Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa
File:                     0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa (raw, json)
Hash identifier:          eZaokwnLbP8VxxrSZexi+lxpdyI+ydb8QggoQ1x706g=
Subject key identifier:   FB:51:E1:C5:76:61:0B:E3:C5:67:E5:F7:0D:F0:2A:70:3A:7F:59:EA
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584D8EF99A4BCE943A4C14630780
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        2607:8d40:f20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:9a:4b:ce:94:3a:4c:14:63:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c7a3ea45-b52d-4ff3-8ee8-21f45e981636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:a6:0f:81:cd:b5:7c:fb:33:eb:d0:7c:f8:
                    bc:0b:1a:22:2e:30:20:d4:34:1a:30:8a:81:e9:2c:
                    6d:45:ba:8b:fe:ff:3e:b9:9a:94:7c:41:b7:77:e9:
                    73:ac:06:23:44:42:09:7e:9e:72:08:aa:2f:5e:99:
                    16:27:3b:fd:a1:58:1d:5e:08:5a:76:80:ca:e3:16:
                    b7:c6:9c:88:d4:8f:a2:f6:b2:89:4d:6b:69:0b:f7:
                    2f:0f:c1:ce:93:98:75:d8:de:5a:fa:a0:a5:4d:81:
                    6d:7e:ca:70:9e:cb:0d:44:ee:84:6d:7f:8c:86:be:
                    20:0c:6f:71:b5:b5:0e:be:c4:eb:d3:cd:ff:48:94:
                    de:e2:35:e9:68:6d:21:07:6f:9d:ff:de:e0:53:16:
                    ec:71:17:62:3b:56:e9:2c:c4:d6:cc:19:71:5f:83:
                    55:c1:65:a7:b6:1a:0a:19:aa:11:a3:55:84:a3:ee:
                    0b:c8:15:0f:94:8a:02:59:a8:fb:e8:b9:86:91:89:
                    78:80:d6:52:e6:88:9a:0e:19:12:fd:24:c8:10:99:
                    67:93:7b:c0:84:07:d7:4a:53:5c:1a:bb:ac:53:5b:
                    3e:94:46:67:86:38:95:28:69:7a:ba:98:79:8b:bf:
                    5e:8b:3c:3c:1f:a9:d5:5c:38:7b:d8:ac:3c:ce:d5:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:E1:C5:76:61:0B:E3:C5:67:E5:F7:0D:F0:2A:70:3A:7F:59:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f0:e2:e6:2c:26:0a:c3:1e:22:76:25:f3:f0:10:d2:bc:29:
         e2:2e:62:e2:2d:33:ee:81:4b:e5:ee:cf:fa:02:41:90:ea:32:
         11:31:a1:b6:76:ce:03:6c:ca:6b:ff:6c:a6:c8:89:ac:ea:44:
         7e:2f:59:c9:32:ab:70:8b:e1:6e:0d:f4:2e:24:bf:8f:93:f8:
         b2:01:9d:31:08:d6:d2:02:e4:e9:6b:dd:e5:01:e7:ee:bb:cf:
         08:39:12:48:2a:6a:0c:3b:f3:4f:89:e5:f6:2c:b7:43:c9:f0:
         89:6c:3f:08:27:65:d5:ad:a3:97:cf:de:bc:fd:d7:da:fe:73:
         a1:a0:bb:8e:d1:31:26:86:d8:8a:0b:b0:3a:43:99:63:c9:cf:
         be:25:11:bc:32:8c:52:0e:c6:1a:6b:0e:cc:6b:44:13:e3:14:
         73:8d:df:66:7c:cd:87:75:16:33:c9:e2:dd:c6:53:53:c4:1c:
         aa:28:eb:84:a7:fe:e9:f8:7b:9c:f4:2c:d0:e4:1f:1e:4e:48:
         43:a9:bd:eb:96:ba:91:81:27:63:c3:75:e1:ad:3e:20:15:39:
         53:37:6c:32:f1:19:2a:7a:e8:5c:05:ca:f2:98:51:61:fe:e4:
         e4:38:51:ee:e3:a9:a1:b0:f2:e1:3a:f4:d9:a4:f3:24:94:4f:
         9a:4e:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:31 2026 by rpki-client