Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa
File:                     41bef586-ce8e-33ad-8776-5277eecd884b.roa (raw, json)
Hash identifier:          cXQQS1DWZgoNSMEx97GPBrtQy0zC6Duh74DgI5C/uRc=
Subject key identifier:   EC:6F:D1:24:22:79:C0:1F:2A:9B:23:B3:A6:4B:4E:0C:AE:8A:40:76
Certificate issuer:       /CN=f81745fb-4da3-44f0-9b04-cbf9016913a0
Certificate serial:       010D0C9F4328584D571FA730999EE41F23782100
Authority key identifier: EE:48:D7:CE:40:6A:2A:BF:DC:16:F5:0E:FE:01:C9:ED:EA:D1:A1:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     54238
IP address blocks:        2605:10c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a7:30:99:9e:e4:1f:23:78:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81745fb-4da3-44f0-9b04-cbf9016913a0
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=fcabbfa3-f1ae-4f01-95d7-6ce15cb7caae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:17:34:cf:75:cd:bf:b7:ea:63:44:c7:cb:
                    ac:04:c6:6c:36:02:0a:71:8e:42:8f:b0:bf:17:53:
                    a0:94:2f:a8:bf:46:30:4f:6e:1a:12:ff:e9:33:58:
                    c6:fa:dd:71:96:54:1b:8a:2d:c0:0d:56:b3:a1:f0:
                    3e:fc:63:da:3c:e5:a2:fb:11:bf:06:1b:0c:18:8c:
                    dd:47:9c:5d:f0:40:78:d1:f0:ac:ab:38:c4:ba:16:
                    b5:4a:75:ac:89:d9:1f:83:c0:64:09:94:18:fd:08:
                    b1:28:53:7b:bb:17:53:ed:3a:5c:0a:e4:c1:ad:de:
                    73:4b:b2:7b:04:3e:97:e7:61:ca:ba:a9:40:62:03:
                    cf:38:71:c1:96:b6:97:13:c7:a7:36:47:32:53:57:
                    3b:72:7a:53:d5:d7:91:06:b4:59:d8:b1:ae:fb:5b:
                    57:64:6a:e1:a1:6f:43:f5:43:62:a9:47:4f:43:5a:
                    a9:e3:aa:76:f0:7c:84:af:bb:76:dd:7b:ac:96:46:
                    19:9a:b5:6e:e0:d0:57:78:1c:69:7c:5a:cd:14:c8:
                    a8:fa:44:cd:80:0a:51:b3:0d:37:7b:37:49:2f:d2:
                    a0:b9:08:61:55:7d:b6:0e:e8:cd:32:e0:e1:dd:ab:
                    eb:12:62:c8:01:5a:70:6a:68:00:90:f6:b7:dc:0f:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:D1:24:22:79:C0:1F:2A:9B:23:B3:A6:4B:4E:0C:AE:8A:40:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.crl

            X509v3 Authority Key Identifier:
                keyid:EE:48:D7:CE:40:6A:2A:BF:DC:16:F5:0E:FE:01:C9:ED:EA:D1:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:10c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1b:a9:6c:25:77:6a:71:b8:7e:8a:2b:7c:e3:24:42:78:5e:
         57:4f:22:05:91:d7:e3:80:3e:01:c0:a0:c5:75:8a:7f:41:87:
         48:54:70:69:c9:05:e6:48:e8:8c:c2:a4:22:ab:69:47:2e:c1:
         03:66:b2:33:f7:86:f7:96:7b:87:f0:ad:71:75:85:f2:82:cc:
         a3:a7:b5:7c:63:8d:f9:2c:28:78:4f:73:76:40:8c:79:fc:37:
         94:5e:10:09:80:88:b5:f0:6c:46:9f:ec:b1:53:cb:54:05:1b:
         63:5b:40:0b:f9:e6:ef:9d:30:0c:6d:97:a5:d5:74:a8:ae:f9:
         6e:e4:b8:58:1f:15:1e:4e:6d:fb:31:00:86:38:d0:e9:a3:5d:
         35:23:b5:2d:8f:9f:7b:9f:b2:03:2a:29:20:70:4c:f7:38:71:
         b0:3a:0b:01:4f:dc:42:90:a7:52:f7:0c:5c:ef:c1:15:4d:f5:
         65:c7:42:0a:a5:7b:44:21:ca:da:e5:73:6e:7c:38:83:e9:b8:
         bc:8d:c1:fd:4a:ae:d2:1d:76:5d:b3:8f:06:96:06:84:59:2b:
         80:84:a1:14:f9:54:65:fc:88:9b:1d:88:45:01:ad:e4:44:52:
         94:4a:54:96:69:d5:cb:76:01:c9:cb:94:1e:70:d7:ea:ef:07:
         f5:fd:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:52 2026 by rpki-client