Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/80e0e00d-2eb4-3ca8-b7b5-3dfb1ee1e3cf.roa
File:                     80e0e00d-2eb4-3ca8-b7b5-3dfb1ee1e3cf.roa (raw, json)
Hash identifier:          b6kFnE4n1/cj/g2HCc5oCLaou7xlJQ0ojiu8Od9ISoM=
Subject key identifier:   C3:58:4A:FC:A4:18:46:C6:CA:86:55:0C:00:DC:B6:8F:B2:26:15:74
Certificate issuer:       /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Certificate serial:       010D0C9F4328584D27FF99F4E87427A26935E980
Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/80e0e00d-2eb4-3ca8-b7b5-3dfb1ee1e3cf.roa
Signing time:             Fri 13 Mar 2026 15:53:06 +0000
ROA not before:           Fri 13 Mar 2026 15:53:06 +0000
ROA not after:            Thu 11 Jun 2026 15:53:06 +0000
asID:                     19366
IP address blocks:        2605:39c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:ff:99:f4:e8:74:27:a2:69:35:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
        Validity
            Not Before: Mar 13 15:53:06 2026 GMT
            Not After : Jun 11 15:53:06 2026 GMT
        Subject: CN=916aafcf-8cfe-4034-997b-6d49820a1508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:00:22:9b:d5:5c:64:02:2f:21:cf:2c:e2:
                    c6:0c:55:52:b5:3e:85:ff:c6:5d:53:2a:f1:a7:a1:
                    fd:99:5e:99:82:d3:f5:25:87:2d:6e:a6:c0:90:ce:
                    84:55:01:1e:81:10:0c:e0:60:c3:0c:f7:34:49:51:
                    ec:38:e2:97:18:51:88:02:ae:df:6c:a8:bb:9a:d3:
                    ba:de:9a:f1:d4:7d:c8:ca:8d:19:64:67:cf:3c:90:
                    23:5f:f8:de:9d:50:2a:d2:99:bb:a7:ba:87:bf:13:
                    e6:3f:b4:ef:63:96:65:7a:f3:32:0c:65:f8:30:20:
                    9e:c8:2a:69:31:e2:d8:6a:11:b0:74:c9:1a:04:7a:
                    b3:07:99:53:5e:65:09:70:f5:7f:30:45:f7:b2:d0:
                    d4:07:1c:d3:c3:4e:a7:9d:d2:3f:3e:4a:92:1e:d8:
                    23:fc:ed:cf:9e:26:59:e7:f1:d9:7a:1c:85:af:71:
                    f5:94:a5:e7:99:d5:56:24:e3:ad:df:92:a7:65:a8:
                    e3:4d:bf:aa:c6:e6:57:ee:e3:3c:48:63:f4:75:ef:
                    13:4d:fc:c4:ef:46:f4:e2:bb:c1:b2:f3:2f:70:69:
                    ff:1d:dc:95:31:e5:89:2e:78:fd:39:e0:76:fb:94:
                    0d:58:c1:02:7c:f9:36:b5:aa:07:68:ea:d6:92:1c:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:58:4A:FC:A4:18:46:C6:CA:86:55:0C:00:DC:B6:8F:B2:26:15:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/80e0e00d-2eb4-3ca8-b7b5-3dfb1ee1e3cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl

            X509v3 Authority Key Identifier:
                keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:39c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:f6:62:27:9f:5e:ef:a1:1c:4d:16:6e:68:3f:4e:6b:b8:
         00:7e:36:0f:d9:cd:02:0f:66:fa:ea:b3:ee:fa:9b:7b:60:3e:
         d3:ba:ac:7f:4a:e1:26:82:82:12:fb:78:e2:e0:d0:41:f6:cd:
         a7:cd:ee:67:49:34:5d:83:d9:78:5f:b4:7d:32:43:69:32:95:
         95:08:c8:84:7e:19:20:38:72:a0:95:84:71:0d:82:d2:5b:d6:
         97:fb:a0:d3:bf:c3:27:04:6e:fe:80:c3:4b:dd:af:81:df:c8:
         a4:3f:2d:f3:d9:61:d3:dc:e8:cf:6d:88:d2:19:cf:2a:fc:1e:
         51:10:53:2f:f8:de:19:07:76:bf:c1:96:b4:e0:b1:05:f0:d0:
         21:76:e9:26:d4:bd:a4:9b:4a:f3:c4:8b:a5:10:2e:75:a7:9c:
         bf:9b:6f:6b:15:03:a4:75:b2:00:4a:54:43:55:2a:67:41:b9:
         24:ef:f3:41:6f:69:b8:e6:02:e4:4e:43:7b:bd:65:f4:9e:c5:
         e1:ed:54:25:7e:c6:ab:08:a7:98:ec:dd:6c:63:04:88:19:29:
         b3:f0:12:ec:d4:a6:ca:e2:9a:73:81:4e:03:1b:07:c2:15:42:
         fc:f6:ed:52:b3:39:ce:a7:16:c8:5e:07:a6:c3:84:bf:c3:2d:
         07:a7:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:16:20 2026 by rpki-client