Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/eafc00a4-127d-3cd9-a96e-c7b2cd608659.roa
File:                     eafc00a4-127d-3cd9-a96e-c7b2cd608659.roa (raw, json)
Hash identifier:          rmLaDmcL6J2qQFISU1r7jfRGKC7910uLCpyc9IG3O/o=
Subject key identifier:   E3:02:95:55:A4:09:26:96:DB:A6:D6:55:BB:93:D6:83:F2:3C:9D:E1
Certificate issuer:       /CN=541b7255-dab8-4786-bbe3-843423870307
Certificate serial:       010D0C9F4328584F225CF72C29DFE475251F9400
Authority key identifier: 85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/eafc00a4-127d-3cd9-a96e-c7b2cd608659.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     400956
IP address blocks:        2604:1460:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f7:2c:29:df:e4:75:25:1f:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541b7255-dab8-4786-bbe3-843423870307
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=99e7e084-fb78-40fc-8e58-012211412c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:c3:d8:8d:39:f3:9e:f3:40:33:86:71:b0:
                    01:be:8c:e8:6a:08:33:f8:f7:ef:2d:95:c6:5b:63:
                    82:44:dd:cc:30:62:c3:37:e5:7e:59:dd:a1:85:bf:
                    f2:9c:f6:b8:9f:5f:07:96:93:25:7d:98:37:e6:89:
                    cb:3a:a9:01:06:a3:69:07:7d:45:19:7b:92:84:2f:
                    dd:f1:d0:a5:21:16:a8:be:a5:27:f0:ce:d9:8b:30:
                    c6:61:8d:5d:61:73:b1:b8:6a:d2:1f:a4:bd:d1:96:
                    32:50:df:e7:bf:4f:86:75:1c:68:86:06:99:52:a5:
                    cf:32:0c:7d:04:4e:8b:8d:14:f9:0f:33:59:05:6d:
                    9e:32:74:12:b8:46:b0:8c:f2:5c:42:a8:7f:da:4f:
                    c4:b6:8b:40:6d:1a:1a:3a:0d:0a:2e:37:a5:84:d7:
                    71:1e:41:6e:33:90:d7:92:1e:a2:32:29:f2:03:de:
                    14:86:a7:90:13:7d:a9:60:f0:e5:ea:34:27:83:30:
                    12:1f:1f:eb:09:14:14:05:0f:71:6f:a8:2c:89:ca:
                    69:96:4e:b6:28:df:17:8a:42:38:b8:39:e2:14:f1:
                    28:83:bf:65:18:de:c4:e4:40:50:9c:29:be:ff:f4:
                    46:83:d8:6d:66:68:76:2d:df:a2:60:8c:36:1a:7f:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:95:55:A4:09:26:96:DB:A6:D6:55:BB:93:D6:83:F2:3C:9D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/eafc00a4-127d-3cd9-a96e-c7b2cd608659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl

            X509v3 Authority Key Identifier:
                keyid:85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1460:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:27:c1:c0:a0:3d:79:47:73:98:9b:43:2c:8b:28:05:83:
         8f:d9:b6:a5:db:58:0f:41:cf:49:2f:1d:fe:be:17:d7:53:b0:
         8a:04:00:34:84:fc:d3:15:91:c4:f2:15:90:37:e1:20:83:90:
         98:f1:a9:53:4c:51:e2:8e:33:5f:fd:07:ad:4e:af:b1:39:0e:
         0e:34:a1:fb:8e:e5:58:86:b6:3f:55:86:9d:58:86:8c:8b:d3:
         63:e3:5b:8a:82:22:e3:42:d0:f5:9f:7a:79:75:07:dd:a0:73:
         95:d2:2a:8f:65:fd:7b:ec:70:77:e5:55:ff:ea:73:49:8d:45:
         f3:9b:09:80:f7:5f:be:c4:38:12:0d:c6:5d:53:0e:3c:b2:12:
         bf:c2:4b:22:31:e1:87:27:f7:5e:e6:96:da:55:2e:4d:e1:92:
         f9:d2:4e:18:0b:df:2c:27:22:48:e0:cc:f9:93:78:ed:3a:28:
         54:77:11:76:a3:a7:23:0b:27:f3:e7:e5:f7:26:53:b2:94:20:
         4a:b9:9e:87:dd:1d:aa:ec:b7:97:e1:d5:b4:67:ab:25:ec:b2:
         8d:5b:43:f0:ba:2c:99:e1:05:f6:49:bb:07:e4:ed:fa:f3:0e:
         60:97:b6:29:8c:08:79:b9:ea:0c:6a:53:64:9d:79:66:e1:b1:
         de:84:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:30 2026 by rpki-client