Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa
File:                     d0fc7d83-8248-36e1-8957-e593c1f5887d.roa (raw, json)
Hash identifier:          AaDc5KOtktwG3A2pVOVXMpO/XBfrB8nODFyhNvoIFUk=
Subject key identifier:   C1:84:B9:80:38:88:88:02:AE:2A:60:E5:BC:65:19:0D:30:2A:53:07
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584E2AD456ED9032F3C0ADB9B638
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     4134
IP address blocks:        2605:9d80:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:56:ed:90:32:f3:c0:ad:b9:b6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=4f3170a8-2359-4643-9b2f-a82fc863da78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:56:52:d7:1c:75:f9:04:15:93:f2:43:6f:
                    7f:96:1b:74:a7:bc:56:6a:01:cf:d4:f8:8d:87:f5:
                    f0:66:53:ac:0b:67:ae:87:ba:9a:89:1e:28:6c:56:
                    5d:8c:fb:fa:76:a0:c3:3c:4a:18:47:72:00:ec:da:
                    e0:ae:6a:cb:ac:d1:48:af:38:8a:09:fb:80:c1:50:
                    13:68:6d:6c:48:23:9a:20:1a:1a:68:fb:aa:4f:3c:
                    6f:ae:ec:c9:d8:e7:8b:4a:3a:a7:8f:46:97:b9:2f:
                    60:64:fa:3a:ed:e4:a6:db:9d:a1:da:67:56:da:ad:
                    8a:e3:a7:b0:ee:37:a5:8b:4b:d1:60:fa:4e:1b:6b:
                    09:46:c9:5e:4c:53:a5:78:d3:12:df:38:89:02:13:
                    2b:d1:ce:fb:e6:04:23:70:7a:66:2a:26:03:00:7c:
                    45:d0:e9:80:3a:fa:d5:44:6a:e8:c2:a7:83:17:ed:
                    f1:ab:6e:0a:80:a9:16:8c:29:5c:b2:e8:66:3f:5d:
                    92:54:65:33:21:30:28:5e:41:c9:f1:e1:81:33:80:
                    04:89:f0:3b:34:3f:1c:7b:dd:26:63:10:9e:1c:67:
                    c8:6a:dc:13:43:91:c2:f0:27:75:fe:e8:81:3c:73:
                    dc:74:62:31:05:38:02:35:09:88:33:d9:6c:df:d9:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:B9:80:38:88:88:02:AE:2A:60:E5:BC:65:19:0D:30:2A:53:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ff:66:c8:8a:7c:f5:6d:a3:76:85:9f:9e:27:18:bf:ad:7c:
         9e:42:d9:5e:6b:77:87:9b:21:21:cd:75:e7:51:7b:4b:b2:1c:
         30:64:a7:65:14:f4:5f:12:ba:e3:90:0f:98:9f:a5:99:ce:97:
         55:9d:8d:6b:82:20:08:ce:cf:3a:e4:f5:4e:06:a2:ef:e3:aa:
         db:ed:b1:e2:e1:15:b9:65:84:28:8c:87:1a:ff:cb:2c:4c:06:
         50:10:7f:5f:f0:b6:c4:0a:f3:b7:c2:f0:14:74:a3:f2:6d:d1:
         68:fa:0f:ca:7a:b9:c7:3b:b8:21:40:7a:bc:57:52:95:f8:22:
         c0:76:0d:08:a5:c1:cb:5f:54:5e:fb:b4:d6:03:7b:85:79:e3:
         bc:bc:1a:2c:c0:55:4c:cf:55:26:ca:73:21:94:1b:86:88:75:
         e0:54:45:c7:dc:f7:b9:ed:6c:92:c9:ab:f1:66:8e:82:d3:a6:
         18:c9:ce:95:52:56:1a:03:dd:b3:7f:29:98:0e:36:6f:55:dd:
         6f:a3:6d:9f:38:a9:3b:d6:dd:e5:53:5f:d9:46:81:63:37:a6:
         e6:b7:2d:d4:f9:56:de:53:77:e2:3a:dd:6b:98:5c:f0:bc:59:
         c3:21:10:ba:e4:fc:23:32:90:fa:76:41:46:68:a1:60:33:58:
         ce:23:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:08 2026 by rpki-client