Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd/bde925eb-5299-3a3e-86e4-15f5c9aa9a68.roa
File:                     bde925eb-5299-3a3e-86e4-15f5c9aa9a68.roa (raw, json)
Hash identifier:          f+lP4qun4w/Y05ajsPAgpdJUMLpVEsEhtl4sQJI+Hxg=
Subject key identifier:   5E:1C:5E:0A:B5:4C:80:81:B5:5D:92:DB:41:BD:BE:2C:88:97:24:4D
Certificate issuer:       /CN=6205f270-16f9-47d2-bb0f-76c3b82828bd
Certificate serial:       010D0C9F4328584EA2DFD07B23C9F458382DDA00
Authority key identifier: 29:08:31:4F:25:31:2D:7A:E4:FB:BA:C5:06:4E:E5:B1:9F:DE:D8:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd/bde925eb-5299-3a3e-86e4-15f5c9aa9a68.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     55081
IP address blocks:        2605:8dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd/6205f270-16f9-47d2-bb0f-76c3b82828bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd/6205f270-16f9-47d2-bb0f-76c3b82828bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:d0:7b:23:c9:f4:58:38:2d:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6205f270-16f9-47d2-bb0f-76c3b82828bd
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=e9aaf8dc-8531-4e8f-acee-2a7b37e82e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:bc:62:b3:ac:2d:27:c9:5e:0a:71:07:5a:
                    e0:c5:c7:32:e9:7c:60:a3:9b:eb:f2:27:7e:81:c3:
                    5a:bd:e5:5c:a2:cb:67:a0:f5:82:13:54:06:b4:e3:
                    4f:95:c9:9d:52:10:f5:42:38:c9:87:58:67:f9:4f:
                    8d:79:33:6c:2a:11:c4:60:e3:92:2d:89:6b:29:ac:
                    1d:b4:5b:52:4a:80:60:fd:6f:f2:ab:96:d8:f3:b4:
                    10:e5:7f:90:ec:62:08:f9:57:24:80:e3:cf:82:63:
                    35:c5:fc:d8:57:3e:ad:22:03:72:d0:26:42:af:24:
                    4b:4f:0b:9c:39:b6:13:22:82:de:85:92:a0:cf:60:
                    a7:f6:8f:2a:8b:0d:57:82:11:53:f3:58:d4:65:04:
                    b2:f5:b9:27:fd:f9:5f:c3:d0:90:c4:4b:53:02:3c:
                    9e:b9:d0:b0:c5:e9:17:80:db:f5:a1:bb:7b:2b:13:
                    ae:9f:12:db:e6:01:74:c5:c4:fa:99:8d:fb:54:cc:
                    d4:07:3d:d8:4e:be:f7:4f:69:cf:46:12:50:49:b9:
                    51:e3:61:e0:0f:22:dc:1a:51:16:fe:08:b8:1b:d0:
                    eb:3f:1a:b8:17:76:50:2b:5e:83:7e:c6:c5:f4:28:
                    32:9c:f9:c3:cc:16:2c:1f:87:43:0c:34:7c:4e:2b:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1C:5E:0A:B5:4C:80:81:B5:5D:92:DB:41:BD:BE:2C:88:97:24:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd/bde925eb-5299-3a3e-86e4-15f5c9aa9a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd/6205f270-16f9-47d2-bb0f-76c3b82828bd.crl

            X509v3 Authority Key Identifier:
                keyid:29:08:31:4F:25:31:2D:7A:E4:FB:BA:C5:06:4E:E5:B1:9F:DE:D8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6205f270-16f9-47d2-bb0f-76c3b82828bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:38:ed:c6:16:20:79:e6:17:78:58:3b:ce:d5:ac:97:18:39:
         88:23:e5:4e:61:a7:21:46:24:d6:fd:03:4d:45:5a:91:4b:a7:
         4f:33:e3:b4:19:df:1a:73:10:b6:95:b9:95:64:e8:5d:72:6a:
         e5:a9:c9:5c:0a:4e:44:13:53:4f:6d:7e:34:75:32:58:98:fc:
         81:c3:64:a2:af:f9:ba:ce:0a:ff:70:b5:5c:d4:64:db:c6:3d:
         86:a1:fb:fb:d5:21:ea:e0:2d:90:f2:f6:7d:23:83:32:24:f3:
         cd:3c:12:de:bb:0d:d3:74:a5:4b:5e:63:87:a9:01:d7:6d:0d:
         04:31:e2:01:b7:de:f7:f1:a1:1b:91:ea:9e:e5:87:ec:3a:b3:
         54:53:14:50:23:a1:a7:f1:5b:ed:c9:03:1c:f1:1f:3e:bf:87:
         3b:a2:0f:84:8a:cd:26:b9:09:78:28:04:05:66:66:8b:cc:f5:
         f3:f4:83:a8:90:5c:25:8b:82:57:6c:01:b6:01:9f:bf:07:48:
         6c:ea:e7:5c:34:78:1b:12:ea:9f:26:c9:46:51:06:7e:21:d0:
         b8:5a:af:cb:0a:dc:c8:65:d3:9a:ce:af:70:cc:29:bf:9b:98:
         d2:b3:ad:5e:1e:a5:ea:6e:9f:9c:9d:76:28:2b:87:19:15:4b:
         47:0f:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:03 2026 by rpki-client