Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa
File:                     2689cc5e-73a4-3934-b73d-56b59b54c522.roa (raw, json)
Hash identifier:          qyYWftIhg0I+ikk3Jmw5w4baEVuNLo5Nv4W6MXn0WAs=
Subject key identifier:   B2:8D:EC:5B:B7:49:9A:79:9F:4F:0D:9A:17:EF:AE:CD:4B:3C:98:0A
Certificate issuer:       /CN=c66b7cab-031d-4c4c-8595-19848efd3058
Certificate serial:       010D0C9F4328584D91C008E382C7C2FF9284FC80
Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     400339
IP address blocks:        2606:ab40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:08:e3:82:c7:c2:ff:92:84:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=ee147535-2e0f-446b-88e1-f7705231f13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:55:d4:00:68:19:2b:81:c7:4d:e5:f0:83:
                    f0:d2:67:87:08:03:0f:6d:31:c1:bf:e5:82:4f:ed:
                    f7:a6:f1:9d:bd:02:84:ed:3a:fb:2c:3b:db:0f:9f:
                    7f:1a:2c:7d:d5:ba:9a:0c:ac:3f:ec:05:5f:0a:db:
                    77:e1:c9:85:92:ca:4f:9a:5c:c3:b4:4b:f4:c1:c7:
                    4f:6d:ec:28:66:82:fa:1e:48:9d:05:98:52:c9:5e:
                    da:04:67:ae:a2:42:24:35:bf:8d:3b:0f:b2:68:a4:
                    6d:e5:ba:6e:3e:d9:71:93:0c:85:2c:c6:30:e0:45:
                    fb:79:bd:20:2c:07:37:26:a0:9b:b4:d8:af:dd:d4:
                    a9:94:d0:97:df:ea:dc:44:2a:65:fd:2d:c5:87:2e:
                    d9:e8:3f:ab:16:b0:92:4a:4f:45:79:28:ea:76:2b:
                    a8:be:1e:fe:65:f9:b4:bf:48:c9:0d:c2:a3:c4:d1:
                    95:07:80:69:31:3d:28:65:de:ae:5b:aa:64:09:9b:
                    be:19:7d:6e:8f:a6:cb:00:7a:b9:70:97:83:71:8b:
                    4c:99:82:3c:f8:ff:09:3c:da:14:bd:ed:9c:17:1a:
                    eb:95:f7:b9:e4:d1:b2:e5:50:56:ce:56:fa:29:b5:
                    de:ba:6b:ff:da:8c:07:31:98:c5:2d:cf:c9:7e:24:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8D:EC:5B:B7:49:9A:79:9F:4F:0D:9A:17:EF:AE:CD:4B:3C:98:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ab40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:77:52:ae:1e:2a:38:d0:9b:2c:93:97:57:03:7a:68:b2:ed:
         eb:d6:7e:06:30:57:97:93:b9:03:d3:1d:ca:7d:b5:d6:e0:21:
         9f:4d:b9:9a:4c:60:84:df:89:39:04:1b:e1:53:e9:14:77:eb:
         ae:71:79:d4:ba:00:a5:5e:5c:26:04:07:41:67:a2:5b:af:00:
         0f:d4:9c:9a:29:9e:b2:e2:40:e2:25:47:f3:c0:7e:1a:2a:1b:
         80:0c:33:58:fa:67:be:ff:f9:25:17:8e:0b:c0:f7:8d:bf:e5:
         78:06:c8:a1:a5:39:0d:4f:0f:ea:5a:62:df:2b:83:79:28:df:
         6d:14:37:da:7c:7f:8a:76:18:1c:26:06:7b:67:29:99:a2:4e:
         49:59:d1:2d:72:a0:b3:4f:a5:e2:2c:3f:14:a6:60:37:b0:19:
         d3:a6:76:ee:23:c5:5a:49:77:99:de:82:c6:19:42:24:cd:8d:
         3d:4d:8f:41:1f:5a:2d:bb:e2:fd:f3:87:bd:7e:1f:a9:db:65:
         07:a0:9f:7a:08:13:f2:cd:23:2b:ac:aa:10:cd:e0:ad:01:ba:
         73:e7:29:21:7d:4e:2c:68:f0:d2:93:3d:8b:f5:5c:15:b9:cc:
         4d:d7:c9:7a:79:81:11:19:b6:ae:41:75:55:89:41:f5:33:20:
         06:39:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:25 2026 by rpki-client