=
Subject key identifier:   54:B0:5C:B0:E3:8D:B3:B0:12:58:C4:DC:C8:90:12:40:2C:A2:2C:6A
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584F15CCE43BE66BB365DEFD1680
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:e4:3b:e6:6b:b3:65:de:fd:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=c6dce221-676a-4578-9c0f-322d8acb867e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:c2:b0:2e:a3:fb:5e:45:88:20:f0:61:31:
                    fe:57:c5:7a:7b:92:b2:ea:9d:8a:89:f5:42:3b:4c:
                    3c:61:9a:ba:fa:b5:d2:d2:78:f4:a8:0b:1f:6a:30:
                    c9:62:77:f5:14:c9:9e:9a:79:66:40:92:ce:bc:a8:
                    67:27:8a:fd:67:e1:be:05:2f:75:20:bc:84:ef:12:
                    15:7e:0f:f3:ef:1d:7a:66:5b:04:c6:b5:e2:9c:12:
                    0b:89:7f:95:10:14:26:ab:94:f3:ba:93:62:8a:3e:
                    55:ad:c1:fb:52:fc:4f:b7:ec:85:5b:0f:63:d5:50:
                    e1:84:2e:e6:30:3d:a4:28:f2:06:e0:57:58:47:46:
                    38:77:6c:1f:fe:d4:8c:19:b4:90:80:5f:05:e5:88:
                    94:c0:bb:2c:ca:4f:34:7d:fd:fa:9e:a5:6b:14:1e:
                    2b:fd:ed:e6:33:aa:9d:28:1f:a0:14:97:c0:a5:2d:
                    dc:24:5a:70:46:94:fd:7b:7b:a8:a8:c8:e4:42:d5:
                    5a:74:05:bf:82:1a:43:b7:e5:d5:3f:06:dc:26:e7:
                    ea:e3:d2:90:b4:ce:61:16:ed:5c:9c:f2:c9:72:f8:
                    cb:4d:8c:9a:8e:2d:a1:65:df:62:56:9c:2a:c0:e3:
                    c2:ca:05:23:aa:7b:f2:50:97:37:a4:f9:e5:50:9c:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:5C:B0:E3:8D:B3:B0:12:58:C4:DC:C8:90:12:40:2C:A2:2C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:68:3c:2f:06:b3:38:64:12:8b:f1:f0:9a:0f:ab:e8:62:
         cb:22:2f:40:13:16:19:32:c2:d7:a7:c9:be:4e:cc:6a:d4:09:
         26:c4:ff:ba:a9:b6:81:dd:06:b8:09:aa:81:28:78:a2:d0:d1:
         0d:2b:fd:6c:8e:1e:bb:a9:8b:9d:cd:3a:43:ef:89:a1:44:aa:
         da:2c:c4:63:1b:a5:92:2e:c5:65:85:4a:a6:ff:d8:47:0b:46:
         95:1b:ba:95:1b:96:6d:db:5c:e0:32:8d:93:8e:19:08:51:07:
         74:30:81:63:06:22:23:b9:09:6b:6d:c0:28:d4:05:24:95:5e:
         92:2d:f1:6c:ad:91:36:2a:08:f0:e2:d7:ff:c0:c3:c8:b5:04:
         38:57:3d:bf:90:f0:b5:b5:75:fb:c6:35:34:28:1d:11:db:34:
         9d:29:42:98:3f:d4:cc:9a:76:bf:b2:53:16:a4:1c:2c:f0:64:
         33:aa:20:b8:b6:84:ef:c8:2e:f4:c7:80:88:df:a5:74:05:ec:
         ff:72:00:d5:b5:b8:ad:32:f2:09:70:8c:2f:d5:96:13:13:a3:
         7b:db:2a:b4:5c:34:9f:32:e2:6c:45:a0:13:c8:af:03:ab:d8:
         58:ec:3b:04:e8:f7:d3:70:08:7e:bf:39:7d:a4:68:18:50:35:
         55:4f:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 09:27:49 2026 by rpki-client