Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa
File:                     0da19735-40c4-31c3-a739-88e03152a67a.roa (raw, json)
Hash identifier:          m5j8wW9whgs7mLkMYoR22LuM4fdZiGvQcr5qeG4tF7w=
Subject key identifier:   25:34:6B:7E:0A:22:9B:F5:37:86:41:E8:73:11:73:A4:EF:FB:A8:D9
Certificate issuer:       /CN=0cb0d156-0906-405d-9cea-d599952bae65
Certificate serial:       010D0C9F4328584DD35B126F40748FB6A7A55080
Authority key identifier: 61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     20303
IP address blocks:        2605:ed80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:12:6f:40:74:8f:b6:a7:a5:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb0d156-0906-405d-9cea-d599952bae65
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=13394e29-62ac-46f2-82e5-8896b0286c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:e0:0f:1f:a7:c8:c8:e6:61:07:77:fa:4e:
                    f6:47:94:d6:1d:12:a3:3b:52:9f:63:43:a8:65:75:
                    73:7d:47:ba:69:ee:66:b0:47:22:98:57:24:ac:54:
                    1d:41:09:5d:89:00:34:50:35:9b:6e:d1:84:a7:6a:
                    83:0c:16:00:fa:9e:2e:a9:f6:65:37:6f:7f:a4:96:
                    12:40:d1:17:50:cf:a9:fa:49:a2:8b:7f:24:8e:70:
                    53:c8:4a:f4:a4:43:c5:a7:9b:77:ec:dd:64:82:1e:
                    4c:66:83:bd:1d:21:3a:2c:f6:21:c9:f2:3f:e7:d7:
                    5a:29:1d:77:8c:cd:48:fb:30:c9:61:bb:05:cd:bb:
                    7f:d5:63:11:74:ea:e3:0a:68:40:44:7c:e5:52:de:
                    42:49:07:84:25:f8:a3:d2:ad:5f:e7:51:14:68:15:
                    fb:06:ca:17:5f:b7:9c:a4:ec:f3:8d:7b:dd:0c:a6:
                    8c:c5:70:e4:79:74:2b:cd:35:4e:3e:1d:5b:2d:f8:
                    cf:45:53:48:ee:5d:0d:9b:53:6b:6d:f9:81:94:37:
                    b1:4e:4d:b0:f9:fc:66:d4:eb:a0:de:c5:de:12:8b:
                    e2:97:56:cf:93:52:2d:d9:fa:c8:f0:66:29:1c:0f:
                    f1:c7:c8:35:39:ab:16:b7:fa:2f:cd:5c:06:a4:20:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:34:6B:7E:0A:22:9B:F5:37:86:41:E8:73:11:73:A4:EF:FB:A8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl

            X509v3 Authority Key Identifier:
                keyid:61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:7a:27:5d:70:7e:6d:2b:47:2b:ad:a7:4d:d1:b8:a7:45:
         7e:7f:d7:7b:11:42:12:26:08:a1:f1:c0:98:56:66:1b:af:de:
         2a:73:3f:7f:96:fa:a3:77:85:a2:06:13:4c:79:10:c3:97:f2:
         9a:34:25:c1:fd:6e:55:7d:df:1a:a4:44:ec:c7:7f:fd:a8:0d:
         c5:4a:d3:1e:a0:94:5a:76:5e:6e:51:09:13:cd:7a:59:34:ba:
         65:51:89:3d:f3:c0:5d:e9:a7:7a:7c:88:43:cf:4f:6c:9d:5c:
         33:76:71:8e:cf:00:33:6d:a6:f8:c1:43:b2:9f:cd:36:19:72:
         f2:57:dd:27:98:40:bf:11:10:ce:da:69:d1:8e:8c:79:f5:80:
         19:7d:fc:eb:17:ee:6c:bd:8f:01:c5:c2:09:c0:dd:db:3e:cd:
         b9:26:e8:b4:cb:cc:7c:68:f0:2d:6e:80:a9:83:bd:2e:61:75:
         aa:6f:5f:5b:fc:9f:58:d6:5a:02:7e:5f:55:8b:62:97:aa:65:
         5a:d2:63:7c:4a:ab:0a:73:b7:1e:82:47:93:db:20:ac:c7:6d:
         6a:34:af:30:7a:71:21:64:f5:6e:0c:78:ed:7c:0d:9e:4d:10:
         dd:b2:99:65:ff:a1:1d:85:aa:35:08:8d:d4:73:db:d4:bf:97:
         e6:be:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:46:26 2026 by rpki-client