Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82195deb-266a-3197-a51b-8e2bdcc27e43.roa
File:                     82195deb-266a-3197-a51b-8e2bdcc27e43.roa (raw, json)
Hash identifier:          oM3aJ36NOsie6WYbXIHfogt1nx/RrSHr5Fb7LhuWPu0=
Subject key identifier:   19:8D:EF:73:91:1D:F6:89:38:AE:B7:68:9C:4F:C1:73:A7:79:A3:A5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D7CCFDF8E5BDA2FB4DB0179EC
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82195deb-266a-3197-a51b-8e2bdcc27e43.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2605:4300:3907::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:df:8e:5b:da:2f:b4:db:01:79:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=8555e397-93d4-4ef5-b130-2175834f9924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:40:f2:5e:c5:2f:cb:43:a7:95:d5:35:73:
                    17:f5:c7:d9:82:64:75:d8:07:ec:7a:29:7f:3a:f5:
                    33:1f:6e:1c:7f:d4:fc:78:0f:b2:e7:cc:b8:79:8d:
                    01:3d:c5:9c:b1:64:36:45:ac:c8:d7:d3:9c:16:15:
                    d4:45:7d:fc:92:c8:94:58:42:e7:4c:bc:28:51:60:
                    bd:5b:82:00:64:d4:4a:b3:a5:ba:12:53:f4:ba:0a:
                    4f:d1:d4:dc:ce:43:a0:46:ac:0b:ea:3d:42:d3:a6:
                    1a:44:97:d3:73:dc:a0:e8:4d:5b:74:cd:b6:15:41:
                    76:fb:ae:6a:fe:29:b4:1d:6f:9e:23:42:0c:f0:d7:
                    0f:bf:51:e9:fb:f0:85:b4:70:91:28:a8:dd:96:3f:
                    a1:9a:24:fe:72:33:04:e9:c8:c3:d3:83:b5:7e:e4:
                    d5:02:e7:6c:0e:27:a3:2e:b8:b8:75:2a:f1:58:da:
                    53:d8:6c:1b:f9:c8:40:52:15:f5:16:55:71:4e:71:
                    7a:7e:ee:55:21:84:45:45:f2:86:73:51:47:9f:24:
                    9f:07:0e:06:45:d2:6e:05:bf:fb:b2:1a:87:4e:ff:
                    64:3f:bf:94:79:74:7d:96:db:42:2f:25:6e:de:d5:
                    85:01:08:b1:6c:43:37:e9:27:64:77:68:eb:b0:a7:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8D:EF:73:91:1D:F6:89:38:AE:B7:68:9C:4F:C1:73:A7:79:A3:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82195deb-266a-3197-a51b-8e2bdcc27e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3907::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:65:5a:3c:a3:26:0b:ad:02:aa:76:d3:7f:ac:aa:95:4c:a3:
         c7:b7:37:dd:d6:73:8d:b6:85:dc:f9:f5:a3:b8:82:ac:7f:ef:
         7a:86:bd:9b:03:47:26:c7:f9:f5:4a:52:cd:33:82:cc:6d:92:
         1b:2c:cf:dd:98:57:38:2d:90:4d:59:be:d2:85:e2:65:b2:5a:
         e3:0c:32:a1:e5:4b:b5:52:3f:00:e1:52:30:19:4d:11:bd:6d:
         4c:c9:db:6f:c2:22:ae:e6:d6:3b:bb:28:ae:8a:0e:22:de:86:
         d8:80:79:2d:ec:6b:c0:0c:da:55:14:68:32:87:77:09:8d:f6:
         d9:25:9f:f7:7a:bc:bd:73:5a:f5:78:69:02:1c:b9:c1:37:61:
         aa:a3:58:c1:d6:9b:21:0b:8d:bb:9d:97:d2:61:6d:d2:77:1a:
         2a:a4:67:d2:e1:77:7a:c4:78:af:da:9b:af:a6:44:b7:14:26:
         4c:2c:5e:17:6d:24:53:9a:64:89:4f:24:3f:1a:fb:97:a7:00:
         5b:87:7f:35:34:7a:ee:dd:16:ef:6a:d5:55:2c:24:bf:cb:10:
         06:2c:2d:d5:69:4e:ca:58:1c:f7:71:88:77:bd:60:bb:60:0b:
         9e:a1:0b:92:b2:b5:5a:5d:d6:6c:96:3c:46:70:23:9c:8a:12:
         11:46:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:38:35 2026 by rpki-client