Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa
File:                     19de2498-405e-3610-ad8d-53af4f1172c7.roa (raw, json)
Hash identifier:          +3hVPQwqJ6Dsgp6NIn7fuc0MBwvOzaMdPa7yZIjAkqU=
Subject key identifier:   D1:EE:7C:D3:12:23:DB:AC:A8:51:F1:58:B9:7F:08:CF:38:43:E4:1F
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584D91C0135411493EF254953280
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     12189
IP address blocks:        2607:6000:f00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:13:54:11:49:3e:f2:54:95:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=f4f5e933-2291-49d5-bbdc-dc380b5f5032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:52:5f:5c:e4:28:c9:5f:ff:b6:02:cf:86:d7:
                    8a:82:07:a5:59:08:e2:32:98:e5:8b:05:51:58:e8:
                    a3:84:8b:bb:d5:05:1b:28:d1:7a:da:57:9d:98:b4:
                    45:d6:36:bd:a5:a8:00:1a:d7:11:31:c6:52:bb:ea:
                    69:92:93:3f:61:07:b0:22:f1:f8:a0:2f:bd:0a:f2:
                    ab:3d:68:c1:b5:07:0f:b0:4c:7f:81:e9:c8:c4:d7:
                    7a:de:a2:c6:3d:85:0a:e1:8f:48:9d:5f:ce:b7:cb:
                    bf:a2:2d:38:86:57:df:df:c6:cb:e7:7a:ea:96:62:
                    77:71:34:ff:6c:73:b9:db:06:cf:2b:22:8a:14:d0:
                    aa:54:ed:0c:dc:cb:13:55:74:cd:3d:56:9f:66:d8:
                    3b:1b:fa:12:e9:4d:1f:61:4d:7c:31:58:9f:e1:fd:
                    20:82:57:d2:71:04:31:1f:93:85:41:41:09:e5:e5:
                    ab:c9:df:13:95:a0:78:e3:54:72:66:1b:1f:17:4c:
                    c8:f6:e6:9a:ba:ed:d0:c3:61:36:d9:83:19:f7:85:
                    de:cd:f7:27:c7:f3:3d:fe:29:58:2d:e1:01:b9:77:
                    9b:2b:43:ff:b7:76:ca:39:5a:ad:32:10:9f:1d:af:
                    b3:f8:55:7f:4b:64:59:31:04:29:94:81:db:da:12:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:7C:D3:12:23:DB:AC:A8:51:F1:58:B9:7F:08:CF:38:43:E4:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:26:a2:18:bb:ec:bb:26:c7:ee:c6:e4:f5:d5:62:07:e3:
         0c:ec:1f:64:0b:fb:eb:bd:40:1a:05:e9:cb:d6:cc:ca:3c:eb:
         96:ca:6e:52:29:3b:f5:c1:d9:61:fd:de:99:8a:81:a0:5e:2c:
         fc:9d:3a:ee:f6:a9:42:09:07:1b:5d:6b:a9:f7:15:27:a3:65:
         ca:58:d3:ef:67:55:99:cd:cb:7f:8f:a3:ed:28:6b:d5:89:4f:
         dc:3e:76:c0:02:32:57:1d:fd:df:c1:76:c4:3d:80:9d:e6:a0:
         e8:29:1a:f3:9d:6c:2c:17:03:87:af:a6:ea:a4:b1:e0:3f:4a:
         48:2e:6f:c4:2b:15:3d:1e:46:60:0c:9f:fa:f3:26:0a:ff:ea:
         3e:a8:c6:c4:46:0d:0f:26:4f:81:48:93:69:98:bb:fa:36:0d:
         28:d4:56:e2:a8:1e:b6:61:7d:70:30:58:40:b7:94:6c:60:13:
         0f:f6:cf:42:8c:84:f1:e5:ee:25:70:0f:c7:15:c5:f5:44:12:
         c6:6e:c2:24:d4:01:6f:e0:11:15:ea:a1:ed:39:2a:4e:ba:44:
         a9:76:6a:88:fd:cd:65:4d:4b:f0:dd:c3:78:36:b7:81:7f:06:
         d4:6f:e6:54:0f:c8:40:96:5f:79:43:eb:2a:7b:98:a3:f9:ce:
         47:cc:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:50 2026 by rpki-client