Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
File:                     92ecd3af-616b-30b8-8f04-b100fd223035.roa (raw, json)
Hash identifier:          WyK5bCRvMN9U9yCBDmkZr6GnN8606ZzjMCD42YutGig=
Subject key identifier:   CC:02:08:64:9E:33:68:72:20:11:54:42:FE:2E:0F:01:ED:8B:C8:9B
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584E18AEEF8F0FA03889AAECC600
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     2728
IP address blocks:        2605:7b80::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ef:8f:0f:a0:38:89:aa:ec:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=a927d904-984e-4231-ae81-c070963780a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:21:af:e5:10:82:3e:2a:2e:16:98:ff:07:
                    d3:b4:4a:3c:38:9e:28:66:4e:3f:c4:7e:d4:18:ce:
                    09:31:20:82:23:8e:c6:e4:36:29:e1:8e:c0:0c:91:
                    87:dc:d1:c1:ca:fb:89:9d:f1:6c:f0:a0:5b:0e:6b:
                    70:24:00:04:69:87:fd:2d:8d:60:c6:27:18:3a:31:
                    e4:e1:74:70:04:4d:7d:2c:04:fc:9c:e7:05:6b:3b:
                    64:92:d9:67:a9:1e:8d:bb:3a:5f:27:d7:15:d7:f9:
                    7b:62:07:aa:ac:a5:55:54:82:9a:11:db:05:29:1f:
                    35:06:97:ca:1b:e4:93:f9:3b:5f:d2:37:d0:6a:34:
                    43:89:3a:fb:0d:a1:5d:82:cb:04:84:14:c0:d4:8b:
                    a4:40:4a:e3:52:df:2d:8a:39:3a:35:39:33:ef:56:
                    bb:be:8a:df:43:56:01:46:b8:77:b7:a3:b7:80:d0:
                    96:ab:98:b0:18:b6:9d:39:e7:84:75:d4:a6:71:0a:
                    8d:23:cb:ea:cb:08:17:39:9c:20:cb:65:01:3c:5e:
                    91:5d:19:87:23:c4:12:d4:29:1b:f2:00:d1:08:dd:
                    2b:ab:06:71:e0:f0:8a:03:36:c5:27:4f:71:8f:66:
                    e3:f4:61:58:33:69:9e:46:6f:79:fd:ea:7d:5f:51:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:02:08:64:9E:33:68:72:20:11:54:42:FE:2E:0F:01:ED:8B:C8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:07:0b:c9:50:68:50:4e:6d:bb:39:2c:de:cc:87:23:22:
         23:79:88:d5:4b:15:fa:43:33:48:45:f0:b8:0a:a0:ae:46:8f:
         c6:b0:10:d8:21:a1:06:8c:74:5d:3e:85:c4:f0:77:32:e1:9f:
         21:3e:46:9c:1e:e9:2a:0a:74:4b:00:52:40:e5:b8:19:ac:99:
         f9:48:50:ad:e2:f6:4d:d9:08:a8:b2:e9:04:3f:d4:45:2b:6b:
         bd:36:f6:3d:67:40:96:d0:4e:a8:b5:7f:e5:3e:b5:78:95:92:
         13:78:1d:a4:a0:c3:96:30:6d:8f:ff:78:fe:f0:65:40:28:0e:
         7f:03:54:a5:62:b1:5f:18:4e:f1:11:43:7b:80:1b:89:d2:ee:
         7c:27:7c:60:e9:ac:45:84:bb:93:7a:74:a5:2a:ba:4d:ae:c2:
         ed:e2:fb:81:4d:a4:c5:5b:42:f4:81:bf:e5:52:3a:62:aa:89:
         5d:59:5d:eb:2b:24:94:da:92:fe:2c:7d:e7:1a:a9:37:fe:24:
         0c:fa:f1:a4:19:64:cb:5e:ad:0c:86:c8:26:fc:88:72:25:39:
         55:0a:2f:e1:35:66:fd:b5:f4:1f:61:b8:7e:95:f3:01:fd:82:
         89:89:81:00:11:35:7d:89:9e:d9:e8:40:48:1e:77:10:5c:97:
         41:0c:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:37 2026 by rpki-client