Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa
File:                     eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa (raw, json)
Hash identifier:          K4k+E1W/+cgiVYjjSEYm1NRVRIZxYl5j6oSXWIBVHIE=
Subject key identifier:   A2:38:C4:82:7F:DC:A6:1B:6E:1F:4A:B1:7B:FA:87:89:34:35:66:6A
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584E8C8A41B59CC2D11B45EC1720
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        2605:dd40:8260::/44 maxlen: 44
                          2605:dd40:8570::/44 maxlen: 44
                          2605:dd40:8700::/44 maxlen: 44
                          2605:dd40:8880::/44 maxlen: 44
                          2605:dd40:8990::/44 maxlen: 44
                          2605:dd40:8f00::/44 maxlen: 44
                          2605:dd40:8f80::/44 maxlen: 44
                          2605:dd40:8ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:41:b5:9c:c2:d1:1b:45:ec:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=71ac888e-1d71-4e17-b639-f5b4fc95e7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:4e:f6:98:96:df:df:b8:da:37:8b:99:15:
                    43:a2:cf:88:2e:f6:fd:4f:09:ef:28:36:d3:cf:30:
                    af:9a:2b:cf:39:d2:cb:9a:8e:ff:29:3e:16:a8:78:
                    ed:96:49:7a:e5:24:03:0a:cc:2d:df:2b:26:bc:52:
                    39:0e:f5:c2:54:78:59:31:bd:3d:3e:4d:c5:a1:98:
                    af:c2:ec:be:72:0b:00:fe:9f:78:0a:f0:2d:75:90:
                    06:e8:fd:87:1d:b4:23:0e:68:63:74:84:ad:9a:78:
                    38:5c:24:d7:5c:1b:6b:95:6b:0d:ba:f4:a2:b0:39:
                    f5:51:bd:17:b1:68:da:13:2e:7f:ba:20:fe:e9:9e:
                    c2:d9:a1:cc:9e:97:6b:b6:f9:89:4f:10:85:7f:50:
                    a3:54:b1:76:0c:4f:ca:a6:3b:8c:b2:4c:9c:da:8f:
                    6d:f2:e5:1b:75:b1:17:c0:a7:b7:5f:c8:72:e4:71:
                    39:bd:68:8d:b0:17:54:da:56:53:71:7f:b4:c4:d5:
                    3c:21:98:07:7b:57:37:37:fc:9e:8a:d5:31:3d:78:
                    dc:48:2b:05:a4:4e:e0:fe:6a:db:5a:13:36:36:76:
                    f9:50:0c:5b:71:bb:37:30:49:a6:b3:77:4b:3a:ba:
                    4f:a2:6a:e5:84:18:07:1e:82:dd:75:56:fb:4e:ce:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:38:C4:82:7F:DC:A6:1B:6E:1F:4A:B1:7B:FA:87:89:34:35:66:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44
                  2605:dd40:8570::/44
                  2605:dd40:8700::/44
                  2605:dd40:8880::/44
                  2605:dd40:8990::/44
                  2605:dd40:8f00::/44
                  2605:dd40:8f80::/44
                  2605:dd40:8ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:6a:f4:6e:49:9d:84:e1:d3:4f:ca:b0:f0:7c:cb:a2:93:
         3b:e2:2e:e5:92:02:13:eb:be:79:73:36:55:d6:1d:11:5a:b5:
         16:45:d8:c2:ac:85:e7:60:c1:76:82:73:79:6a:55:a2:b7:fb:
         f3:fa:64:e3:ca:6e:fd:56:2f:f5:56:ba:87:e0:bd:ec:02:8c:
         07:d1:29:5b:84:1f:37:cc:a6:1b:b0:f5:55:96:9c:3d:56:bc:
         62:23:89:8a:85:2f:40:0d:36:db:51:f3:4b:55:f9:de:f3:47:
         00:b9:06:f8:37:5b:1c:16:2c:48:77:ea:03:02:70:a3:9f:71:
         e2:74:16:b1:dd:e3:ee:ae:96:e4:50:fa:89:b4:b8:ae:05:49:
         1d:fe:e7:50:78:5b:54:6c:d2:b2:00:4d:ec:3f:46:c0:e4:7c:
         41:a9:8f:ba:de:2b:1e:a5:51:10:2f:01:be:fe:fb:1a:2a:1d:
         f6:ab:aa:5f:d3:72:9c:d4:8a:e0:c8:70:46:e2:6f:43:3f:c0:
         0b:3a:f5:55:2b:ac:8d:20:2e:69:69:e6:8c:df:87:6c:20:34:
         a1:20:53:bf:da:f5:07:ee:0f:fa:cd:1f:2b:a4:9e:c6:ea:d0:
         09:6b:e6:92:f8:3a:59:f7:61:2e:75:5f:1b:d7:21:27:f4:8c:
         95:36:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:02 2026 by rpki-client