Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa
File:                     701df298-19b8-383b-a438-a2b9a42d4aa8.roa (raw, json)
Hash identifier:          pIkekD/wQAG4OQqNduTITktU/Rc5hjhGP9V/UihMZEU=
Subject key identifier:   87:42:36:24:31:61:FF:82:15:EB:F3:54:B0:DA:EC:CA:25:14:BF:0B
Certificate issuer:       /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81
Certificate serial:       010D0C9F4328584DEF45D6E6FCF27C91C5FDE3C4
Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     62668
IP address blocks:        2605:c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:d6:e6:fc:f2:7c:91:c5:fd:e3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=41bc78ca-4c7f-4d54-9dfc-34e404faedca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:44:f2:dd:1a:78:d7:5d:ed:57:03:5a:9c:
                    34:cb:67:18:d1:d8:c4:96:30:83:80:40:84:94:49:
                    58:5e:48:fd:75:fe:5d:7a:62:aa:38:e3:d4:6c:9d:
                    18:6b:ce:3b:11:ae:fa:10:24:4f:81:3e:b3:c3:86:
                    83:e6:a1:3e:93:c8:01:d2:b8:df:36:cf:86:64:c2:
                    fb:b1:de:9c:06:c5:95:cb:41:1c:e9:c3:12:9b:4e:
                    24:f8:69:62:db:6b:68:2c:79:a8:a0:9b:ff:57:ae:
                    98:fb:2e:de:78:9f:7b:14:04:65:5e:83:6c:93:18:
                    56:08:95:55:38:13:9f:5d:c4:a8:6a:a5:63:1c:62:
                    57:42:22:53:33:ee:b1:a2:fc:85:be:61:a3:79:cf:
                    54:4a:e1:67:12:9f:92:86:d5:c0:21:13:ec:20:db:
                    64:bd:09:96:1d:0c:aa:bd:31:94:6c:43:17:0f:9f:
                    f4:73:9a:e1:c8:c6:84:f4:7a:56:da:73:82:19:ce:
                    91:26:4f:51:fb:25:8e:6f:29:bc:fb:96:0d:94:45:
                    d1:ff:d2:30:6a:df:35:a1:e2:31:e3:6a:7e:aa:b8:
                    52:3c:ec:7e:a9:00:d8:8e:79:f2:a2:63:78:2e:3d:
                    0a:bf:a5:c4:2b:25:d9:a3:47:b3:02:16:7c:71:e0:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:36:24:31:61:FF:82:15:EB:F3:54:B0:DA:EC:CA:25:14:BF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl

            X509v3 Authority Key Identifier:
                keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:97:e1:c9:37:36:33:0f:a4:b5:06:ad:b6:53:ee:a5:1d:3a:
         87:85:75:78:3b:f9:7e:f7:ae:d5:9c:88:9d:21:fd:ce:ba:b9:
         5d:26:f7:2e:75:ae:d3:13:b9:5b:95:25:40:35:b4:2a:16:30:
         31:36:cb:6a:b2:16:20:d8:52:a2:62:67:10:ae:11:3e:dc:a6:
         04:6f:1f:cc:47:cf:bc:64:ae:7f:f9:88:a2:3d:3a:55:31:72:
         fa:2e:24:a5:37:95:05:12:3e:2f:14:29:52:75:0a:27:53:9b:
         13:43:84:19:54:a2:6c:e0:a0:3d:e1:68:21:6c:b7:91:a1:4d:
         a8:77:23:82:08:f0:26:c1:d8:cb:9f:75:91:41:f0:28:2a:29:
         ef:a7:72:f3:3e:ca:0f:77:2b:ce:df:33:1f:11:65:1c:42:b8:
         7c:35:ea:62:f0:0c:41:87:b0:8d:7d:49:0f:d6:ab:d8:db:a9:
         cf:da:bc:a6:08:ad:09:e3:62:4c:b1:c9:db:27:f3:b6:36:3d:
         69:98:27:28:f4:6c:d6:62:7b:d6:6f:00:40:03:29:3e:9a:69:
         44:3f:0b:16:29:5a:5f:41:40:07:e1:bf:1a:29:c5:23:b4:9e:
         17:dd:e2:ca:a8:b0:a3:83:37:8a:a5:c7:e4:e1:97:6d:68:0c:
         22:7d:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:26 2026 by rpki-client