Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa
File:                     e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa (raw, json)
Hash identifier:          2ytM3Goq8SXeh5n5MIxKWzQv49djHoy22MMb+pxl3/4=
Subject key identifier:   34:6A:77:3E:5E:8D:8C:D7:6F:24:62:D2:B4:E6:69:7C:55:DF:50:06
Certificate issuer:       /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial:       010D0C9F4328584F1467A4F0EB78C0C8A896AD80
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     18254
IP address blocks:        2600:b400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a4:f0:eb:78:c0:c8:a8:96:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=e9de1ec7-2bec-4f38-a5ba-4fdb0ce5d1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:d5:6b:0f:8e:3f:f6:c0:00:b9:61:4f:25:
                    f8:ca:fe:9a:06:ed:30:db:32:ed:46:4b:ec:97:bf:
                    ce:d2:3c:e6:7e:4f:ac:ad:eb:f8:86:2b:0d:8f:d8:
                    f8:a0:f6:6f:a7:60:06:b3:f2:f0:9f:c8:3d:36:5e:
                    55:b0:01:66:ce:3f:84:df:8f:9e:5e:af:75:04:82:
                    d7:af:b7:ec:eb:a3:45:cc:72:35:7f:3a:58:ef:ad:
                    d7:4e:e0:66:3c:da:70:8e:0f:54:8b:c0:0c:f0:68:
                    dd:eb:fa:19:ad:71:ef:16:5e:e1:4b:50:c7:71:41:
                    6b:86:6b:db:d8:33:13:45:c1:d9:1d:65:b3:11:10:
                    c6:ae:71:c1:de:57:66:ec:fc:14:f8:5f:d4:20:f9:
                    2f:25:a3:7f:2a:44:dc:8e:24:61:89:b7:91:23:51:
                    9f:81:d7:e0:20:19:ca:a0:aa:5c:18:a1:32:47:d2:
                    91:0e:a4:b0:b1:17:16:fc:3b:07:e8:12:8c:58:f6:
                    24:3f:77:84:ca:65:0b:1a:80:b7:ee:f3:6a:49:dd:
                    4d:fb:43:fc:bb:3e:74:84:39:85:7e:55:cb:a7:a0:
                    dd:12:34:66:4d:1a:b9:49:4b:d9:01:04:6d:d4:ea:
                    45:54:9f:3d:65:75:99:8d:b1:06:29:c2:20:ff:a8:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:77:3E:5E:8D:8C:D7:6F:24:62:D2:B4:E6:69:7C:55:DF:50:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl

            X509v3 Authority Key Identifier:
                keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:b400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:7c:12:29:68:de:34:3d:29:4d:ed:69:bb:ba:d5:f6:15:
         aa:78:05:8a:cb:58:0f:6a:9a:8c:75:dd:64:c5:d8:e1:eb:63:
         35:58:27:9e:be:82:72:a8:c4:6f:50:90:b7:b2:3d:dc:b5:7f:
         5e:74:12:41:62:2d:d3:bc:52:68:4f:e2:fe:d5:68:3f:26:1b:
         4f:83:ce:5d:c3:fd:4a:80:fe:a9:24:1b:68:12:2d:b4:ac:49:
         2f:95:30:ce:87:42:15:20:a5:bd:bf:76:01:41:aa:35:5f:a5:
         96:63:ca:8f:02:df:e0:51:79:66:62:8b:5f:1e:22:28:ad:a8:
         5f:a7:21:c3:bf:71:93:25:a7:de:11:a0:f4:63:c0:c1:b2:c4:
         b7:a2:a9:24:7d:32:31:37:06:cf:78:30:ea:df:7a:3a:26:fd:
         0b:e8:1c:4f:8e:b5:bd:bf:62:67:49:13:82:d1:a8:09:a2:90:
         8b:af:e3:8c:57:75:32:41:e3:2a:23:0d:b1:1b:5a:fc:f1:b4:
         73:8c:77:bd:1f:c9:06:31:ce:b6:2d:4a:53:75:b4:ab:9e:ef:
         0b:c7:bd:9a:2c:84:51:70:0a:d9:33:c3:41:fa:36:fa:e2:08:
         05:40:fd:73:e1:5f:b2:f8:35:cc:9c:b2:ed:ac:e3:0e:4c:47:
         fc:11:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:38 2026 by rpki-client