Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/e61638ac-0458-3073-b880-f5d7618f67a6.roa
File:                     e61638ac-0458-3073-b880-f5d7618f67a6.roa (raw, json)
Hash identifier:          yXuRlpXbuqP/6u38Auh11IUSLcjSGjkZBq63BO8WDWc=
Subject key identifier:   6C:A0:D8:0C:38:75:09:43:46:26:BD:BE:EE:3F:A9:9E:19:CD:DB:14
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584DBA3B20B2F5A2C016EB54CD00
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/e61638ac-0458-3073-b880-f5d7618f67a6.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     3599
IP address blocks:        2607:fee0:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:20:b2:f5:a2:c0:16:eb:54:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=58a283ec-f0d8-4b0b-9372-9dc9b98595c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:69:cb:b6:eb:87:db:2c:3c:07:52:c9:a3:
                    0c:7a:93:41:25:6d:6e:b5:84:f0:3b:89:03:99:5b:
                    17:33:f4:39:6a:44:39:3f:74:3c:78:d2:62:c3:b9:
                    48:a4:8b:8f:0c:cd:34:35:23:90:72:2c:b4:8d:8e:
                    78:62:85:e0:87:d5:b9:c2:96:82:31:78:a3:01:0c:
                    3c:fa:c1:36:55:03:33:c1:b9:3f:c2:e5:f7:f8:0c:
                    db:56:ee:e2:f3:51:bb:f4:84:d4:b9:78:bc:3c:c4:
                    7d:49:ff:f6:db:98:a7:a1:10:b6:5d:81:ac:18:7a:
                    40:00:10:31:45:ba:01:b8:35:18:7c:48:77:28:6f:
                    c1:96:67:76:ac:5f:df:86:12:0f:13:e6:e4:3c:de:
                    7e:91:ef:99:79:8b:e5:27:e5:36:4a:ac:86:24:18:
                    10:6f:be:78:9d:c7:b1:df:b5:61:b8:8c:f3:c1:ea:
                    3e:0a:6b:cf:c0:c6:0f:14:28:12:46:0f:c2:23:c5:
                    96:66:bc:52:8c:fa:f2:0c:54:61:7c:e3:81:96:5b:
                    ab:c2:4c:33:72:91:0c:f1:dd:84:b6:c9:00:94:ad:
                    ee:46:27:33:b5:87:f7:70:d1:99:99:02:8e:eb:a9:
                    13:ba:38:6a:1e:23:5e:3e:37:20:8c:f0:33:17:1a:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A0:D8:0C:38:75:09:43:46:26:BD:BE:EE:3F:A9:9E:19:CD:DB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/e61638ac-0458-3073-b880-f5d7618f67a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fee0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:20:7b:46:cb:5b:d5:f0:b1:52:1f:fb:5d:50:89:2b:ca:
         be:a1:25:cb:d6:08:50:16:18:05:1e:76:f7:0e:fd:73:69:8e:
         c0:85:7b:e2:fe:d9:14:a1:8c:f5:5e:e2:36:dc:1a:db:d2:51:
         d0:b4:dc:59:02:de:d9:07:b0:d5:72:da:6c:97:04:23:05:84:
         16:27:93:fa:d3:5b:18:89:2a:5d:68:eb:9c:f5:57:b4:46:3a:
         f0:09:a6:8f:d8:1a:6e:4b:f3:b8:c1:41:55:14:dc:a6:7e:47:
         91:91:65:ff:6f:5a:ee:95:d0:26:af:c7:63:16:4d:f8:e8:84:
         19:d0:02:e7:6c:0c:7b:d1:19:c4:a5:3b:92:65:ab:ea:59:e1:
         be:a4:4f:9a:5a:3b:24:17:33:35:7b:99:82:9c:50:8c:87:34:
         ee:d0:f4:28:b6:9e:f6:a0:28:7a:54:77:72:57:e6:bc:7e:9b:
         6e:7b:35:db:f1:4c:f6:36:e8:3d:40:18:9b:c2:f8:fc:63:98:
         c1:8c:58:60:86:b4:23:fa:7f:d2:9d:0a:32:43:cf:79:ff:64:
         7a:ab:fb:eb:ee:48:c7:80:b2:b0:89:e5:54:91:2f:9e:c7:df:
         10:38:a7:bc:b2:d0:6f:3d:48:75:62:ac:7c:d7:55:b1:1f:37:
         80:be:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:56 2026 by rpki-client