Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/43a684ed-8f11-3e0c-8cd0-d2c615c05082.roa
File:                     43a684ed-8f11-3e0c-8cd0-d2c615c05082.roa (raw, json)
Hash identifier:          ji25RVisgJX9XdToTPUxx61+aLI2zUi57jdym4o2tDk=
Subject key identifier:   D2:83:95:36:D0:91:DB:CF:9B:B9:52:87:F7:FB:4D:D2:03:57:47:F2
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584E815F8DB4733928F936506300
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/43a684ed-8f11-3e0c-8cd0-d2c615c05082.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     14618
IP address blocks:        2605:dd40:8700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8d:b4:73:39:28:f9:36:50:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=c945e129-8e46-49c5-9e63-8289eae42a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:02:a5:10:c6:1b:96:d7:2c:ee:7c:0b:c0:
                    bd:82:27:0f:b4:f2:7b:7e:d8:cf:0c:81:63:be:e3:
                    5e:ad:39:23:54:a9:a4:ad:c4:2b:5f:98:5b:f0:b0:
                    45:da:1f:b4:4c:c3:8b:20:10:ef:45:d3:60:10:27:
                    56:cf:22:94:13:bb:b2:03:2d:9e:c5:3f:f1:74:1e:
                    5a:29:62:7d:4e:a7:d2:7d:cd:16:43:98:68:f6:f6:
                    b8:8c:9c:ee:41:99:55:f5:24:2e:c9:76:3b:71:5b:
                    5f:18:c8:5e:76:87:51:a9:95:2c:bb:e3:58:d6:2b:
                    ad:58:df:5c:66:03:05:bc:93:3d:c1:7b:12:35:72:
                    e1:c0:5d:4f:5e:59:b4:c3:34:66:d4:75:39:3b:dc:
                    c6:99:7c:64:3e:c7:c2:d8:80:78:c2:d8:eb:fd:cb:
                    b9:6a:5c:34:b5:bc:40:7c:1d:06:43:e7:0f:3e:76:
                    98:f3:81:63:fa:b2:e1:34:86:25:39:9e:db:a8:1e:
                    d4:f3:37:e5:01:d1:bd:10:33:cc:b5:fd:81:5f:97:
                    de:43:ed:46:9d:cf:54:c7:1d:98:db:67:c2:af:09:
                    83:89:db:58:ad:29:35:d7:7e:60:8c:e5:34:c2:19:
                    91:7b:f6:c7:2a:5a:08:73:fa:eb:be:53:a8:43:f6:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:83:95:36:D0:91:DB:CF:9B:B9:52:87:F7:FB:4D:D2:03:57:47:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/43a684ed-8f11-3e0c-8cd0-d2c615c05082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:98:a5:be:9f:78:3f:e8:95:aa:c5:c6:b8:27:49:86:db:68:
         85:1a:d2:45:4a:5d:b6:2f:48:81:13:67:52:b3:ef:75:18:1e:
         4f:11:f8:06:bf:3a:a5:12:07:fd:ab:59:9a:55:e8:8e:2b:5e:
         b1:41:b5:15:45:9b:61:a6:0b:41:27:38:94:58:c2:b5:d1:a4:
         67:98:5e:c1:94:8d:f4:f9:8c:ac:27:8f:58:2e:58:be:fa:e2:
         9f:68:5e:4d:10:33:5a:f1:da:ca:5a:10:db:24:e3:8b:6c:82:
         60:8e:48:dd:61:fa:82:fa:3d:29:e2:a1:d2:bb:a2:09:03:69:
         2d:9b:87:62:d4:c6:21:af:51:fd:09:76:3d:1e:20:20:8f:7a:
         14:a5:ce:00:17:0d:75:11:7c:ee:c6:3d:b5:16:d6:54:a1:aa:
         e7:94:d8:fc:77:43:e0:73:c5:d6:93:ac:7c:7c:c2:e8:cd:e5:
         a6:02:95:9e:4b:b5:9e:b9:bf:96:df:d6:e1:05:67:d0:b0:b4:
         5e:e3:96:a2:a1:9e:2a:3e:dd:24:b9:48:0d:c2:a7:56:6f:8a:
         b4:92:b3:43:3d:71:e3:30:e2:c7:cd:b3:44:7b:d7:72:3d:f6:
         d0:5d:8f:98:d9:10:1b:f5:da:1e:6b:1c:a4:07:87:95:08:34:
         a0:9f:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:07 2026 by rpki-client