Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/37de751b-7981-31a2-a63c-581a5206ef45.roa
File:                     37de751b-7981-31a2-a63c-581a5206ef45.roa (raw, json)
Hash identifier:          9MXHSF38v+Jf0KoILuvc9rSR4q+S0S07rTO3IpMV+HU=
Subject key identifier:   16:B4:F8:87:90:98:90:0D:80:A6:46:0E:94:3F:5E:65:2A:14:33:F6
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584D386A24D3A8171B9BD59FC200
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/37de751b-7981-31a2-a63c-581a5206ef45.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     26383
IP address blocks:        2605:e440:3c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:24:d3:a8:17:1b:9b:d5:9f:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=e61a9742-436a-4ec0-bb4e-01c32b370a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:87:78:17:44:12:39:70:f4:92:3a:fc:ee:
                    76:04:3c:c5:b8:bf:9c:5f:29:ee:77:5d:33:87:e2:
                    e8:41:af:7b:6a:1b:7c:ac:02:4a:12:21:d6:ed:b6:
                    19:33:3d:08:e4:f3:89:57:17:f0:74:8e:ca:5d:2d:
                    c4:a1:44:18:b8:38:c8:c9:25:36:20:4c:49:86:bd:
                    17:57:9f:9f:2a:63:25:da:56:63:62:30:80:86:e5:
                    1d:bc:54:99:45:f4:f9:42:09:0c:84:95:11:41:37:
                    b3:39:b0:33:d2:ed:9a:a8:90:72:30:26:dc:be:3e:
                    ab:7f:36:4f:72:9c:2d:eb:05:e1:c8:31:55:93:2d:
                    fc:1f:27:1f:70:9b:06:ff:d3:f1:22:2e:9b:0e:d9:
                    53:bd:30:25:6e:fb:72:86:2d:2c:32:04:1e:70:39:
                    74:ae:22:43:67:52:ca:1e:17:58:d5:75:16:89:e5:
                    85:76:72:34:e7:67:cf:af:ee:3a:e9:83:7f:d9:aa:
                    5b:bd:5b:c8:72:a0:ed:76:fb:3e:64:28:5a:6b:a4:
                    71:06:86:1a:6b:c2:d5:58:eb:c2:e5:2d:7e:14:9b:
                    bc:b1:af:a1:02:25:fc:fb:a5:c7:e6:87:87:62:06:
                    b5:26:c9:02:bd:21:0d:ec:ee:64:7d:d2:1c:b2:46:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B4:F8:87:90:98:90:0D:80:A6:46:0E:94:3F:5E:65:2A:14:33:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/37de751b-7981-31a2-a63c-581a5206ef45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:3c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:8f:cf:6c:cf:0c:b6:ef:c1:f3:36:7d:52:82:a3:f4:c2:
         a2:05:1a:fe:84:09:f0:c1:82:46:99:56:80:ba:cc:ec:b9:20:
         6b:a6:6b:fc:0c:48:5f:25:fc:3b:7e:26:f8:86:5c:85:99:46:
         05:39:f2:01:ed:a2:3e:8d:0c:53:a2:f7:46:24:0f:a4:4a:7a:
         98:b2:b4:ac:c9:cc:4d:71:df:31:29:ac:92:57:23:9a:f6:9a:
         e3:4d:41:c2:31:4a:0b:35:80:6d:76:06:65:b3:42:fe:f9:1b:
         5d:4c:d6:fb:57:c8:17:e4:a3:b9:8b:e7:c7:3c:23:45:10:65:
         a4:b8:8d:51:1b:ae:44:53:c4:99:6f:bc:92:78:55:9b:4a:05:
         d5:47:81:20:1a:c6:33:f0:92:fe:34:67:05:bc:64:8d:db:2b:
         68:49:41:d5:58:5c:3c:8e:41:2b:62:3d:40:ed:1b:23:4b:35:
         68:85:a3:5c:9e:8f:97:0c:77:2b:7f:cb:ce:5a:53:07:7a:3b:
         d2:45:7d:db:77:0e:4d:40:09:86:67:3a:e2:e5:d8:6c:16:52:
         49:4a:c7:b7:e4:87:b4:ad:c4:12:9f:ab:62:ea:72:56:da:9e:
         63:8b:fe:40:1a:e4:4c:1f:f0:a9:65:f7:13:39:cc:fa:9f:d7:
         c2:6b:a8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:36 2026 by rpki-client