Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f767dc5d-c470-394d-bbeb-1ea0cd551ba2.roa
File:                     f767dc5d-c470-394d-bbeb-1ea0cd551ba2.roa (raw, json)
Hash identifier:          +SakXv0rUT8kliws3yTh0pYS5Zk6+kalsuisnuct2w8=
Subject key identifier:   88:B4:C8:8C:11:0C:68:C8:2E:75:2F:79:78:BB:22:2B:05:2A:B0:59
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584CCBA7516F560EFEF0D9CDC6C0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f767dc5d-c470-394d-bbeb-1ea0cd551ba2.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2605:dd40:8260::/44 maxlen: 44
                          2605:dd40:8570::/44 maxlen: 44
                          2605:dd40:8700::/44 maxlen: 44
                          2605:dd40:8880::/44 maxlen: 44
                          2605:dd40:8990::/44 maxlen: 44
                          2605:dd40:8f00::/44 maxlen: 44
                          2605:dd40:8f80::/44 maxlen: 44
                          2605:dd40:8ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:51:6f:56:0e:fe:f0:d9:cd:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=8256d015-3fbe-47b1-aa99-83df740a4c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:21:5e:a1:49:3e:07:40:2b:9a:37:d0:3a:
                    95:4f:ef:8d:65:f1:f1:b0:a0:bd:16:2c:a0:02:c6:
                    47:fe:00:ea:e0:15:f2:9a:39:6e:17:76:3e:73:49:
                    53:f4:ce:90:cb:ca:2d:d6:d0:66:b9:4f:44:28:8e:
                    04:ea:f6:7a:24:ba:3a:db:2d:9e:9a:e5:66:db:c4:
                    9f:7a:35:42:73:8e:c5:92:51:76:be:5d:24:a1:dc:
                    ae:1e:12:86:c8:3a:fb:a6:5f:e8:1b:71:70:1c:0d:
                    9a:d4:c5:ad:d8:55:29:4c:ee:cd:b2:68:ac:e9:17:
                    de:a6:a3:4d:18:58:b8:53:00:1f:5b:03:22:64:cc:
                    83:63:a2:5f:03:86:18:0c:c7:b5:96:dd:c9:e4:a8:
                    ea:64:1d:74:5d:8d:e5:61:59:5f:0f:d6:6b:29:37:
                    ba:50:79:6f:5a:eb:66:f2:b8:6d:84:5d:e0:50:6a:
                    e1:03:8b:9e:d1:d9:76:6d:8b:c5:96:12:70:6b:e9:
                    1d:93:ab:8c:7d:90:c7:83:c8:78:7d:7b:fc:11:e0:
                    71:63:f8:aa:82:93:f4:2c:a7:33:b4:90:79:5a:7f:
                    6a:4e:ef:74:f3:f5:71:d6:15:e3:c0:e0:da:fb:48:
                    27:a7:0d:bb:12:2b:75:af:a4:ee:d6:e9:19:6d:62:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B4:C8:8C:11:0C:68:C8:2E:75:2F:79:78:BB:22:2B:05:2A:B0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f767dc5d-c470-394d-bbeb-1ea0cd551ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44
                  2605:dd40:8570::/44
                  2605:dd40:8700::/44
                  2605:dd40:8880::/44
                  2605:dd40:8990::/44
                  2605:dd40:8f00::/44
                  2605:dd40:8f80::/44
                  2605:dd40:8ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:00:09:47:0d:1e:81:ff:12:90:00:e5:db:12:cc:35:c5:
         34:c5:09:af:17:fc:31:67:8b:c4:39:2c:f6:d2:87:13:1a:95:
         71:be:aa:bf:3b:66:bd:f2:53:7e:c6:89:29:07:0b:4d:a2:07:
         80:b8:c3:d6:dd:d8:4c:85:0f:72:79:c0:7e:9a:3c:31:d4:6f:
         9a:3f:c5:93:c0:cf:46:27:3c:b9:43:1f:1f:9c:3b:b1:d8:88:
         81:45:4e:d4:af:11:fd:35:2f:f7:aa:7b:09:16:e7:58:fc:10:
         6c:38:88:f0:ce:df:85:7a:93:c9:40:7c:b2:13:9a:d6:b7:61:
         03:85:69:3e:60:40:fb:29:de:2e:66:bd:48:98:b4:16:f6:9f:
         ee:d1:ec:71:f7:d8:c4:ae:67:6b:12:54:ed:24:fd:82:d2:01:
         03:05:94:34:17:d8:f7:05:89:97:0e:95:67:e4:19:09:a9:d6:
         ad:88:36:64:ae:09:c8:4d:50:2f:a7:c6:8e:fa:20:b0:36:92:
         0e:ba:65:73:18:3e:e5:7a:f9:df:dd:5a:06:91:e0:2c:68:9d:
         e9:c4:aa:b5:8a:82:63:da:f7:7f:61:44:d9:90:d1:72:dc:b6:
         ae:25:43:b3:71:e3:00:55:7b:e3:7c:8c:5b:ef:f3:ea:08:67:
         fd:12:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:54 2026 by rpki-client