Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/5a7ef628-8af4-3871-81f7-d2553717058e.roa
File:                     5a7ef628-8af4-3871-81f7-d2553717058e.roa (raw, json)
Hash identifier:          103K4fKMtW+tocMj2Jaq1KCtFUH3NMIAqfGr9P0In4U=
Subject key identifier:   02:9C:AE:8C:94:60:72:FA:4A:AC:96:3F:60:D2:5E:88:05:F2:9D:5B
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584F82ADB2354B9BFE20C548A8E0
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/5a7ef628-8af4-3871-81f7-d2553717058e.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     22147
IP address blocks:        2001:4830:3100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b2:35:4b:9b:fe:20:c5:48:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=4a978d8e-04e9-4031-9c8f-5f4c3ab2afaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2b:76:d6:b5:87:d4:cb:e9:42:4f:ae:d3:7c:
                    08:0d:74:28:c6:ab:ed:fe:1b:7d:ed:fb:be:f8:ce:
                    d4:ea:81:0e:12:f6:7d:b1:42:22:ae:da:6a:10:81:
                    8d:b2:06:f2:0d:4a:d4:57:af:89:63:32:41:8b:aa:
                    b9:90:39:31:c8:fe:d7:15:d2:b2:8f:ee:42:18:3b:
                    3b:4c:ef:fe:ba:d6:49:84:14:b6:08:46:fb:68:6b:
                    a3:4f:e1:aa:96:03:dd:c2:9e:71:dd:58:69:8a:a8:
                    59:13:8c:68:f0:40:24:43:eb:a2:cc:2f:f3:15:92:
                    06:21:f6:d3:9b:a5:d8:39:5e:8e:6f:31:8b:d2:e5:
                    e7:a3:c2:4f:77:bd:db:14:66:55:4c:d1:af:de:23:
                    a8:58:a5:e1:33:fe:5e:b1:e1:bf:39:b4:f7:d8:6b:
                    82:a0:22:50:1d:bf:6b:fd:ff:d5:79:8b:71:2a:95:
                    8a:50:e6:19:ad:5f:37:9c:ae:6a:e5:69:f4:b1:b4:
                    d1:f2:d0:cc:0f:b6:61:4e:36:8c:88:32:c1:7a:4e:
                    d3:32:b1:9d:5d:6a:18:8e:a4:71:3e:39:9d:c2:ed:
                    d7:e8:7a:37:e5:5e:b0:ec:a8:4f:c6:e4:33:c2:f3:
                    8a:ec:b3:d4:43:86:c5:55:98:a2:25:f9:a7:7a:41:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:AE:8C:94:60:72:FA:4A:AC:96:3F:60:D2:5E:88:05:F2:9D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/5a7ef628-8af4-3871-81f7-d2553717058e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:0e:0c:20:f3:18:0f:e3:d2:30:39:74:8b:0d:32:ed:83:
         0c:1d:8e:98:e7:d4:67:6f:6d:91:1d:d9:32:c8:fb:a6:c6:24:
         d9:2e:14:1b:7a:20:dd:e9:54:90:9e:c4:ce:1d:e4:85:ed:ee:
         b3:ec:d4:bd:99:d3:48:5b:0e:5a:ad:de:a1:f6:cf:18:f0:5c:
         b9:85:4c:c6:71:a8:2f:6f:3f:3e:f2:9c:d5:1c:d8:10:85:24:
         28:cd:c3:5f:39:b5:ee:ec:e9:21:d4:0c:eb:ae:f7:04:b9:32:
         97:f0:69:69:68:55:2d:78:ec:16:7e:08:ff:9f:9f:d1:ff:77:
         98:68:07:d0:6d:8e:a4:4f:c8:ca:17:1a:76:3c:ee:f6:f6:63:
         8e:64:49:3c:dc:b4:67:52:07:e2:c7:39:cd:eb:23:6c:65:f0:
         db:99:02:f8:97:92:92:30:95:19:2f:15:02:17:d4:71:41:3d:
         ba:cb:43:12:f3:77:de:f0:2d:93:19:fa:59:b7:4c:c3:69:d0:
         68:67:b4:19:f2:e6:cd:8d:72:84:a7:9a:36:6c:6c:6a:5d:ec:
         1a:02:35:26:fd:ae:70:2f:4d:7c:c0:ab:a9:5c:3c:51:e4:36:
         ac:ac:cc:3a:36:09:6f:05:4a:31:9b:73:32:a3:46:85:cb:f4:
         42:df:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:09:22 2026 by rpki-client