Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa
File:                     d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa (raw, json)
Hash identifier:          n37q4fwGRI+TIO/aaSm5JZC6AHriGpO9rEefUB+gWbU=
Subject key identifier:   C5:2C:95:77:C5:8A:57:38:D9:C6:7C:05:6D:1F:20:E1:FE:0C:12:64
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584D9E502A92EE4847CAA5923300
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2605:b040:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:2a:92:ee:48:47:ca:a5:92:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=b0d48228-e658-4812-b735-8b0f41c73c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:f8:77:74:4b:c1:19:cb:04:4f:bc:0d:74:
                    24:de:7b:bf:e9:8e:e5:5b:dc:15:22:7f:7c:ad:cf:
                    9a:46:c2:7a:0f:59:3e:06:fa:c2:1f:50:b9:eb:cb:
                    5c:f5:06:c6:27:a1:d5:d1:ab:47:51:f4:71:cc:57:
                    0d:e6:1d:f7:3e:09:09:e7:36:be:69:4b:a6:4d:c2:
                    46:46:c6:46:eb:f0:f1:ba:89:39:c1:4d:e1:e1:2a:
                    0b:be:20:66:43:da:1c:40:cf:54:ba:34:f8:d2:e6:
                    71:3f:f5:79:f2:c1:86:9b:46:51:01:19:c2:44:57:
                    fe:be:1a:55:56:23:47:71:28:26:0e:5f:5c:3c:c6:
                    f0:d0:79:22:74:cd:a2:b9:01:9d:75:88:d0:f3:2f:
                    d3:7d:14:6f:f2:d5:32:6c:ed:37:7f:2a:78:50:8f:
                    50:3f:e2:31:02:ec:44:77:37:f8:da:3c:e3:36:94:
                    3d:ee:18:27:34:98:46:04:f1:d2:1b:b1:e7:ed:f6:
                    ae:81:72:cf:70:c7:63:7d:b4:e0:f1:09:63:7d:4c:
                    d1:50:88:2a:e6:5a:98:8e:ca:37:2b:83:b9:91:4d:
                    49:aa:40:6e:a4:19:8f:38:d0:0a:00:f1:b7:45:75:
                    90:c0:9b:ca:10:43:9b:8b:59:e2:40:a0:49:07:68:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:95:77:C5:8A:57:38:D9:C6:7C:05:6D:1F:20:E1:FE:0C:12:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d8b2a98e-474a-337a-a0e2-1fd039511cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:f1:47:dd:c6:0f:38:a1:d0:df:64:a9:66:09:4d:dc:95:
         86:d8:d3:94:0e:b3:1a:6f:a7:5d:10:0a:d3:ef:1c:a1:2b:e0:
         df:c7:aa:9c:66:d7:76:50:b2:94:f5:66:e2:27:74:2e:ad:e2:
         b2:1a:0c:a3:3f:cd:d6:a4:e1:6b:a9:57:e3:ac:be:b1:2b:7a:
         ce:3c:8a:37:5d:85:1a:05:4d:7b:15:4b:7f:5a:1c:ed:cc:55:
         9d:7b:dd:94:1e:ee:aa:2f:09:55:6f:60:ba:38:90:31:70:67:
         36:f5:ab:7f:b6:4a:5e:92:e6:35:fe:16:4b:5d:65:9d:0b:4f:
         fd:48:70:c2:00:47:2e:56:2e:99:d5:ed:f0:a7:7b:24:de:ba:
         bc:c8:56:7a:a5:6a:f2:a0:c0:d3:4d:c4:6d:eb:15:82:0b:3b:
         bf:eb:e2:db:f3:93:8c:0c:d2:39:ef:88:2a:13:10:61:2f:be:
         74:09:9f:56:6b:ba:89:d9:dd:46:a4:fd:35:98:46:ad:42:7f:
         0f:1e:92:77:fc:46:6f:12:b4:1e:47:91:bb:c0:8f:11:fb:1b:
         78:fc:1c:c9:9d:c2:c8:bd:42:09:27:dc:94:20:f9:a5:69:ea:
         3a:a3:86:39:91:5c:d7:2c:db:9d:4a:6e:fa:29:60:06:c3:92:
         09:6b:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:15:23 2026 by rpki-client