Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/b05f4cc0-8f1e-3599-9699-a1657e608268.roa
File:                     b05f4cc0-8f1e-3599-9699-a1657e608268.roa (raw, json)
Hash identifier:          lL5f8RhtEr2hhOLLTyPySmR49AnvuyFl4kJC9OG3RRY=
Subject key identifier:   F5:19:7D:9F:50:C4:4F:3D:4D:FD:2E:FC:D0:08:C9:8F:E9:85:14:4E
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584E815FBC9A6760C93884B31C00
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/b05f4cc0-8f1e-3599-9699-a1657e608268.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     400196
IP address blocks:        2607:8240:ff0a::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:bc:9a:67:60:c9:38:84:b3:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=dae8fba3-f511-42e1-8a67-75fe1559842b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:18:a5:d0:dd:c6:51:8c:cf:47:37:ed:ce:
                    9e:dd:d8:09:d0:74:bd:d9:c0:64:90:f3:9c:43:8b:
                    c5:88:93:c9:84:59:14:b7:38:5a:7c:f4:0c:8a:82:
                    6e:46:fc:5b:21:c5:61:bc:bb:50:52:e8:b4:69:c5:
                    ee:ee:dd:f9:26:a7:d5:65:fb:fc:a3:3b:86:bd:b1:
                    74:27:b4:5e:fc:c3:ec:d4:8f:f5:06:0d:e9:41:f6:
                    1c:69:2a:af:c2:a0:61:74:2f:81:b9:b5:d2:24:33:
                    4d:02:71:d1:3c:0e:54:b5:26:66:ca:8d:91:3a:b1:
                    e6:62:76:92:27:b8:35:48:ab:d8:92:56:69:87:35:
                    ac:7d:97:9e:08:ea:f3:f6:0c:08:d9:85:0f:a4:bb:
                    8d:e9:0e:8d:5d:30:71:b5:6d:3b:40:3e:28:2e:e1:
                    c9:54:d8:bc:c5:f2:e7:23:dc:56:33:a6:10:dd:85:
                    1c:e4:22:11:ea:ea:20:12:e0:bf:0f:eb:20:2d:2a:
                    81:e7:3f:1c:a8:31:c2:c2:31:e6:89:9b:5a:02:93:
                    79:71:68:56:d1:9b:79:92:76:7b:44:46:e1:9e:39:
                    83:1c:e3:51:f9:37:d1:79:29:c5:c6:ee:10:f0:db:
                    4d:06:93:e4:39:f5:f6:39:d9:77:d7:d8:c4:b4:f7:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:7D:9F:50:C4:4F:3D:4D:FD:2E:FC:D0:08:C9:8F:E9:85:14:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/b05f4cc0-8f1e-3599-9699-a1657e608268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ff0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d4:c0:f9:f3:8b:98:22:be:a2:d7:51:c2:93:93:fd:9d:75:
         4b:b5:2e:8d:8c:7e:c1:47:0d:56:de:24:36:2d:83:79:6c:2d:
         db:cc:5f:bc:23:c8:f7:f4:fc:c3:2b:47:53:97:7d:eb:9e:00:
         25:33:d1:09:47:45:df:b9:06:b3:b9:df:e9:b8:e6:58:96:43:
         f1:25:88:88:1b:62:43:53:ef:3c:52:83:8f:5f:62:f2:15:57:
         b4:d7:df:85:f6:6c:3b:fe:06:2b:2d:3e:01:40:98:6e:f2:a1:
         7c:2d:f1:65:58:69:74:8c:68:81:00:0f:5c:4d:57:01:1a:ac:
         9b:5f:4e:6e:7a:ff:69:1a:c2:59:be:49:f6:25:d1:63:fa:26:
         e3:da:17:ad:4c:57:b1:63:54:ce:2d:5d:6b:fc:86:fd:b2:7a:
         ff:a5:53:ac:e1:20:0d:da:d5:58:d4:cb:e8:59:d3:92:21:8f:
         30:58:b3:9c:5c:2f:55:d5:21:f4:d8:f2:98:4b:ce:49:79:c4:
         41:9f:05:89:46:1d:52:2f:a5:24:50:c5:d4:78:70:38:d0:e5:
         5d:f8:d9:aa:ce:71:17:97:b9:ae:db:0c:ec:fd:dc:a7:9d:ad:
         ae:09:2e:e4:df:07:9e:68:16:32:83:08:4a:cb:25:e5:9d:fa:
         e3:75:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:13 2026 by rpki-client