Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/4ead8a29-2ec4-31d5-874a-296197f0d921.roa
File:                     4ead8a29-2ec4-31d5-874a-296197f0d921.roa (raw, json)
Hash identifier:          BWU/oQlK14/bA+u9TImhfOqUjbZ93uAQ809z6OWJzr0=
Subject key identifier:   34:98:FA:81:74:C9:54:E0:FA:B9:57:5F:52:6F:10:C2:5A:D8:01:33
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584D19B4E2AD6D859008F314BE00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/4ead8a29-2ec4-31d5-874a-296197f0d921.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2605:b040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:e2:ad:6d:85:90:08:f3:14:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=82d28535-42ee-42fa-9c2b-fbeabd30a25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:82:30:4c:a3:d2:c9:1b:38:0c:bf:79:f8:
                    bd:3a:6f:78:72:6b:ee:00:b3:8c:d5:53:6e:15:12:
                    88:b6:e6:71:fb:a9:15:83:8d:4f:2e:ca:42:a8:05:
                    3a:0a:c4:f0:85:0c:1b:84:2f:33:9c:79:61:3f:b5:
                    1a:15:1f:a4:5c:2f:cd:3b:a0:28:90:72:f2:fa:ff:
                    a1:c6:b2:5d:4b:dd:41:3b:49:8e:1e:d1:b9:c5:80:
                    ed:2e:1a:a3:01:25:1b:1b:83:85:6d:b5:7c:b7:8f:
                    16:b4:33:46:70:63:93:22:e0:f6:47:e1:9e:90:f9:
                    37:da:cd:41:ab:b6:bb:ba:a0:b4:70:14:bf:97:1e:
                    7c:fd:e5:c6:4a:8a:46:2f:d6:c4:57:0e:a6:09:0c:
                    5b:2f:cc:11:9b:28:59:a5:16:2e:ad:75:97:29:68:
                    67:9c:74:51:ea:30:50:21:a8:06:d0:ca:55:e0:60:
                    0e:8f:15:36:55:85:65:d0:cd:b8:f8:47:6d:90:13:
                    e7:5f:74:fa:60:f3:71:75:1e:47:ba:c7:46:b0:2d:
                    21:5a:3d:e6:c6:1f:06:22:88:cc:9f:dd:65:3a:1a:
                    f4:6d:22:74:81:22:da:00:2a:16:45:d0:b2:3a:d5:
                    a7:10:c1:0f:8f:32:f3:7f:77:c5:35:bf:db:de:fd:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:98:FA:81:74:C9:54:E0:FA:B9:57:5F:52:6F:10:C2:5A:D8:01:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/4ead8a29-2ec4-31d5-874a-296197f0d921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:89:0e:da:b5:ba:6f:8b:2a:a7:94:c4:d2:4e:a6:cb:d6:09:
         f1:43:5d:73:c9:90:f5:c3:34:b3:5b:15:f1:56:2e:98:18:5b:
         8a:1d:ca:dd:bb:38:00:60:0b:c3:04:e2:6f:ff:b6:22:3d:d4:
         e9:14:e1:e0:e1:5d:d0:1b:84:92:43:97:c2:d4:c4:a6:3e:a2:
         7e:a3:0c:c5:28:ab:ea:7c:34:b3:6f:f9:8e:a8:23:eb:28:40:
         ee:8a:a1:25:04:0e:50:72:50:d3:fc:65:76:7e:f9:81:ea:03:
         25:a2:33:a8:59:1a:16:ff:1e:f0:18:61:1c:20:f2:a0:fb:e1:
         f6:97:ec:c1:c9:f3:4c:82:c5:35:e6:69:cd:c6:88:df:e6:74:
         33:ef:50:c9:ca:98:cb:b6:b6:37:e0:63:6d:ea:f4:09:eb:4b:
         ae:85:a6:40:be:b8:ea:ef:02:99:b9:08:f0:ed:e6:34:4d:02:
         62:7c:76:47:4b:9b:44:3d:b3:ae:af:f5:8e:26:64:e4:78:f0:
         c6:ec:3c:51:3f:11:25:2d:a5:4d:7f:a6:11:1a:61:1e:ca:df:
         8f:ec:91:4c:ae:f2:f0:11:8b:df:f0:06:a7:e6:13:26:ba:89:
         5d:17:4f:09:ec:e6:68:bb:b8:11:29:7c:4a:77:f0:d0:1d:9a:
         e7:5a:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:12:10 2026 by rpki-client