Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/866e7380-eac5-3df1-9f3c-76c36568f7bc.roa
File:                     866e7380-eac5-3df1-9f3c-76c36568f7bc.roa (raw, json)
Hash identifier:          Hw3C/pogVXAYp9ZTztbGwodb/w8YcF9nhibDEMeLgmE=
Subject key identifier:   A2:6B:E8:64:05:D3:68:A1:41:20:BF:89:9F:21:E7:78:6B:33:55:8C
Certificate issuer:       /CN=e0016267-dc0a-4a90-a925-951bf1a98788
Certificate serial:       010D0C9F4328584D5234F45C37346E3AC896BA40
Authority key identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/866e7380-eac5-3df1-9f3c-76c36568f7bc.roa
Signing time:             Sat 28 Mar 2026 18:44:33 +0000
ROA not before:           Sat 28 Mar 2026 18:44:33 +0000
ROA not after:            Mon 11 May 2026 15:47:10 +0000
asID:                     401165
IP address blocks:        2605:2880:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f4:5c:37:34:6e:3a:c8:96:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0016267-dc0a-4a90-a925-951bf1a98788
        Validity
            Not Before: Mar 28 18:44:33 2026 GMT
            Not After : May 11 15:47:10 2026 GMT
        Subject: CN=349ecb77-1b73-4c16-ba4b-36e4945232d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:52:f0:98:80:32:33:d5:88:a0:d6:d3:f2:
                    d9:a5:24:ea:77:4f:f2:2c:21:f1:38:40:3b:6c:54:
                    09:09:09:7c:70:7f:5f:60:88:b9:96:45:bd:02:72:
                    30:d9:fc:30:23:ea:e1:0e:09:d8:32:88:9a:bb:d6:
                    2e:4e:e0:61:18:db:06:9f:c6:00:a2:6e:d6:b1:a0:
                    0b:df:cc:b7:e6:c8:20:b4:0f:37:28:6b:10:fb:33:
                    c1:a2:ea:74:fc:e0:5e:6c:5a:4b:26:bb:7a:5d:29:
                    5f:cc:fc:81:19:c3:37:eb:a4:60:b6:09:77:b5:2d:
                    74:ca:c2:df:e1:2a:33:da:05:91:00:7a:3e:c1:30:
                    53:6f:dc:c3:e2:ec:46:17:a4:c4:9e:6e:0f:49:cd:
                    bd:84:7c:1e:93:52:21:9b:75:49:62:5d:7b:f3:36:
                    15:c4:eb:a7:1d:58:0e:4a:30:bf:b7:42:51:26:b5:
                    95:3f:e7:84:3a:f0:ba:95:33:17:67:ca:6d:57:9b:
                    4b:b4:e8:45:9b:31:2e:8d:40:1f:8f:5d:01:e9:d4:
                    8a:eb:ae:45:85:cc:5c:6b:3f:1e:59:d6:10:b7:71:
                    ed:e0:da:80:a3:c8:b9:bc:5f:e9:3f:39:a9:95:bb:
                    d0:49:87:86:f5:e5:4b:a6:e8:ca:48:ab:6f:18:fc:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6B:E8:64:05:D3:68:A1:41:20:BF:89:9F:21:E7:78:6B:33:55:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/866e7380-eac5-3df1-9f3c-76c36568f7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl

            X509v3 Authority Key Identifier:
                keyid:66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2880:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:1c:89:c9:d3:3a:e7:48:62:b7:ae:71:99:51:7b:35:47:
         c9:37:6a:de:8b:76:4c:5c:a4:80:ff:ca:0c:0d:3c:a3:d4:7c:
         86:75:14:8e:67:34:65:db:12:3a:57:02:19:1c:ad:d2:33:e8:
         d4:fc:18:f5:15:58:8b:2d:b7:ec:c2:31:73:85:c7:65:c0:b1:
         8f:e5:85:6a:a7:97:ac:73:0f:41:b6:21:ab:f3:33:06:5b:e0:
         3d:68:66:de:0b:c9:66:53:c9:13:4d:43:9f:8c:23:79:7d:4e:
         28:6f:d7:c5:b3:5b:47:af:57:17:53:ae:94:de:cd:24:dd:05:
         b4:69:ef:70:0e:f9:67:d4:9c:61:8e:8f:cf:ab:48:f3:36:ea:
         88:f9:96:aa:e7:c2:4d:f5:0d:85:8b:d2:c8:45:72:80:7d:40:
         76:8b:06:f0:dc:5e:6d:f1:ee:4a:ab:dc:81:15:2c:38:c9:17:
         9a:0d:59:c7:2a:4e:d5:8e:78:de:70:bd:b4:1a:af:d8:9c:e7:
         45:be:03:57:31:15:c1:ae:6d:94:85:e7:7a:ac:24:88:41:c0:
         a8:3e:59:11:32:49:9b:8a:09:5b:81:f7:9c:00:d7:af:60:cb:
         d6:b6:52:07:2b:81:4f:6c:88:60:47:75:d6:d7:2f:8a:d1:41:
         cb:c4:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:06:37 2026 by rpki-client