Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ff1ba8b8-1642-3946-8658-669059cee9ab.roa
File:                     ff1ba8b8-1642-3946-8658-669059cee9ab.roa (raw, json)
Hash identifier:          j/fShXGiJAp6CZns81Y9yXfhVeEv+SqE+vEkM+Ywgsc=
Subject key identifier:   1C:CF:75:8D:C8:B7:57:92:B0:F9:45:2D:D2:49:24:23:EF:C0:3F:D1
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584F2EED175D5E387F14A9D12BB0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ff1ba8b8-1642-3946-8658-669059cee9ab.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2605:dd40:8e00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:17:5d:5e:38:7f:14:a9:d1:2b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=e0318524-fdb8-4b7a-928d-486a20efde6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:71:80:4f:c2:0e:45:fe:42:50:d9:d4:25:
                    ab:50:2c:5a:75:2b:c8:b2:27:3a:20:ae:53:b6:6e:
                    e3:1f:8e:e6:0b:c9:cd:f4:ca:a9:88:b7:5d:56:ef:
                    1f:39:7a:3b:40:2d:79:17:7f:fc:f4:88:85:29:ac:
                    96:ae:f0:3a:c1:27:ad:b9:51:b5:37:1a:0b:31:3f:
                    a4:96:8d:d5:c8:8d:26:d5:f1:ce:7e:7f:30:30:ef:
                    3a:e4:dc:21:80:9a:e6:66:9a:3b:d1:60:6c:e1:13:
                    15:09:c2:0c:48:af:3a:8e:6f:b9:b6:b7:8f:67:ea:
                    48:e8:f2:0b:c4:e8:07:a2:c5:77:7a:07:f7:3d:84:
                    c1:5e:d6:2e:57:3c:33:f7:9d:5b:46:dc:b3:4b:58:
                    8b:cc:92:cc:cd:cf:e3:07:88:bb:d0:19:5b:cf:4f:
                    16:2c:3f:19:d7:7c:02:8d:f3:35:c2:99:a6:4b:e0:
                    13:a4:50:73:47:d5:33:48:c5:92:f1:64:e6:1a:af:
                    1a:95:98:9e:b5:48:7c:ee:47:f5:67:fa:1e:2a:ee:
                    7a:aa:46:46:13:11:64:ca:22:0f:02:9e:da:ad:04:
                    ea:6a:68:fb:a5:5a:a1:b1:ee:2c:d7:23:30:74:fe:
                    47:80:31:58:77:1e:fa:0b:8d:6d:54:c2:20:72:7e:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:75:8D:C8:B7:57:92:B0:F9:45:2D:D2:49:24:23:EF:C0:3F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ff1ba8b8-1642-3946-8658-669059cee9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8e00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:cf:b0:6b:4b:48:5f:43:d6:5b:3a:f1:95:55:b6:ea:00:
         fb:89:08:94:37:72:88:ee:1d:9a:24:04:3c:ab:73:ba:2f:ca:
         33:64:bf:c2:9b:cf:be:cf:aa:6b:3c:90:d6:2c:7d:c7:8c:4b:
         89:33:a5:fe:35:76:5a:a6:5b:45:34:53:26:f3:08:d9:0c:3f:
         51:2d:57:3e:aa:b6:fa:11:8f:99:fd:27:cb:f3:62:ad:58:20:
         e6:38:98:64:60:6d:d8:cf:eb:9b:a9:13:1a:18:1a:2b:d0:d4:
         a1:42:dd:3c:69:3f:ca:ef:b8:6d:0f:b6:53:1b:7f:85:9b:98:
         fa:bc:79:80:e3:7f:31:e5:0f:b0:39:0b:50:2d:b7:1c:b8:ec:
         7f:fe:2b:e5:fb:bc:85:cd:81:b6:73:14:c0:c2:cf:34:95:31:
         86:88:77:9d:0e:49:14:ea:3a:b1:f6:4d:89:a9:80:66:e9:df:
         89:cc:9c:97:7f:9d:25:51:36:7b:8c:3a:d1:9a:ee:13:c4:ec:
         da:50:3b:ab:1a:50:7a:f3:79:02:dc:3c:50:0e:87:db:ff:91:
         18:a4:4a:d2:6d:a4:f2:46:26:01:9a:66:cf:1c:bb:99:1c:98:
         af:63:df:05:60:2f:e3:b4:ed:06:dc:51:db:1a:6c:fd:be:f1:
         ab:ed:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 08:22:35 2026 by rpki-client