Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa
File:                     c79fa6a2-7d36-310a-b63c-928c510a3373.roa (raw, json)
Hash identifier:          ME13MDn5iXsxgSNuJsYv/XZIvdntP7leis4Vzz/th+U=
Subject key identifier:   66:5B:E3:6E:51:EE:18:49:24:AA:1C:40:95:8E:4E:ED:A7:E3:8C:06
Certificate issuer:       /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
Certificate serial:       010D0C9F4328584D40CA48BC4023DD5187347600
Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11708
IP address blocks:        2605:b080::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:48:bc:40:23:dd:51:87:34:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=bed9b91d-286e-4c7f-b3b1-7650e5074752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:d0:52:5c:ab:20:3c:e4:10:1d:97:09:85:
                    0e:fa:63:b6:3f:9b:f8:13:68:9d:59:b3:a9:9b:8d:
                    7c:50:fd:ea:06:93:dc:38:dd:6f:d1:01:77:26:a0:
                    82:64:d3:d1:73:4b:6d:62:07:e4:c3:fa:95:f9:cf:
                    ba:68:4f:c1:0d:65:cc:de:69:c9:66:db:77:7a:db:
                    ee:6d:3c:f1:96:7d:82:87:64:14:a0:e0:b5:56:0f:
                    8c:b8:e6:e8:32:fb:ed:1f:7c:1d:f6:8f:fc:c1:6f:
                    06:1f:63:31:8b:e4:46:f0:7d:a0:0d:d8:32:27:df:
                    40:23:30:7e:78:00:0d:8c:a5:70:fc:66:c1:3a:df:
                    01:65:e3:a6:3b:e4:e4:c2:62:e4:8b:1a:29:09:5b:
                    22:34:69:88:49:7e:12:8f:fe:6e:ff:69:de:64:d2:
                    cd:ea:7b:38:8b:77:31:a1:9c:86:34:ce:ed:c8:01:
                    d1:d6:c4:d1:69:8a:eb:a4:89:4f:9a:d9:55:4a:8b:
                    ed:a6:03:e2:31:fd:62:0b:a0:c2:3b:be:22:59:57:
                    7d:07:92:86:45:ab:3b:0b:7f:df:92:b6:1a:0f:3b:
                    b6:0c:5d:84:7b:1d:ae:5e:64:d0:ae:5f:95:ad:7b:
                    e1:03:46:1c:b1:e6:91:94:af:99:32:2f:8e:9e:94:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:E3:6E:51:EE:18:49:24:AA:1C:40:95:8E:4E:ED:A7:E3:8C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl

            X509v3 Authority Key Identifier:
                keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:e1:22:c4:a0:1c:56:5e:83:a9:73:27:f6:90:39:2c:58:
         a3:e9:cf:b2:c0:ab:b1:3d:35:bd:cd:2e:e7:3d:a6:26:76:cc:
         c2:61:74:5a:8f:c8:2c:ee:8b:26:98:47:e7:fb:0e:65:cd:5c:
         3f:86:b4:f5:2f:ae:ac:ea:5a:f6:f0:51:45:5e:71:9d:8f:4c:
         f3:bc:af:0e:c0:57:c2:b3:ff:25:1c:40:7f:8e:7d:92:04:d3:
         2b:b1:c1:8f:d3:4b:ab:1b:0d:d9:ac:13:ec:f8:3b:cc:5b:67:
         64:ba:3a:48:c1:ec:36:6b:dd:e1:85:6c:f1:df:bb:37:ae:3f:
         8a:35:04:4f:dc:75:a1:b3:ce:ce:0e:39:f8:59:90:c3:e6:93:
         50:62:fb:b3:67:d3:d0:46:2e:40:5d:1c:4b:96:8f:c7:ba:d9:
         d2:84:4a:fc:0a:1e:d5:61:cf:56:6d:7c:a7:a0:86:34:fa:25:
         19:b7:60:23:11:45:b1:3e:08:83:5d:a3:cc:e9:ee:49:5f:cf:
         29:69:2a:18:ee:81:49:62:e3:aa:15:72:51:68:c9:cb:1f:26:
         e7:91:0c:59:a3:1c:eb:5a:86:3e:ff:49:8d:8f:07:f6:7f:5e:
         e2:17:4c:fa:54:d5:8f:98:ad:96:c3:d8:89:9c:86:d5:97:ea:
         33:55:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:32 2026 by rpki-client