Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
File:                     ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa (raw, json)
Hash identifier:          5nuIJXuDbyiAe3hwHGN4N0MwhDDOpI5AqjpoBjjYkno=
Subject key identifier:   24:FD:73:5E:65:1D:7F:67:D9:61:E3:70:DB:35:AF:22:59:15:98:5C
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584ED431E45BEDE56B4E8C37D700
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     398549
IP address blocks:        2605:dd40:8225::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e4:5b:ed:e5:6b:4e:8c:37:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=e61209a6-3dc5-4e1e-a2fa-5f81e521c7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:d2:b7:62:1c:5c:fe:7f:10:66:0d:54:60:
                    10:b2:ce:98:93:89:47:6b:ce:7d:a8:15:4f:05:6e:
                    56:fa:27:f1:81:0c:22:1a:86:d2:be:f4:68:b8:6d:
                    8a:5f:c5:ef:50:f8:63:2e:c8:25:3b:bc:56:dd:76:
                    c6:98:e7:71:c7:75:f6:42:05:4a:d3:7d:26:e6:00:
                    cd:e7:92:7b:bc:d3:db:21:1e:0d:e8:92:ca:e9:c2:
                    a0:3e:d9:e9:c7:0d:ae:c3:6d:cd:76:5b:00:d0:8d:
                    48:85:3d:23:45:aa:d2:1b:77:8b:2b:7e:8f:47:fb:
                    6c:e1:8f:92:73:f1:fd:a8:8f:a1:19:5c:cf:1c:fa:
                    a8:82:be:42:3b:de:1e:c4:27:8b:61:19:7d:f1:06:
                    50:f1:a9:39:f7:d3:f1:fc:f1:38:f9:14:b5:4e:2a:
                    b8:1d:38:2b:4e:03:95:bd:bb:79:a9:39:b0:2e:b9:
                    ab:35:9c:aa:8f:c1:97:16:3d:45:98:09:4d:93:91:
                    8a:05:4d:72:fa:59:f9:e0:fa:9f:ea:74:9c:5a:3a:
                    5a:65:1e:84:5b:c2:46:f6:da:a9:41:78:4a:5f:ad:
                    d3:43:9f:21:04:32:50:da:38:de:82:a1:93:aa:30:
                    ae:d7:20:68:17:ab:12:b0:e4:51:7c:0d:a9:2b:3a:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:73:5E:65:1D:7F:67:D9:61:E3:70:DB:35:AF:22:59:15:98:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:a2:e1:c8:3c:b7:4e:eb:5a:76:9d:b5:b6:07:27:92:10:
         06:b1:54:5e:5a:75:94:3d:cc:93:c9:3d:c2:04:ac:dc:7c:55:
         2a:04:df:b9:ba:3b:c6:a9:67:c1:33:48:78:f8:bb:bd:4d:a3:
         ca:0b:61:62:ce:9d:f7:03:7c:ea:87:54:a9:fe:9d:b2:14:50:
         61:da:2f:ad:42:0b:f3:49:70:3e:f6:15:16:a5:7d:87:9a:10:
         80:30:6e:87:75:d1:f8:dd:50:dd:e6:a5:2b:a1:00:6d:04:71:
         1b:08:b5:c6:b1:9c:c3:4b:27:80:9a:20:95:16:25:14:a4:b6:
         e9:0d:ee:52:62:03:d2:72:55:62:5f:ed:50:68:91:70:da:65:
         56:ea:96:57:35:06:cf:42:65:f9:2c:14:03:5c:8b:da:4f:65:
         76:43:36:9f:64:78:ff:3c:f8:99:df:8f:8c:58:c6:b9:09:f0:
         16:db:aa:35:13:e7:dc:19:f1:33:d3:33:01:13:64:5c:be:87:
         da:99:5b:24:c9:e5:c7:e0:d7:e1:ba:4b:db:ee:18:5e:5f:8c:
         e7:47:c7:fa:6b:bb:d0:e4:51:82:ca:53:ae:78:50:b3:14:9d:
         f0:4e:6e:59:bd:76:26:4a:f7:89:d4:ce:33:b0:70:df:3c:aa:
         4e:b9:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:39:56 2026 by rpki-client