Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/91ef1e49-be2e-3975-96c7-e5f5fa525d1a.roa
File:                     91ef1e49-be2e-3975-96c7-e5f5fa525d1a.roa (raw, json)
Hash identifier:          fEDG5UDsaIFDH924TZnHOqKQ3Yd3Uv6iAdLg+Vi5sOA=
Subject key identifier:   F4:26:A1:E2:04:61:46:55:81:48:79:BE:29:58:45:AB:D9:4B:0F:5D
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584D94DF770B968671DF1E843B00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/91ef1e49-be2e-3975-96c7-e5f5fa525d1a.roa
Signing time:             Tue 21 Apr 2026 15:51:28 +0000
ROA not before:           Tue 21 Apr 2026 15:51:28 +0000
ROA not after:            Mon 20 Jul 2026 15:51:28 +0000
asID:                     398549
IP address blocks:        2605:dd40:5008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:df:77:0b:96:86:71:df:1e:84:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 21 15:51:28 2026 GMT
            Not After : Jul 20 15:51:28 2026 GMT
        Subject: CN=636d385e-bf87-42fa-b72f-3fdcc99b9349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7e:39:c8:0d:7b:a6:8d:13:1a:f1:8b:de:5f:
                    16:07:d5:a6:be:e7:68:1d:44:c7:76:aa:48:13:87:
                    de:f8:30:69:e1:ba:8e:c0:c4:49:22:f5:2d:92:26:
                    58:0a:cb:f9:71:05:62:c2:95:eb:3c:9a:30:e6:2a:
                    e6:88:54:a0:7a:6f:00:1c:3e:77:a1:46:6b:c0:e3:
                    d5:b9:51:17:8b:e2:6f:64:8d:c5:e9:f2:e0:e5:9a:
                    1a:8a:b0:8a:d3:66:02:d5:15:79:22:0b:02:4e:5e:
                    8d:6f:6b:2d:08:51:8b:17:05:46:a0:58:56:3a:6f:
                    12:49:f2:df:9d:3c:d3:2e:e6:8c:4d:9f:ce:cc:bf:
                    04:42:ea:89:0c:e8:d5:22:f5:95:32:69:be:1b:21:
                    3a:19:91:d9:1c:b9:92:26:7e:aa:d5:e9:ef:cd:11:
                    b7:fc:d3:db:e5:60:68:50:17:33:4f:d2:8f:ee:25:
                    ff:8f:11:a5:c7:98:20:93:e2:0a:d8:42:b0:dd:97:
                    3c:50:af:e1:01:bb:80:ba:84:c0:ca:21:ea:c9:f6:
                    c8:8e:89:c5:9f:cc:4b:7e:3e:b9:4a:78:1d:c6:07:
                    82:90:48:ff:2c:a2:bc:35:bf:31:75:64:c7:58:83:
                    89:fc:1f:a7:43:be:16:8b:06:7f:e2:ac:4a:bf:5f:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:26:A1:E2:04:61:46:55:81:48:79:BE:29:58:45:AB:D9:4B:0F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/91ef1e49-be2e-3975-96c7-e5f5fa525d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:5008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:95:4f:4e:67:b4:0d:eb:93:cc:52:0d:56:aa:be:6f:e2:8a:
         3f:1c:26:a7:e1:25:a6:13:e8:52:11:18:05:73:54:64:e2:1e:
         d5:c1:59:d8:72:ef:59:79:34:5c:e8:02:14:03:e4:6b:79:61:
         47:fd:32:62:10:bf:eb:48:ef:d2:0b:63:75:4b:92:3e:43:3a:
         f3:c3:19:e5:bb:49:aa:85:43:b9:66:ed:d1:05:06:57:e1:62:
         1f:9f:67:d8:cf:0e:f6:b9:f7:33:e0:0e:c8:53:e9:bc:cd:9e:
         8d:96:5d:aa:37:87:73:73:d3:b7:45:c4:47:f3:bc:bd:01:b8:
         64:eb:a9:95:c1:ab:24:6f:5d:61:81:63:3c:49:4d:1b:00:83:
         93:35:31:76:9e:91:ba:d3:0f:5d:2b:96:ea:60:4d:bc:f9:ab:
         ca:60:81:31:c0:00:90:a9:71:f2:bf:7c:b4:7a:b5:bd:35:2f:
         c7:af:6c:e5:28:dd:d0:e8:9b:ab:af:fb:ef:a7:d2:c3:a7:fc:
         bd:37:e8:08:7d:b3:d5:ce:26:e8:ce:28:6d:26:3c:d6:f2:09:
         18:48:47:6c:9e:46:b6:c9:2e:8e:35:86:7e:d9:da:7d:02:14:
         59:ac:36:85:df:5c:2f:95:8e:79:99:b8:82:b4:09:6b:33:9f:
         03:c1:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:24:57 2026 by rpki-client