Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa
File:                     a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa (raw, json)
Hash identifier:          q+WJVspQiaX0VqcuT2k1HYUpWqP0vTZaF3j1xtBLdZY=
Subject key identifier:   06:E8:34:D6:41:B5:16:DC:AB:74:87:81:7C:2D:4F:26:E6:F5:4D:78
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5024E6B9CBCD7F5E43A14380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     8987
IP address blocks:        2605:4300:2c25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:e6:b9:cb:cd:7f:5e:43:a1:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=05500012-b040-4e9a-8ab5-86c936cd99e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:76:6f:6b:ed:89:df:b4:61:f4:b5:b6:4a:
                    09:66:c5:c4:d0:4c:37:c7:f2:6f:84:34:e6:9c:7d:
                    db:35:87:79:20:de:30:60:4e:b3:7f:a9:af:13:c0:
                    03:8e:84:e0:0c:cf:3f:1c:75:64:1f:47:2e:23:4f:
                    a3:5a:af:aa:e8:80:31:a8:16:35:76:eb:5e:93:aa:
                    01:07:95:b4:55:b3:de:02:71:04:14:65:4c:fa:e3:
                    c2:ed:c3:13:4f:f0:dd:9e:70:af:38:22:3c:87:11:
                    4f:f9:88:be:5e:24:5d:65:ac:05:8a:a8:c1:a7:3e:
                    f1:a6:50:23:fa:83:14:56:4b:66:82:75:41:b9:6f:
                    5a:98:72:99:c0:5c:45:79:0a:d4:15:76:7e:23:7a:
                    f8:a0:1c:32:51:9c:3a:9f:c6:67:b7:c8:da:ef:72:
                    af:a9:76:7d:70:89:1f:54:3f:de:d9:5e:0f:ea:66:
                    34:27:7c:7b:df:59:77:91:c3:14:7b:9a:65:f1:66:
                    36:84:b7:b8:a8:98:f1:13:65:24:99:da:64:80:9e:
                    13:0e:46:5a:27:be:8f:43:37:5f:39:15:a8:a7:7f:
                    7e:d6:47:c1:59:59:79:ea:c1:46:30:95:b1:6d:8b:
                    fd:77:71:e9:51:c5:e7:ff:85:97:a9:ac:59:61:40:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:34:D6:41:B5:16:DC:AB:74:87:81:7C:2D:4F:26:E6:F5:4D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b804b5-1f5f-3a12-a9c6-57c0684b4600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c25::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:66:12:a5:e9:be:bd:03:eb:6b:e8:a5:cb:5f:7a:80:d3:
         56:33:e4:ac:72:d5:a2:e5:18:32:e4:e0:44:0f:d7:d7:3c:a7:
         5d:b7:58:ff:0e:06:85:e8:4b:ed:b2:0e:15:e9:2e:39:d1:5d:
         49:6f:cc:83:3c:dd:d7:da:51:88:c7:8f:9a:2b:46:f5:b1:61:
         b4:d4:69:4c:8c:7b:3a:6a:c1:27:74:91:22:7d:c5:cc:f3:cb:
         75:9b:93:84:48:fb:3a:89:a7:13:49:52:00:92:99:e1:00:10:
         6f:01:29:7a:cd:72:5c:1c:5e:09:f8:50:a0:b8:bb:06:96:48:
         67:8a:a0:47:95:9c:5e:b5:a6:64:40:a9:b0:1b:86:29:03:d3:
         ab:4f:2c:c8:fe:95:1f:2b:b4:2b:07:43:1e:63:ef:70:fb:0f:
         20:f7:32:54:73:6f:34:9d:37:ec:b3:75:54:8a:76:37:9c:fb:
         7f:5c:59:94:9e:28:4f:36:f4:ea:77:ca:1c:6f:24:46:9e:cb:
         8c:93:a7:9b:20:0a:cf:09:5f:20:a5:f1:a9:49:d7:dd:84:a2:
         33:7f:81:f4:9f:f2:af:68:ee:ff:5b:8e:f0:78:f8:64:6f:73:
         86:9f:78:29:7b:53:9a:8c:28:b0:ba:0d:9e:43:16:70:d3:28:
         7a:14:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:47 2026 by rpki-client