Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa
File:                     b9aad819-313c-3590-a1f8-29719cfeb007.roa (raw, json)
Hash identifier:          SPHu4GTrHNcxA+AdigVJ8XxzrdK/acjEJbuiWdqBC8A=
Subject key identifier:   75:39:EF:90:CB:72:31:4B:1B:D0:BB:0E:A6:9A:71:EE:DE:7C:EB:1F
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584E9EAFE47F0176992603FFB100
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     26383
IP address blocks:        2605:e440:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e4:7f:01:76:99:26:03:ff:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=6f9673b5-e369-47da-b2de-ca9e5f3b92b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f7:9e:a8:8f:9b:0d:a0:6b:f5:bb:2d:e9:c3:
                    a5:06:83:b7:a7:80:76:44:ee:c8:93:9b:0a:03:67:
                    35:0f:e1:30:2d:3e:a5:06:92:39:7e:24:57:3d:e0:
                    e0:a6:f9:af:0c:83:a8:ff:12:f1:77:ec:db:d5:de:
                    3d:0b:38:63:db:25:03:b4:c5:af:ec:6a:0d:57:96:
                    0d:0b:f3:74:47:67:c0:99:85:40:75:ed:36:6d:0b:
                    ae:6e:ec:71:f2:4a:3b:a5:61:dc:68:c5:6c:18:62:
                    64:67:d0:ab:d2:4c:2b:24:8a:6d:6d:e7:bd:73:0c:
                    5c:34:67:c3:99:80:1e:9e:ae:f9:aa:ba:09:fc:bd:
                    eb:2d:96:79:cc:66:1d:eb:9d:6a:ac:c7:a9:f0:61:
                    67:c0:7f:92:fc:a3:41:8d:e2:9d:00:c2:5d:6a:36:
                    eb:6d:64:48:c3:9b:15:44:04:e4:e4:e4:0e:80:11:
                    2a:81:c0:c4:88:b2:7c:a5:20:9f:bf:c5:41:9e:8f:
                    be:f6:8c:a8:23:69:31:eb:4b:44:ea:64:eb:33:3c:
                    49:96:c6:cc:2a:bb:8d:ef:5f:7c:69:13:43:7a:8f:
                    33:e3:8d:41:58:ba:3a:b4:a6:d2:0f:08:41:58:d1:
                    fb:5f:1d:1b:22:eb:f6:b3:c7:9e:aa:39:4d:8c:6a:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:39:EF:90:CB:72:31:4B:1B:D0:BB:0E:A6:9A:71:EE:DE:7C:EB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:96:a2:38:43:1d:63:22:1e:88:8c:ed:5a:7c:07:20:5a:
         d6:bb:6f:eb:37:82:f5:17:df:b9:fa:80:d2:ab:25:b7:6d:78:
         77:75:a3:6d:e2:c6:43:58:6e:9c:9f:7e:6c:90:e3:dc:a9:24:
         4d:ff:bd:13:98:6c:da:52:f7:2b:19:6a:be:c8:91:7d:28:34:
         15:ca:c2:8f:9e:5e:fd:dd:86:1a:88:7d:78:d6:15:c6:4e:40:
         db:00:a7:f4:0b:d4:26:63:2e:e7:f0:92:83:5e:cf:14:6b:a7:
         aa:70:44:b0:35:1e:0b:96:90:41:b8:13:dd:23:00:62:45:25:
         87:6e:7c:7a:dc:ab:ac:87:00:cc:99:75:a6:5e:f8:da:b7:57:
         a4:ca:cf:aa:3a:d4:56:da:e7:48:c0:23:99:1e:ba:9a:b9:28:
         5e:0c:25:ef:29:c7:2d:82:06:e4:e9:64:4b:78:08:38:b4:a7:
         dd:44:76:90:d3:f6:37:0a:c2:10:b4:e9:ae:af:65:1a:f5:1f:
         07:6c:79:9f:d5:ce:12:07:c4:50:35:20:00:e9:38:b9:b8:3c:
         81:78:b5:10:1d:80:9e:d0:c8:eb:5f:a5:41:3d:93:79:c5:d6:
         2e:78:a5:d0:0b:93:82:db:d2:34:f2:95:0f:13:71:46:22:e0:
         41:87:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:37:04 2026 by rpki-client