Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa
File:                     41bef586-ce8e-33ad-8776-5277eecd884b.roa (raw, json)
Hash identifier:          nTuOZvHryRufLIamq9cKyVf12JbUtkxJc4ZjdIwDaTo=
Subject key identifier:   15:46:6F:2B:7E:E5:81:2E:BB:51:DC:A3:F6:62:2B:EA:13:87:2A:09
Certificate issuer:       /CN=f81745fb-4da3-44f0-9b04-cbf9016913a0
Certificate serial:       010D0C9F4328584ED9C749B0C177DE4EEA132A80
Authority key identifier: EE:48:D7:CE:40:6A:2A:BF:DC:16:F5:0E:FE:01:C9:ED:EA:D1:A1:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     54238
IP address blocks:        2605:10c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:49:b0:c1:77:de:4e:ea:13:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81745fb-4da3-44f0-9b04-cbf9016913a0
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=c9d70b65-56f4-429e-86d0-cb726589af11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:ef:09:74:62:71:be:39:b8:c5:2e:7e:13:
                    1e:96:2d:71:08:88:06:4a:5a:b5:22:6e:c6:88:af:
                    fb:d1:28:ed:da:f0:14:69:9c:cb:56:6f:fd:64:b0:
                    4b:dc:12:d7:c7:0f:0a:19:da:58:58:bd:b0:b7:c1:
                    10:ac:2e:6f:e7:14:c2:0f:ff:ed:8b:81:79:44:ba:
                    b2:1f:3e:eb:43:f2:4d:3a:51:12:25:5b:bb:76:9f:
                    4f:34:71:72:f3:87:c9:b4:eb:25:d1:b4:6e:f9:55:
                    c6:35:01:7e:f7:c0:8d:96:84:dc:78:af:74:0d:aa:
                    da:17:84:56:ba:b8:d7:d6:70:8e:d5:5e:d7:1b:f0:
                    70:f9:57:8e:da:33:e8:cb:75:48:f9:a5:62:a0:aa:
                    98:99:bd:16:36:51:56:09:fb:85:79:c6:fb:5f:65:
                    c3:a9:55:d4:bd:13:8d:1d:a5:ee:d1:90:00:94:fd:
                    3c:91:22:99:1f:4e:0b:dd:12:ce:1f:99:f6:e2:b0:
                    88:19:2e:2e:41:13:7a:4d:50:d2:9f:ba:fa:5d:2e:
                    55:ef:7a:34:73:ae:49:77:63:4d:51:6d:90:b4:6d:
                    88:89:fc:92:48:97:ed:90:8c:b8:ef:f1:36:d5:f2:
                    92:96:81:ff:98:0c:90:31:be:d6:fb:b2:72:22:d3:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:46:6F:2B:7E:E5:81:2E:BB:51:DC:A3:F6:62:2B:EA:13:87:2A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.crl

            X509v3 Authority Key Identifier:
                keyid:EE:48:D7:CE:40:6A:2A:BF:DC:16:F5:0E:FE:01:C9:ED:EA:D1:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:10c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:07:25:f9:88:12:94:52:d1:9c:25:fa:59:e1:3f:2b:40:16:
         e7:17:00:4a:b2:b7:5d:90:5a:a5:6b:63:5b:c3:cd:3f:29:ee:
         ec:5d:a1:5c:b5:82:50:9d:8d:ba:63:97:00:d5:f7:be:3d:4f:
         b2:27:b4:7c:f3:ac:3c:ea:30:c1:02:20:c1:04:e5:d3:6f:f3:
         ba:dd:ff:40:f6:db:08:8f:5e:af:b7:31:47:d5:67:21:3a:e1:
         db:53:5e:a8:25:c1:68:8b:6a:c1:1d:2e:87:74:2a:23:90:90:
         81:8d:b6:36:13:3a:84:82:eb:35:86:1a:c6:cd:04:af:7c:39:
         6a:07:0d:41:62:ba:fd:d0:f8:48:6a:5a:de:ed:41:98:49:18:
         fa:b2:d5:24:92:b7:f9:93:07:22:75:fd:ed:b1:f2:be:ad:99:
         c2:6f:c4:5a:62:14:0b:32:1e:18:cd:c7:71:e8:7a:a3:d1:17:
         47:fe:41:4f:5a:e8:7a:b7:ab:4d:81:63:6e:7f:fb:9d:8f:20:
         60:0b:75:74:02:61:50:22:4e:26:70:31:e0:0a:9d:cf:5f:f1:
         da:9b:5b:ab:aa:d1:0f:d4:98:ac:f2:d1:87:16:d1:ba:aa:d0:
         c5:5b:74:7e:5b:44:c1:cf:d7:9f:ce:2b:e0:75:c4:a7:55:5d:
         4e:c3:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:12:05 2026 by rpki-client