Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/acece46f-c1d1-3fdb-8aa4-aec0432de791.roa
File:                     acece46f-c1d1-3fdb-8aa4-aec0432de791.roa (raw, json)
Hash identifier:          SHrp/qeJJWw7dT9dsDSM6NFG/XmtEF826ZCh06VaMGg=
Subject key identifier:   B6:E3:92:B9:9E:77:BD:92:20:C1:77:C8:6F:DC:32:F1:58:BA:21:06
Certificate issuer:       /CN=ba6485f1-e40b-4764-bddf-7af6c9e42f13
Certificate serial:       010D0C9F4328584F4BBC8B12614972D2A2AE6080
Authority key identifier: DE:E7:E6:AD:A5:37:58:29:4C:C4:80:FB:B7:81:88:1D:CE:4D:6C:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/acece46f-c1d1-3fdb-8aa4-aec0432de791.roa
Signing time:             Fri 25 Sep 2026 20:40:58 +0000
ROA not before:           Fri 25 Sep 2026 20:40:58 +0000
ROA not after:            Thu 24 Dec 2026 21:40:58 +0000
asID:                     401144
IP address blocks:        2602:81e:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:bc:8b:12:61:49:72:d2:a2:ae:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6485f1-e40b-4764-bddf-7af6c9e42f13
        Validity
            Not Before: Sep 25 20:40:58 2026 GMT
            Not After : Dec 24 21:40:58 2026 GMT
        Subject: CN=569359b5-38f5-4b33-9096-50756a7b3986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:25:18:6b:d1:52:cc:e2:ee:be:31:d2:ab:
                    ff:9d:14:5c:e6:ce:2a:07:9c:de:b7:0a:4c:63:35:
                    e8:a7:e3:4a:51:e0:09:9a:71:f0:f4:b2:30:ec:83:
                    23:1c:06:e2:5a:5f:ca:59:2f:1c:20:f4:8a:c6:18:
                    1e:d3:59:c7:d6:82:d0:15:d3:2f:09:cf:f4:83:03:
                    b2:29:12:6c:18:5d:d6:c9:65:c5:57:4f:c6:88:78:
                    b6:f5:15:1d:d2:37:c9:8b:2e:30:f5:db:b7:a5:e0:
                    69:d0:47:7f:82:ba:2a:27:ff:3f:b3:1f:1c:6d:ca:
                    fb:ac:24:e2:6b:f0:31:95:87:2c:5b:7c:60:eb:e4:
                    2b:03:08:2e:54:7d:ba:f9:1b:f7:a9:1e:d2:f9:1d:
                    33:b0:45:66:b6:f7:3c:d0:3f:53:ad:f9:53:f2:ec:
                    8b:4e:ee:9b:cc:10:4a:3a:eb:21:4f:1d:64:0e:0b:
                    9e:cd:86:66:eb:d7:35:19:cc:6a:8e:cb:0e:c7:a8:
                    ae:43:dd:80:ad:1e:79:b1:af:59:0e:f7:62:cb:2c:
                    84:6e:60:31:bd:f4:13:88:ef:e3:df:50:41:7e:2b:
                    f4:40:4b:1c:66:90:59:34:3e:9f:32:89:44:cc:6f:
                    02:26:ae:46:7b:fd:5b:41:84:f9:38:cd:3d:f3:89:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E3:92:B9:9E:77:BD:92:20:C1:77:C8:6F:DC:32:F1:58:BA:21:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/acece46f-c1d1-3fdb-8aa4-aec0432de791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.crl

            X509v3 Authority Key Identifier:
                keyid:DE:E7:E6:AD:A5:37:58:29:4C:C4:80:FB:B7:81:88:1D:CE:4D:6C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81e:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:50:d6:36:38:20:cc:5e:fb:ae:33:62:d1:f8:64:a7:c3:90:
         ac:a7:28:67:e7:2c:3f:30:a4:cc:3b:33:1e:26:bf:e2:58:62:
         7e:9d:be:53:f5:36:90:33:fa:80:56:e9:4d:d1:18:74:de:a4:
         b7:f3:09:dd:38:c1:08:72:4a:db:60:04:57:fc:5f:62:b4:55:
         73:da:fd:10:11:5a:df:54:47:4c:c4:a6:a9:ca:d2:d9:84:cb:
         38:58:12:9e:ed:2d:7a:09:f7:cd:e7:ba:bf:6b:35:e2:4c:9a:
         1b:51:df:1f:2d:15:28:a9:01:96:cb:98:4c:09:ca:18:c3:ad:
         eb:48:16:ba:bc:ab:fb:ec:e5:62:d6:e3:9a:9b:a0:0b:b7:67:
         0b:cf:3e:17:35:42:54:2a:58:15:3b:54:4d:a3:96:07:e6:2a:
         7d:91:83:1d:e9:be:82:42:bc:24:2b:b8:ec:fa:1c:99:48:e4:
         94:e3:8e:42:f8:f2:62:1c:00:cc:d5:dd:a3:51:ec:21:1e:14:
         25:9b:96:c6:39:22:03:2c:54:b3:ad:0b:1a:de:87:fd:45:a3:
         63:ed:74:47:09:04:2c:7e:0a:d1:c7:53:68:13:30:ed:5a:13:
         e8:bd:67:60:67:56:05:e5:03:8b:29:87:71:e5:7d:af:2f:23:
         43:6d:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:54:05 2026 by rpki-client