Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
File:                     9df4a168-5353-3835-8ec0-fd968df0dab7.roa (raw, json)
Hash identifier:          LUKoPpm/F1xIeR3YFZ9xjbLi4GV0UnT1nweJFA2kKT8=
Subject key identifier:   05:85:5B:89:32:6E:5C:15:32:D3:A1:B2:13:B6:2E:0A:D9:A9:49:C1
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584D7E352E31F9D7E6C0C2EAB4C0
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     397763
IP address blocks:        2605:59c7:f081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:2e:31:f9:d7:e6:c0:c2:ea:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=faa3ad9b-d7c6-427e-830b-faa738591138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:28:47:df:9e:b7:23:f6:2c:12:18:d6:42:
                    f2:12:0d:b0:73:52:29:61:1f:d0:f9:ff:e2:18:8a:
                    74:c0:7f:47:9b:f6:71:34:e3:18:fb:be:be:8c:fe:
                    90:63:6c:5a:66:25:1a:2b:cc:c1:67:0d:0a:b4:b9:
                    ed:36:ff:af:9a:9f:cd:aa:53:e8:7c:79:00:a1:37:
                    68:fb:56:0a:a0:f2:ca:89:14:9e:39:d2:0f:7e:5e:
                    fd:51:dc:33:66:db:88:3c:66:0e:75:71:b2:24:51:
                    07:87:1a:95:39:6f:f6:5c:2e:46:0f:6c:7a:ea:cb:
                    5b:f3:8e:41:eb:52:db:93:e3:94:97:e0:f8:f0:1b:
                    73:69:94:c7:52:ea:c8:d2:af:c6:d2:71:80:c2:a3:
                    75:fd:7f:df:34:8e:04:ba:09:3b:41:cb:56:25:4c:
                    c2:72:c9:0a:b9:78:17:19:49:88:9c:e4:f1:04:61:
                    a1:d1:2b:2f:30:d1:13:62:0f:0c:64:75:54:8e:39:
                    c4:8c:ae:a4:52:37:89:b7:3b:bc:19:cc:c7:74:28:
                    92:5c:fe:dc:08:91:af:cf:a5:a0:78:d8:1e:6b:8b:
                    4b:b3:76:e6:f8:ee:29:31:ce:8f:ba:0c:84:51:57:
                    21:6d:66:a7:6f:22:80:90:fb:f3:53:7c:a4:ad:ae:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:5B:89:32:6E:5C:15:32:D3:A1:B2:13:B6:2E:0A:D9:A9:49:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/9df4a168-5353-3835-8ec0-fd968df0dab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:59c7:f081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:1a:f1:4c:a9:ac:9a:89:28:f7:cb:52:ee:aa:78:f3:d6:
         5a:44:fc:ed:5b:d5:c4:46:33:4c:35:c8:10:1b:38:f2:9d:55:
         c2:3c:35:6e:7d:97:ac:5c:e1:52:a1:1f:e9:fa:d4:17:6a:4e:
         3a:f5:c2:3b:bf:47:d6:d7:36:7c:0c:48:b4:68:f7:2e:9c:e0:
         28:67:13:63:5f:17:04:05:f2:6f:08:33:f6:36:d5:89:0f:c7:
         fe:0e:a9:34:20:a2:91:c2:1d:7d:36:06:3f:0e:80:5b:85:2d:
         e9:7f:48:76:4b:16:29:b4:ca:ff:22:6a:8b:f2:e1:21:f4:b7:
         99:74:89:a7:2c:f9:d7:ba:ff:7f:cd:3e:10:17:2c:57:58:f4:
         ac:16:9a:53:ea:33:77:4b:fd:91:93:4b:c9:c6:a0:c1:44:ba:
         9f:e1:a2:35:94:63:2b:f5:b9:2a:ae:e0:44:58:47:16:23:e6:
         5c:2a:c7:d0:20:68:c0:01:cf:28:be:a1:7f:56:44:83:fb:ff:
         0f:64:83:62:bf:0b:1d:be:8b:47:ad:1c:b0:c4:55:9c:ec:74:
         55:60:d9:36:58:47:f4:ed:16:18:cf:7a:a5:4d:ca:86:0b:48:
         1b:de:12:6a:78:c5:80:3f:f9:f2:52:1f:14:8e:d6:f0:e5:41:
         3e:84:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:42 2026 by rpki-client