Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa
File:                     84aceef2-689c-343a-9a23-0b785ea8f555.roa (raw, json)
Hash identifier:          0eJ0/pdD+iyEoB1vhmWl+rHlUwJEN6ZHlMGQOLQodW4=
Subject key identifier:   4B:D9:AD:36:91:DD:6E:0E:B8:7D:DB:88:4E:AC:57:9C:C4:0A:A9:D8
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584D703FD6720EB058E3E3174680
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     12189
IP address blocks:        2607:6000:500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d6:72:0e:b0:58:e3:e3:17:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=7d5927d9-457d-4017-9613-cc2baee47084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:9b:ee:d0:d0:26:70:ed:ff:53:37:f4:4f:
                    e4:0f:26:27:76:9b:6f:86:66:b0:a6:e6:5d:3c:6b:
                    1c:cc:eb:56:d3:fc:b7:31:47:a2:65:a8:fb:9c:df:
                    8a:c1:c8:8d:40:69:6a:24:aa:df:aa:5b:96:51:df:
                    71:53:9c:84:a9:7f:5c:55:8f:2a:b4:bc:b9:a9:81:
                    4d:4f:ed:ff:eb:b6:ee:5d:77:5d:9b:3d:ec:73:bf:
                    35:38:ca:c9:2d:4f:28:5f:a3:cc:4d:71:6d:d5:cb:
                    b1:f9:e1:ab:75:ec:3a:9b:c7:37:d4:fc:8b:f2:0a:
                    6c:39:fa:30:fa:b9:fc:91:4f:af:af:aa:26:85:6b:
                    db:b2:c0:ec:91:18:d9:0e:f4:1a:b8:db:61:b3:1b:
                    57:2f:0f:77:d5:3d:85:36:fe:5e:bc:bd:18:d3:54:
                    61:45:1d:e6:11:40:8f:5f:e7:46:63:f3:7c:0c:66:
                    70:50:d1:86:5e:9b:2c:5c:8f:d9:1d:29:50:a7:3e:
                    17:c9:ea:3a:62:c0:39:e6:81:97:cc:8e:f1:31:ee:
                    23:d3:4d:0f:e2:7f:e2:67:a1:20:f4:c0:4d:de:0a:
                    c0:65:ef:4a:aa:62:95:f3:fd:20:d8:08:85:f1:99:
                    67:cf:cd:61:76:dd:99:f6:ab:56:26:24:b4:e3:52:
                    13:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D9:AD:36:91:DD:6E:0E:B8:7D:DB:88:4E:AC:57:9C:C4:0A:A9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6e:2c:c0:37:56:fb:a3:19:c3:a2:92:cd:d1:a5:79:8e:6d:
         b8:d7:bd:16:af:a6:c9:82:01:3c:d9:6c:47:77:19:3c:18:8b:
         27:53:b5:44:36:3e:bc:86:3d:61:13:19:c6:1b:00:a6:36:a3:
         99:86:34:93:d6:8f:9b:c9:24:be:5d:fa:28:64:d7:b8:d9:2d:
         1a:e2:72:3a:a7:1d:18:e6:da:a1:cc:69:70:44:91:3a:5d:c3:
         69:e7:79:1c:39:68:0a:84:fa:ec:ce:3f:91:e4:e7:9c:e4:ba:
         a5:68:17:c9:85:09:63:15:69:e6:24:27:5e:96:51:ca:11:9f:
         7a:06:38:2f:d4:2e:7f:72:41:38:bc:fa:fc:05:b4:43:87:c6:
         f7:d8:a7:ca:bf:a4:73:3a:bb:b1:e3:4a:2f:b0:3e:89:8d:49:
         d8:e4:27:ac:e8:e4:c8:e2:92:d9:a8:09:8a:00:84:8c:17:b8:
         47:39:60:14:33:0c:47:e8:59:32:85:ae:15:8d:06:a2:45:20:
         56:e0:12:64:d7:2b:18:1a:df:62:66:13:6d:17:13:02:fd:eb:
         9b:6f:82:c4:44:c9:2a:d8:d4:db:94:03:15:19:06:8a:aa:88:
         99:b6:c7:c8:7d:04:d2:ca:98:64:fb:ed:ab:1b:db:46:28:7e:
         61:f2:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:34 2026 by rpki-client