Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa
File:                     ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa (raw, json)
Hash identifier:          JtLDRRZlmS0rplt5Eyqut/Nrjr8yp9On8/Oh26xHQlY=
Subject key identifier:   2A:2C:B9:CA:E2:8B:BC:7B:4F:D6:A0:C6:EF:B7:C7:7C:A4:13:FC:E0
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584DCAFAEF6FC973CECC5D582D20
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     20454
IP address blocks:        2607:6003:2100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:ef:6f:c9:73:ce:cc:5d:58:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=07aa3870-58b3-40df-8c81-9e9449da4fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:3f:d5:77:82:83:ff:8e:35:c6:52:12:12:
                    59:fb:8e:87:e2:d0:ec:f0:21:60:55:d4:ea:a7:27:
                    38:4f:b9:ba:d0:b7:20:fc:c0:d9:8a:27:fb:c0:68:
                    81:fa:6d:d5:de:e3:50:c9:cf:52:b1:e9:89:ae:4a:
                    99:91:4d:b2:7e:75:55:ca:37:b5:f0:f3:c5:01:bc:
                    4a:15:a1:fd:5d:65:e9:49:7e:77:07:5d:1f:09:db:
                    10:2b:c0:ee:f0:4e:9f:54:ed:4c:ff:80:de:c4:b7:
                    52:14:bc:88:ce:11:44:aa:5d:7c:fd:59:da:bc:56:
                    5e:9a:d6:4d:fa:76:00:2f:2e:a7:38:ed:69:60:93:
                    47:4b:5c:31:e0:65:9f:8a:ae:46:f0:a7:09:3e:82:
                    1c:62:06:e8:d5:6c:bb:b9:94:30:8e:13:64:18:bd:
                    b6:b1:cb:6c:81:91:54:70:c6:2c:9f:68:d2:72:c1:
                    fd:8d:35:11:65:71:32:38:3d:5b:35:05:73:a5:0d:
                    7f:f3:a0:32:a9:ce:50:a5:82:52:aa:5d:4f:42:16:
                    3d:5d:63:e2:63:57:0f:a9:81:b1:10:69:f4:ee:f8:
                    2a:9c:6a:e1:21:1d:35:e9:da:e6:e4:1b:c0:e9:3c:
                    65:b1:7a:91:78:55:f6:0c:3e:eb:9a:f3:7e:9a:b2:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2C:B9:CA:E2:8B:BC:7B:4F:D6:A0:C6:EF:B7:C7:7C:A4:13:FC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2a:c7:ef:ac:c2:98:46:d5:5f:03:b1:ab:ce:2e:15:82:47:
         83:5d:ca:13:09:e7:10:66:f5:ed:09:f9:03:dd:df:83:ee:94:
         e2:a3:47:03:a8:84:37:74:6b:1e:48:7d:a2:d8:9c:e8:34:18:
         49:63:d8:30:4f:0b:ad:5a:8f:41:8f:e6:e6:3c:99:c8:a3:de:
         6c:dd:18:7d:c9:b9:2f:6a:67:02:54:46:7d:bf:6a:cb:92:61:
         bd:7e:e4:52:ac:32:31:42:80:df:98:9d:27:8e:fb:52:9b:a1:
         f8:14:7f:8d:8b:f3:81:f7:0a:4c:ee:50:56:a2:0b:f3:d2:99:
         b2:8b:de:34:bd:66:48:a2:30:72:e5:74:ed:b8:9a:e2:4f:ac:
         9b:16:de:25:61:c4:8d:fa:7a:72:8c:6b:84:4c:b4:c1:fd:64:
         2e:d9:07:e6:87:4c:ad:80:d5:fd:f9:d6:02:c3:7e:2e:16:88:
         a0:9c:66:72:3b:b1:17:62:a3:40:f3:99:be:f7:f5:2d:e4:8c:
         fb:78:9b:69:34:c9:4e:79:44:c3:e3:41:ee:08:eb:74:74:25:
         0c:e0:69:e0:84:be:78:74:bc:07:2d:d5:9b:61:61:43:21:c8:
         69:d9:b8:af:d3:e6:5d:51:65:d2:7c:ab:17:08:10:fe:60:77:
         ba:3c:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:54 2026 by rpki-client