Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa
File:                     7ecfd189-4826-3556-8c70-785555dca56c.roa (raw, json)
Hash identifier:          ksETKuafob9KQ8VtjixCIl/WsG82lkkMEa+RfUg4ZrM=
Subject key identifier:   33:D9:31:E9:39:14:54:79:BB:E9:A9:7F:A8:F9:8B:59:2C:58:8A:5A
Certificate issuer:       /CN=c3506568-5ea6-49b1-a753-c6ef423abb8b
Certificate serial:       010D0C9F4328584D65153B0485D7C49C97644A00
Authority key identifier: AB:EF:A6:40:22:51:E7:AA:0A:A6:98:76:48:19:56:4B:35:55:09:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     394142
IP address blocks:        2605:1140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3b:04:85:d7:c4:9c:97:64:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3506568-5ea6-49b1-a753-c6ef423abb8b
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=a98861f7-6c48-402c-9f3a-bf18e679b5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:7c:f3:5f:81:2a:3d:8c:f5:39:95:56:eb:
                    ed:36:14:87:0d:c4:83:53:05:ad:16:c3:fa:eb:0e:
                    19:97:dd:af:fd:0d:e4:4a:e3:e7:d3:50:29:7b:7b:
                    36:ac:56:c9:cf:6c:b9:9a:22:88:7e:22:74:cc:e9:
                    13:e1:cf:16:2f:1b:87:60:95:37:bd:c2:25:9a:5d:
                    27:86:5a:86:88:cb:c5:1d:31:35:c8:dd:11:3c:d8:
                    ad:55:fe:bd:d5:12:33:48:cd:23:05:80:ef:a3:09:
                    ea:08:c7:1b:44:36:0c:e3:8b:b1:4f:a3:e5:0a:78:
                    aa:84:cc:63:a1:2e:74:61:37:18:6a:58:63:4c:14:
                    f2:84:1e:5e:9e:a5:f8:d2:68:1d:c4:e2:e6:86:65:
                    e4:61:1b:df:0c:dd:5e:b6:21:3e:34:0d:90:55:da:
                    73:bf:09:b6:8c:3b:04:77:92:68:68:3e:9f:86:b2:
                    e7:90:64:55:78:d7:49:eb:fb:46:39:00:34:40:25:
                    bc:cd:0d:39:d2:6f:d3:fc:ce:a7:02:8e:8c:b6:93:
                    5f:da:de:f6:e6:9e:56:9b:bc:40:57:5e:d3:7d:ef:
                    d9:ee:8c:17:03:73:5b:87:88:0e:c5:ba:e0:2e:90:
                    f5:ab:97:62:22:65:1e:68:21:e9:8c:6b:88:ca:62:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:31:E9:39:14:54:79:BB:E9:A9:7F:A8:F9:8B:59:2C:58:8A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.crl

            X509v3 Authority Key Identifier:
                keyid:AB:EF:A6:40:22:51:E7:AA:0A:A6:98:76:48:19:56:4B:35:55:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:97:15:5b:2f:ec:6f:cd:fe:b2:76:0d:bb:03:8f:ab:a2:ad:
         44:29:ac:67:68:d9:d2:ef:fe:fb:af:36:13:6d:fa:47:32:a0:
         34:20:e5:f0:fc:19:c4:c5:a7:52:b3:46:ec:e5:0f:04:06:e9:
         0d:1b:a4:01:e5:91:6e:a8:68:04:36:fb:6e:d3:03:7d:d1:7a:
         c3:17:bf:6c:5c:be:2f:32:a0:53:46:91:e0:de:09:82:49:7c:
         b7:d2:82:d7:0a:82:78:13:54:07:36:f9:91:80:91:52:6d:6c:
         6c:eb:9f:75:48:8c:92:f3:a6:01:7b:1d:96:b9:9d:29:69:bc:
         00:d0:71:ce:04:6a:10:4e:f8:eb:2b:70:36:76:de:82:23:95:
         95:95:96:1a:3d:1f:35:98:5d:6a:10:7b:0d:aa:b3:e6:a4:9c:
         74:27:0e:dc:74:22:23:09:50:6c:fe:e6:31:8f:0f:05:ad:88:
         52:86:c0:7f:96:a7:5b:f7:a8:27:aa:58:df:3e:06:67:58:f0:
         83:ba:bc:b2:be:03:a9:02:e7:3c:3a:49:0e:29:ab:14:b4:d0:
         0a:a6:4d:89:a2:82:9b:e2:84:5d:90:6e:19:0b:08:d7:78:59:
         5f:24:4e:b8:b7:26:a6:21:fd:9e:ff:b4:55:68:c5:08:8d:86:
         42:76:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:01:32 2026 by rpki-client