Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/70e1f1c6-2a56-342a-b01e-5cc78fc19658.roa
File:                     70e1f1c6-2a56-342a-b01e-5cc78fc19658.roa (raw, json)
Hash identifier:          /iKV0usvIzPrF8bLk/Akj94uwSSIRa2LKCwHtPaUL40=
Subject key identifier:   69:62:72:BC:BD:AE:DD:DE:98:E3:84:6F:4B:92:BE:A9:A7:E0:80:F5
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584D7E556D37AE5530297B7FAD80
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/70e1f1c6-2a56-342a-b01e-5cc78fc19658.roa
Signing time:             Mon 13 Apr 2026 14:05:33 +0000
ROA not before:           Mon 13 Apr 2026 14:05:33 +0000
ROA not after:            Sun 12 Jul 2026 14:05:33 +0000
asID:                     26383
IP address blocks:        2605:e440:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:55:6d:37:ae:55:30:29:7b:7f:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Apr 13 14:05:33 2026 GMT
            Not After : Jul 12 14:05:33 2026 GMT
        Subject: CN=26492b91-ffe1-423a-a808-2a974429a811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:c8:16:35:cf:94:48:36:c5:44:ab:fc:ac:
                    0b:2f:b0:f4:79:a6:95:b8:50:ed:f5:64:4c:58:12:
                    ae:1b:87:f8:1b:46:84:30:93:5c:6e:b4:5f:1a:ac:
                    50:ef:1f:42:c4:67:a5:d8:63:7e:ab:be:c5:29:c1:
                    7b:d7:b9:dc:83:b2:92:9e:fe:48:f1:fa:33:9c:c2:
                    df:63:c9:05:13:33:5a:e3:1b:75:0c:1a:b3:28:66:
                    22:05:ff:9f:a2:99:34:08:37:be:d6:56:49:58:c4:
                    54:f5:d2:53:0c:c4:26:0b:a1:ce:43:bc:7c:7b:35:
                    ab:e5:28:ff:98:95:ef:7e:44:b3:77:63:fb:8c:2e:
                    3e:8d:b6:dd:91:a3:f8:7f:84:62:ba:60:6a:ac:1b:
                    a4:e8:3a:50:59:c6:75:4a:21:32:c6:2f:fd:35:ae:
                    ea:cb:00:63:ce:26:97:c0:1d:c0:95:7b:e2:0f:43:
                    8a:51:56:32:46:81:f3:f8:23:38:df:38:eb:30:66:
                    a2:c5:83:b3:7e:ba:f5:06:5e:2b:9f:9a:ce:a3:66:
                    e7:07:00:6f:6f:15:e0:a8:a3:7f:76:40:7d:16:72:
                    4d:fc:e3:f7:9e:a6:08:5c:e3:48:dd:3c:93:46:d4:
                    56:3f:0b:44:33:62:06:95:3e:ec:3d:00:32:a5:a2:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:72:BC:BD:AE:DD:DE:98:E3:84:6F:4B:92:BE:A9:A7:E0:80:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/70e1f1c6-2a56-342a-b01e-5cc78fc19658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:83:5f:6f:e6:a9:a0:d1:77:b1:a2:8a:ae:8a:eb:85:61:40:
         15:fc:36:9d:18:9c:4f:b5:f0:c9:5c:59:14:87:55:5f:60:df:
         d1:e7:d6:fc:52:fd:27:53:df:c9:d6:ec:f6:7a:bd:6a:b5:40:
         bc:2c:e6:e3:0b:c4:9d:fc:25:5c:03:2f:46:ae:07:7a:d8:6d:
         e6:11:7f:18:e0:d7:82:a0:33:d6:8b:ed:a8:dc:fa:d4:3c:8d:
         67:04:be:2e:07:17:4f:69:27:39:dc:7f:e4:a0:68:03:d1:8b:
         27:92:88:8c:75:d7:4f:1a:f3:91:a9:2f:54:a3:80:26:c8:ad:
         9b:bb:13:66:1d:12:ec:e5:df:5b:38:67:78:77:4a:a7:f4:4d:
         b5:54:a5:91:37:08:3c:e7:b4:5a:ad:35:c4:0d:aa:a7:69:ae:
         1e:b9:2e:e8:69:81:db:bb:e9:60:76:d3:8b:9f:12:0c:58:88:
         b3:b6:c1:48:fb:38:88:0b:9d:36:f2:02:13:3a:0e:ba:e6:40:
         a1:a7:5b:80:07:ed:7a:7a:24:b2:78:8b:04:05:c6:69:39:ce:
         f5:84:d7:c8:07:42:18:9e:2f:5a:03:bb:fd:2c:f3:b2:65:69:
         96:b6:38:80:e3:23:e2:68:46:d9:c9:52:c6:2f:12:eb:4b:a7:
         31:be:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:45 2026 by rpki-client