Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
File:                     ceda3ed4-49e5-373f-b1c9-7344fce724af.roa (raw, json)
Hash identifier:          +JRXW8Quypk9ga6vvWxg3yazVMAMgENSPWhpj0SSdo8=
Subject key identifier:   F3:35:28:6F:E9:19:E9:85:74:B6:C4:27:0F:84:BE:FB:65:62:31:E4
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F4328584D44FA447E74BBB66E56770900
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     46539
IP address blocks:        2605:cb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:44:7e:74:bb:b6:6e:56:77:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=467dc6c0-09b9-4d7a-919b-b0d399e65228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:2d:cb:ea:71:45:dd:b6:27:ab:58:33:25:
                    df:bc:6f:e5:8c:2b:7e:17:9d:a1:de:f4:e4:4e:08:
                    e0:94:f3:18:72:2e:18:f7:3f:9b:54:28:27:6f:a4:
                    46:33:4c:a6:cf:8b:7a:51:34:54:86:38:b5:c9:aa:
                    5f:9c:e7:ed:da:fb:55:21:ca:fb:13:9f:95:0b:2d:
                    d7:ab:91:f7:34:82:3f:e2:6f:de:f4:e7:09:6e:59:
                    4a:27:25:64:0c:0b:69:9e:3f:e6:b9:6c:69:4b:61:
                    ca:09:80:b5:de:e7:ef:54:d1:3b:a8:76:81:a6:79:
                    6d:03:4e:c8:20:42:b7:3b:5f:33:d5:eb:d2:bb:c6:
                    ae:ca:cd:f0:53:50:3d:38:cc:d0:d2:fc:68:8b:4d:
                    aa:30:7e:a7:07:4b:0f:ff:cd:fd:a0:91:8a:ee:ed:
                    ad:f2:8c:37:1b:0d:13:de:80:7e:68:11:2a:a9:3b:
                    43:20:00:0c:03:d0:1b:40:ee:98:3a:04:79:bc:7a:
                    4d:6f:9f:35:be:4a:07:bc:aa:fe:99:b2:fe:28:b3:
                    32:30:99:9c:ec:5c:95:86:a1:49:93:af:87:c9:76:
                    67:8e:bc:78:93:32:f3:8b:03:76:4c:ee:c4:e1:ea:
                    34:2d:66:98:e2:96:03:12:2b:75:b2:6d:c0:aa:dd:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:35:28:6F:E9:19:E9:85:74:B6:C4:27:0F:84:BE:FB:65:62:31:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:cb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:eb:e9:37:85:a1:45:ca:bd:7e:da:66:70:76:2a:b0:51:
         ff:ce:4e:b4:50:3a:de:a2:2e:55:8b:32:13:5f:14:24:92:07:
         77:7a:c6:f9:b0:8b:53:1e:3a:d1:66:a4:67:ee:25:40:bd:8e:
         e5:e4:96:47:9d:7c:66:43:75:7d:47:46:37:a5:fc:db:f8:f9:
         06:c9:68:e2:49:a6:5e:9d:ea:2b:f4:d1:a4:1c:92:49:56:68:
         3e:f0:b7:11:10:90:7f:7c:0d:9b:4b:80:dd:d5:a8:90:93:4a:
         1a:5b:57:f4:bf:f4:b1:a8:a5:ad:05:73:29:1e:c1:24:4f:d4:
         17:6d:38:78:3c:80:67:3c:34:d2:69:50:c3:0c:95:de:a1:d6:
         10:63:02:f9:eb:0e:1d:5c:e7:b6:62:f2:d6:f6:17:37:ad:0b:
         0c:f6:55:22:53:d9:c7:78:54:07:a2:9e:5d:d1:e7:fb:44:7b:
         00:41:98:32:c9:1b:76:ce:f6:85:6c:5d:50:35:a4:18:65:3b:
         5c:3b:e9:3a:51:70:be:cb:ed:3e:58:d1:6f:08:f5:32:bb:38:
         75:84:a0:bb:0a:34:50:65:87:95:19:87:89:94:ba:e2:80:73:
         ef:7f:59:02:c8:53:6a:30:6a:3e:df:bf:f7:44:b3:a0:c1:64:
         b8:24:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:59 2026 by rpki-client