Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa
File:                     ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa (raw, json)
Hash identifier:          Mpf3PFkqGNOOMpsuUZ9X+xeHHEWw95V6l0mMKVbStsk=
Subject key identifier:   FD:5F:31:D6:71:8F:D9:48:13:D3:6C:1E:E6:14:F5:F7:B8:C1:E4:73
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584D5E1A50684141C984E0CFDD80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     212105
IP address blocks:        2605:f440:beef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:50:68:41:41:c9:84:e0:cf:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=c5585569-275b-48e2-8390-34ade6efafad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0b:ab:82:7b:49:e5:6b:88:bc:e5:d0:f1:44:
                    f3:ee:e2:a4:62:42:5a:b7:cd:6b:e9:5a:23:87:01:
                    2f:0e:c1:d4:d3:a0:da:cc:d9:64:b2:53:07:ae:43:
                    65:9a:c6:7f:1a:cd:84:8a:a8:63:62:46:89:7e:2a:
                    fe:91:12:f3:dc:6b:6e:21:25:30:ae:0c:fa:5a:0a:
                    e2:46:03:8c:ec:5b:41:a8:11:79:ba:73:b9:77:2a:
                    65:49:22:2c:65:8d:6e:80:13:40:07:d3:3e:03:7e:
                    90:3a:fb:e8:b0:aa:dd:8e:9d:87:c8:39:ef:78:85:
                    30:fc:38:29:8a:4f:c6:c3:33:a6:9a:5a:6e:92:f3:
                    f6:b8:fc:40:13:33:e3:2c:43:64:88:ba:75:74:09:
                    77:b5:c6:31:25:73:76:9f:d3:3c:f9:b6:86:9d:04:
                    42:e7:f5:8e:e1:ec:5c:a2:fc:66:1b:c9:2d:5c:f6:
                    7a:4d:bb:59:72:38:a3:03:82:3d:10:d0:59:1b:62:
                    7d:5b:69:b0:18:59:6a:b1:c7:f1:13:18:86:7d:d7:
                    29:87:39:dc:72:9e:86:1f:03:f5:24:de:4b:39:ba:
                    75:1c:e3:59:f7:b4:dd:40:b1:99:13:b4:f8:9c:ea:
                    32:06:40:18:8c:0e:a3:d9:19:41:30:cc:a7:26:25:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5F:31:D6:71:8F:D9:48:13:D3:6C:1E:E6:14:F5:F7:B8:C1:E4:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:beef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:d9:82:aa:0c:a8:05:85:6b:2a:89:7f:05:04:5f:44:bc:
         d2:bd:b4:fa:4e:21:88:21:c6:7c:a9:d8:27:aa:b1:bc:7a:bf:
         af:a0:b2:be:b2:24:87:c2:5a:26:20:6f:d2:a2:38:91:b1:83:
         4d:b6:8a:9f:fc:97:c6:72:2a:fe:9a:2b:2e:b5:01:52:8d:3b:
         68:a6:cc:bf:be:ee:73:5a:5f:17:a1:4c:25:f5:fd:b5:2c:de:
         8d:f1:85:ba:84:06:af:a5:39:c5:88:d3:72:f5:0a:1a:5b:53:
         74:81:b4:2c:80:2d:bd:7f:d1:2e:61:35:7c:3a:04:0b:4a:ba:
         c5:e7:f2:6d:85:c8:49:42:8e:ea:9c:a4:f9:69:fe:6d:18:44:
         62:88:73:7e:1f:5b:10:1f:67:59:83:71:91:34:05:49:0a:d8:
         fc:aa:40:aa:a4:42:8d:f6:69:bc:00:14:10:5d:a6:c1:65:1c:
         cd:59:f8:f2:3e:a9:b0:60:f9:c0:a2:2b:ff:3b:bf:a2:94:e5:
         a4:2e:14:fe:1f:c1:05:2a:f9:9d:37:e2:df:de:2b:00:af:19:
         f1:48:9c:36:8c:6a:c0:87:e6:52:8b:44:ba:37:be:ae:3b:ff:
         b8:5a:f4:b9:8f:60:43:fe:93:c6:86:c8:65:fc:25:00:d1:c4:
         50:50:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:06:21 2026 by rpki-client