Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
File:                     081735a6-8094-3e29-bc11-0063831723b9.roa (raw, json)
Hash identifier:          Iih4NhsAdamupFKX+a6oMoMuL7gDMtuZybgjDidLQZQ=
Subject key identifier:   0E:5A:EB:53:19:14:E9:02:04:92:6E:DF:B0:BB:BE:54:A8:2B:5C:63
Certificate issuer:       /CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
Certificate serial:       010D0C9F4328584C44410928DBCB550DB6F10B00
Authority key identifier: 1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
Signing time:             Mon 22 Dec 2025 02:00:32 +0000
ROA not before:           Mon 22 Dec 2025 02:00:32 +0000
ROA not after:            Sun 22 Mar 2026 01:00:32 +0000
asID:                     30674
IP address blocks:        2605:c780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:44:41:09:28:db:cb:55:0d:b6:f1:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
        Validity
            Not Before: Dec 22 02:00:32 2025 GMT
            Not After : Mar 22 01:00:32 2026 GMT
        Subject: CN=d75af1d5-3c4b-4241-9efe-5949ba1e8717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:85:62:1a:66:d5:92:ab:87:be:18:81:97:
                    1b:2f:45:59:fb:ee:da:8c:ba:f9:1b:53:32:ac:64:
                    52:d7:36:55:04:3c:d1:c5:05:29:72:1b:f9:0a:a6:
                    df:60:b5:c1:22:7e:90:01:40:9d:e5:11:2e:41:cd:
                    36:50:d2:77:ac:17:b0:19:e7:6b:8b:07:1e:1b:17:
                    f4:81:c7:77:93:c8:4c:d3:30:55:68:ee:23:ee:75:
                    01:42:55:3f:28:30:e5:38:13:65:30:37:24:8b:ab:
                    5f:f5:b7:33:ff:cc:f7:44:32:ee:63:fc:a2:25:39:
                    a1:3f:1b:f6:e3:e2:30:f4:30:12:75:86:e8:29:00:
                    e8:aa:19:cb:86:cb:29:f4:9b:57:b4:2d:0f:a4:12:
                    9f:78:4c:27:75:e3:4d:2f:fa:c9:a0:7f:64:66:2a:
                    ad:67:45:e2:76:80:f6:4f:03:23:cf:95:98:de:da:
                    03:43:e5:9b:ec:38:68:0c:0f:1c:47:4b:54:34:43:
                    b4:79:e5:2d:11:1e:c1:c8:c6:2d:59:04:58:da:e9:
                    e7:f5:d4:75:46:f5:71:90:3a:b0:74:82:95:97:a0:
                    38:22:68:28:10:cc:1b:4d:4e:d1:06:78:91:34:4a:
                    b0:2e:a9:4e:37:53:cc:13:56:6d:94:2e:35:df:4e:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5A:EB:53:19:14:E9:02:04:92:6E:DF:B0:BB:BE:54:A8:2B:5C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl

            X509v3 Authority Key Identifier:
                keyid:1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:58:4e:33:9a:40:f4:69:2d:76:5c:86:5f:78:6c:12:75:ea:
         cf:0e:27:7d:1f:6d:d7:18:bb:20:f0:4f:82:84:09:dc:9d:08:
         5a:df:97:f6:f5:0a:5d:ed:8c:27:1f:44:8a:98:11:24:33:0b:
         61:2b:53:74:05:64:13:fe:2a:d9:ba:44:41:7a:dd:78:d4:33:
         c7:05:00:ac:69:6b:cd:cb:e1:65:d5:c0:66:15:51:af:23:50:
         6f:72:ae:90:31:89:e9:6e:d4:a7:1d:15:20:f2:42:f3:7d:3b:
         10:38:4e:1a:ac:f8:f1:16:6f:01:6f:e8:b1:7d:45:33:e1:5d:
         fd:cf:99:d6:6e:78:a4:de:44:b3:5b:46:0f:d0:57:69:d6:6e:
         fc:9a:4a:ab:90:91:01:94:14:00:c3:d2:b8:fd:c5:2d:55:31:
         0c:50:74:e6:50:b6:c2:7d:46:fd:0f:4a:fb:84:e6:f6:d9:61:
         1e:e1:e4:7d:e9:05:82:d4:46:23:a8:57:92:89:23:2d:a9:79:
         d3:50:63:87:05:fd:50:43:64:f8:92:cf:5f:59:7b:68:42:f6:
         48:1c:f9:f6:cc:ac:8d:3b:51:f9:b3:52:79:e1:97:60:20:57:
         82:76:72:d0:d8:15:c3:2a:dc:e6:eb:92:c8:3c:13:5a:12:82:
         b9:f9:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:23:16 2026 by rpki-client