Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa
File:                     ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa (raw, json)
Hash identifier:          11HynRsnPlPVr9hDg87kw6/nR1X6hq+gMpIuYd/qe8o=
Subject key identifier:   D7:8B:59:77:20:BD:CD:24:FC:E1:07:8E:05:7C:E7:8F:17:CA:3B:3C
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584D021798B176296EAD534DF1C0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     398549
IP address blocks:        2605:dd40:9005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:98:b1:76:29:6e:ad:53:4d:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=e52851b0-596e-4b16-a9fb-421474637017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:17:27:31:51:15:b3:51:cc:c9:10:cf:a3:
                    98:1e:b5:aa:5b:bb:35:65:25:f0:12:4a:db:54:6a:
                    56:5a:5f:cf:ed:61:eb:bd:1c:93:d6:64:8b:35:45:
                    6a:b5:11:d9:fb:d9:62:dd:f4:e7:b0:f1:4d:8c:cc:
                    8c:b7:3a:27:4a:1b:4d:a1:71:f3:f3:78:5b:85:e9:
                    fa:5b:f5:ad:7d:9b:f2:34:56:85:5b:65:a7:35:cc:
                    d1:e9:24:49:da:91:9c:a3:31:c3:eb:56:d7:9d:83:
                    37:2c:2b:7d:95:2c:2e:b9:f0:90:d4:27:2c:db:bb:
                    5a:42:a3:4d:6f:a3:f0:83:9c:9d:5a:04:96:72:0c:
                    a5:01:c3:25:31:c5:db:33:2f:3d:08:ff:b4:b0:df:
                    70:b8:ea:4e:24:9c:01:ee:54:7a:0a:a7:6e:3f:52:
                    2b:2f:70:08:09:cc:e9:1d:c5:bd:70:5a:60:dc:97:
                    7b:96:57:fb:1a:80:c5:ad:46:61:ac:58:0d:7c:a9:
                    d2:04:e2:c4:f1:6d:83:18:6b:34:f4:88:31:34:c7:
                    d4:63:2d:ac:7b:23:ad:bc:4e:92:be:e6:7d:c0:8f:
                    aa:37:98:86:bc:13:cc:c0:54:db:47:7f:04:8a:6f:
                    56:99:83:97:c8:13:e3:02:bf:1d:2b:01:0d:b6:fb:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:59:77:20:BD:CD:24:FC:E1:07:8E:05:7C:E7:8F:17:CA:3B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:10:bd:ec:3c:b0:af:aa:34:9f:64:e8:0e:a4:45:7d:b7:84:
         67:fb:9d:3b:a1:5c:38:32:52:9d:c0:3d:90:14:c1:12:4d:96:
         8b:39:72:c8:e8:77:f0:3f:05:bb:25:61:91:bd:82:15:ab:ba:
         83:b1:45:89:cd:42:91:53:54:32:2a:7a:70:9f:e7:90:b8:4f:
         41:14:cc:ac:f1:c1:3d:a1:b8:bb:f1:55:60:eb:47:0f:0a:2c:
         f9:0f:5f:47:5d:6d:6c:5b:93:8e:55:ae:c7:20:1f:ee:76:d1:
         b8:2b:1b:68:dc:2a:ab:a1:02:c9:a5:f5:47:4f:c6:27:bd:5f:
         c7:6d:83:30:2a:3b:ab:26:d5:73:b8:80:0d:60:69:b4:32:e0:
         94:07:10:d9:c7:f0:93:43:01:e7:e4:69:ae:38:23:b3:a5:38:
         7b:a4:d9:ad:c4:f7:29:29:77:a9:8d:74:14:35:6c:8e:a3:42:
         02:54:9d:bd:55:66:aa:83:fe:37:0a:34:1a:65:a1:c6:c3:1a:
         93:88:f7:de:d4:ca:0d:b7:83:c1:83:27:4f:ed:1a:35:2b:68:
         a5:04:d3:01:78:e7:81:b0:07:99:eb:22:9d:12:69:c2:86:8c:
         3d:b9:09:d4:da:db:30:ce:28:df:09:79:78:d2:79:83:91:4b:
         c2:a1:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:43 2026 by rpki-client