Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa
File:                     829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa (raw, json)
Hash identifier:          XKoZQl0+31wyb5PRt4AvMyhKorKX3pRl7Kg4FQgs3Zw=
Subject key identifier:   4E:B1:B1:45:63:F9:3D:98:51:5D:A1:48:AF:D5:7B:7B:74:D9:4D:67
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584DD78B28F1E0711D8579073800
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     25645
IP address blocks:        2605:8300:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:28:f1:e0:71:1d:85:79:07:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=a097eeb7-d5af-496d-b0ba-c67da8e373f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:95:40:a2:48:20:da:d1:11:a6:07:14:56:
                    0f:3d:21:99:47:3d:62:2e:f8:df:cf:ac:4c:c4:6d:
                    78:9b:40:e6:85:e4:54:75:65:49:2b:6c:05:a3:ed:
                    de:ca:db:29:ed:dd:62:52:97:79:b1:11:17:50:8e:
                    8d:cb:73:ad:e7:64:6d:5d:44:f8:1b:fa:1b:39:db:
                    cd:30:2d:13:7b:ee:53:61:12:08:95:35:c8:f4:12:
                    66:33:0b:82:0b:88:7c:d9:e6:95:d7:5b:06:78:ae:
                    37:60:ce:27:ba:40:86:b0:b1:6c:51:fd:6a:3a:bd:
                    07:ff:02:cb:df:d4:45:1a:ca:18:cc:5c:f7:c3:7e:
                    a2:0f:dd:fe:d8:7d:3a:0b:cf:4a:ae:b9:dc:89:98:
                    b0:de:45:bf:48:c8:d3:62:60:3d:2c:b9:7b:96:2a:
                    20:1c:d4:a0:13:45:7a:77:9a:9f:a2:fb:d1:2f:a0:
                    d6:58:10:62:ce:76:00:88:8d:3a:b7:65:89:a7:c5:
                    a5:4a:02:a1:7e:a7:01:58:7b:93:8e:c4:3e:96:88:
                    40:52:0d:a7:a9:a9:e3:b7:a2:f7:7f:74:bb:8b:26:
                    d6:07:9e:6d:8a:1e:08:47:4a:5c:c9:2d:b3:66:8a:
                    66:39:3b:e9:30:10:ad:e2:c5:c4:94:ee:ea:14:3a:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B1:B1:45:63:F9:3D:98:51:5D:A1:48:AF:D5:7B:7B:74:D9:4D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:a5:d8:b1:3f:58:bc:78:03:0e:7a:76:1e:31:d2:ca:b1:
         1e:11:ab:ee:e4:e9:72:12:dc:80:19:2f:05:de:90:76:54:30:
         84:6d:7c:da:98:bc:b1:1d:cf:e9:d0:12:f3:16:8a:98:94:52:
         98:15:a7:7f:be:a5:7e:d6:00:b0:65:4b:eb:fc:50:0a:b0:99:
         10:2a:06:d4:86:1d:04:bb:97:71:9f:59:fb:74:2e:cc:d2:37:
         50:c2:f3:b8:7b:f7:f6:2a:f8:7c:fc:da:14:b2:57:65:6f:22:
         30:62:9b:a9:1b:1d:30:10:c1:c0:0c:52:9c:12:2d:23:1c:3a:
         08:cc:8f:ea:c6:9a:05:49:d2:49:06:0e:fa:cb:38:1c:b4:d5:
         4c:9b:02:b4:15:6f:3e:91:37:76:06:51:ae:40:54:ac:e8:c0:
         f1:28:f8:8a:95:99:e4:92:22:a3:fb:33:8a:01:ae:8a:ea:65:
         77:df:0d:f8:df:5e:31:db:69:1d:77:b9:f3:19:80:7f:12:d1:
         7a:94:98:f7:71:aa:22:38:11:74:6a:df:b0:6c:d5:44:f5:68:
         cf:9f:70:80:00:4a:c8:21:38:c3:83:cf:71:9e:04:c5:4e:2e:
         d6:f2:e0:1d:73:ee:fc:93:1a:72:fc:f2:0d:68:4d:cd:bf:1c:
         f3:61:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:21:10 2026 by rpki-client