Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
File:                     17556c0a-f699-393f-934b-8c8b0db969e9.roa (raw, json)
Hash identifier:          K3ohj1Y5GzXLTgks5OmZ7T1G3/CtdPS8Cn67MgkgK4Y=
Subject key identifier:   A8:DC:47:07:FD:64:CF:9B:94:30:EB:39:B2:03:9B:B2:70:3F:D0:A4
Certificate issuer:       /CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
Certificate serial:       010D0C9F4328584EBC77088CACE327946B593D00
Authority key identifier: E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     18683
IP address blocks:        2604:b680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:08:8c:ac:e3:27:94:6b:59:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=6138cc86-a723-4b75-8f0f-d2b0baaaf036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:19:db:69:eb:62:d0:88:46:07:80:29:e2:
                    19:bf:2c:11:ac:de:5b:45:a8:88:d4:71:44:bc:38:
                    17:a5:fe:05:0f:cf:48:24:52:88:30:b4:dd:a8:77:
                    4d:81:54:0d:a5:30:88:bc:2d:1a:c5:bf:00:31:72:
                    4f:23:26:4a:d1:c3:50:49:2f:9b:18:5f:6a:4a:de:
                    4d:b8:7e:4a:da:f8:16:3b:d0:f6:6f:91:e3:ad:55:
                    7c:d4:f7:42:3f:f2:f9:56:93:82:89:d6:c9:7d:9b:
                    0b:45:f6:73:fd:79:13:b6:0a:48:0b:a4:f0:cf:f9:
                    09:1c:8e:9e:3f:b1:35:83:23:99:4c:7d:c4:74:dc:
                    49:4e:3a:f5:76:f7:f0:91:bc:2b:37:e5:12:de:5e:
                    68:98:cc:f5:ff:61:1d:d3:30:97:73:31:31:7a:36:
                    dc:b4:26:c5:f2:ee:58:07:d2:5f:ab:d6:e6:c2:08:
                    97:10:83:c9:11:e6:59:8c:3a:a9:4c:00:d5:f4:f8:
                    84:2e:f5:4f:fa:52:3c:4d:a0:75:b0:a3:5e:0b:92:
                    49:b6:46:55:70:38:df:88:3a:11:93:8b:58:ac:ff:
                    a7:75:f8:33:c9:ed:c1:bb:0c:b2:79:58:43:7e:a2:
                    ce:c8:d3:1d:54:0b:e7:b0:f6:07:03:fe:f8:e2:23:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DC:47:07:FD:64:CF:9B:94:30:EB:39:B2:03:9B:B2:70:3F:D0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl

            X509v3 Authority Key Identifier:
                keyid:E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:a8:e5:49:5f:26:45:a3:f8:e9:f7:97:ca:bf:86:fa:3f:
         c3:7e:23:2c:7f:9a:27:a7:45:4d:0d:61:7d:29:96:b1:2e:43:
         fe:5a:8b:82:0b:77:ac:fe:03:0d:e9:f0:66:ff:48:ce:d0:76:
         6b:6d:ff:3e:b3:f7:8e:f0:b5:f1:de:83:26:52:83:5b:b4:89:
         bb:fd:95:98:74:4f:f1:4e:a5:36:64:17:e3:65:04:01:bc:d4:
         13:e8:eb:39:a9:7d:7e:a9:e7:84:aa:4e:94:44:47:e9:6a:7b:
         fc:15:8b:b4:b9:70:26:bb:b2:a6:b3:cc:0f:06:30:c4:bf:f0:
         a0:d3:8a:76:8a:44:4e:5a:95:a3:69:cf:ed:91:1b:8b:42:1f:
         97:c8:44:47:ad:85:42:90:40:8f:ab:bf:9c:07:51:0c:d9:24:
         45:0d:a7:8c:10:b0:42:92:81:b9:64:4b:d2:26:e0:75:a6:f3:
         40:f7:4e:2c:c9:d0:96:7f:3d:d3:3f:e6:e6:89:c2:19:7c:c8:
         eb:59:b0:04:b8:9f:f1:53:10:e2:50:04:5d:b1:1c:3f:b8:6c:
         37:d1:3e:dd:5f:57:09:1c:65:1a:8a:75:7e:63:02:0b:6f:e8:
         eb:dd:07:f2:ec:d4:97:35:b7:a8:cd:e1:ed:c8:7f:fb:69:af:
         85:c9:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:40:53 2026 by rpki-client