Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa
File:                     85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa (raw, json)
Hash identifier:          QTfSojQiMX4/5WpIcAqxM3k4ALUGPUKYLC6k4N5aex4=
Subject key identifier:   59:A9:0F:3B:BA:EC:6B:6B:D5:E8:64:8D:94:07:C3:9B:D3:B7:F5:24
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D7CCFE0814026F5D43293F880
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2605:4300:3903::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e0:81:40:26:f5:d4:32:93:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=a3c38509-43e0-4e58-86d0-c9991f692c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:16:52:3d:0f:d4:49:83:af:6d:77:92:73:
                    35:6a:83:7f:e7:10:38:16:cb:f0:53:bb:b5:3d:2f:
                    0d:75:ab:46:65:21:36:dd:1a:07:33:81:f5:6a:90:
                    58:1b:d7:5d:d1:3c:6c:17:66:c1:38:c8:d5:c3:52:
                    69:dc:c6:56:bd:22:c0:95:7a:69:01:7f:02:3b:96:
                    46:d5:94:70:0d:92:f6:b7:1f:b7:ef:82:b7:d3:56:
                    ac:db:7f:4d:b1:74:80:64:49:de:d0:51:50:b0:2f:
                    80:48:10:fc:2e:b8:f2:fb:19:ee:6c:21:22:96:19:
                    ff:b8:a1:85:97:58:ab:36:db:a5:57:41:95:cd:a6:
                    9d:ec:e3:bb:d2:1e:f5:eb:42:19:60:81:e7:9d:8d:
                    73:91:eb:3b:dc:dd:0e:a9:01:ab:d3:85:de:23:2e:
                    23:6d:b5:38:95:97:41:7e:cf:4e:5d:b6:66:db:a6:
                    64:a2:59:20:da:f7:e4:74:4c:18:af:71:d7:6b:f9:
                    db:8e:28:27:b3:2b:33:bf:53:18:01:ec:4b:b5:7e:
                    56:3a:a3:87:e9:ae:59:31:a2:32:e4:7b:2e:b4:6d:
                    33:77:c2:85:04:02:6f:5a:1a:91:13:7d:37:1e:af:
                    b3:0e:b4:11:7d:f1:21:c8:b7:70:84:af:b3:0a:3e:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:0F:3B:BA:EC:6B:6B:D5:E8:64:8D:94:07:C3:9B:D3:B7:F5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3903::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:06:1b:46:90:14:c8:ca:69:36:9d:08:c1:92:a1:2d:dc:a4:
         73:99:47:07:7f:8f:58:bd:c0:f5:e6:d1:19:a4:0a:71:21:1a:
         7d:74:5a:7d:1f:f3:a4:1b:d6:d9:57:d3:ba:91:f7:d2:f8:b9:
         9e:66:03:91:68:28:8f:57:93:41:ba:a8:ee:88:ff:b5:bf:95:
         d7:ca:ea:09:76:28:4d:41:10:d2:3d:36:d5:f5:07:7f:93:9c:
         a9:7b:3b:8e:4a:95:ae:bf:5a:d3:6a:56:0f:bc:40:12:ff:41:
         df:ca:c9:fc:70:ab:d7:e6:7f:91:83:cb:54:36:07:cc:6c:7e:
         65:67:c8:ea:5c:77:b4:4d:f9:a9:fa:14:a3:63:2e:37:27:26:
         bb:a6:46:95:08:15:68:25:6b:de:63:73:03:00:35:c4:84:42:
         73:a4:e9:63:ba:d0:0c:8b:2e:47:e0:ed:5f:d2:b0:4b:03:24:
         7a:e4:b3:3d:3e:d4:ee:01:a6:89:cf:cc:a9:8a:5f:9d:a7:ef:
         ae:72:94:60:3d:ba:35:a7:f7:4f:cc:f4:07:58:1d:37:56:8f:
         d4:c1:10:d3:b3:79:c1:4a:8b:32:8e:3c:a5:af:46:fc:cc:61:
         a7:bc:01:33:e9:7a:cb:cc:00:9c:b7:8a:3c:16:6f:ff:0c:49:
         3e:87:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:08 2026 by rpki-client