Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
File:                     0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa (raw, json)
Hash identifier:          kLfxDcihr5v0A3948YHpBQaR7Ky1Sg1/PVIWphupZ70=
Subject key identifier:   0F:C5:90:49:AE:F8:D3:A7:95:B0:C3:F4:DF:0C:5B:00:87:B2:71:6F
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584E885A46DD0EFDADA53F6CB180
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     31998
IP address blocks:        2605:ed40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:46:dd:0e:fd:ad:a5:3f:6c:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=2c228f6d-f5d3-4f47-860e-e7dbfe917eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:6e:e3:0f:5b:64:3d:ea:a6:ba:04:a1:6b:
                    be:37:db:19:72:8d:f0:1f:57:83:31:bb:5d:e8:e2:
                    be:d2:1a:60:c6:72:53:51:42:6f:6f:57:fa:57:2f:
                    16:56:6f:82:fb:9f:a1:22:0e:dc:32:c8:97:22:56:
                    07:06:27:44:c3:56:f7:45:5a:18:68:7d:74:4c:34:
                    17:d8:08:39:6a:e6:55:7b:34:e4:1c:a1:ef:fa:e2:
                    fc:96:84:11:1a:08:7b:2a:88:f5:30:38:c9:55:a9:
                    d8:aa:8b:e6:9a:7e:70:14:a4:71:b7:3b:93:81:08:
                    a5:4c:fd:2f:d7:7f:46:65:f0:06:30:14:58:d4:dd:
                    79:fc:d0:da:d7:53:07:f4:40:70:90:72:bd:62:bb:
                    23:7e:40:d3:f7:5b:47:8c:43:56:cb:5e:fa:15:f4:
                    08:41:36:61:b9:5a:e5:72:d9:4c:a4:ea:16:4f:1e:
                    0d:45:bc:d2:e9:bd:1c:d3:4c:5a:0b:e0:0e:c3:ff:
                    a4:f3:45:65:e5:b3:c5:90:ac:4b:13:b4:08:8e:b6:
                    4e:e7:52:62:33:0f:c5:ff:da:35:38:38:da:2c:f1:
                    7d:f8:f6:97:14:ac:24:54:2d:a3:5b:a2:2f:19:f5:
                    9c:74:f4:80:65:f8:cc:cc:8f:21:19:74:db:e3:6c:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C5:90:49:AE:F8:D3:A7:95:B0:C3:F4:DF:0C:5B:00:87:B2:71:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:49:0e:f1:62:94:5d:d9:90:14:c3:83:93:1c:aa:34:c2:
         35:c5:58:7b:1f:89:4b:50:29:05:ac:cd:bb:ff:31:2e:7e:b6:
         09:70:8e:bf:37:77:e4:a9:6a:3b:96:c2:f4:1d:7e:93:a6:94:
         fd:6a:5f:67:cb:0a:d7:5c:1a:fc:32:38:6a:a5:95:2e:b2:70:
         06:f0:3f:db:67:27:e8:04:fc:47:40:ca:5b:a2:e7:1d:19:27:
         9a:89:32:81:6c:56:5c:b7:77:7f:54:7c:d7:84:2b:a2:d6:52:
         27:71:ae:33:7d:ac:0d:74:ef:0b:8f:73:d2:b9:58:58:82:9a:
         1b:90:11:76:0b:07:5b:a7:49:3f:fc:80:9f:66:2e:17:13:6e:
         62:e4:41:f2:7f:c6:36:bb:15:90:a1:fc:1c:63:9e:cd:bb:c5:
         40:00:81:d7:b0:92:d2:db:82:30:6e:4c:65:5e:4e:e6:64:8a:
         6f:20:12:34:07:c5:2d:6b:8c:60:e1:dd:15:4f:ac:fa:4d:2d:
         c6:af:97:e1:7b:b9:ab:c9:b1:97:45:ef:86:ed:3d:85:10:79:
         21:70:9b:b8:be:78:d8:2e:b2:9b:ca:0c:ec:51:78:fe:b3:8d:
         28:fa:36:3d:dc:8c:72:1e:a5:dc:0f:da:2d:62:59:5e:03:84:
         b6:92:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:56 2026 by rpki-client