Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
File:                     ca1db00b-973c-3719-a596-87b6067e983c.roa (raw, json)
Hash identifier:          zB5eF1w6NObQAkdAC2XgwZdFYKNJZYKKMKH93MjEQS0=
Subject key identifier:   3E:32:C5:59:A5:1A:E5:31:7A:9C:C4:7C:78:2A:1E:2D:53:5A:C2:84
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584FAF588ED8E99D0FABE8E7FA80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     398549
IP address blocks:        2605:dd40:8570::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:8e:d8:e9:9d:0f:ab:e8:e7:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=74881884-433d-4704-bbf1-c60b11830af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:4a:14:ed:30:21:1c:c6:dc:0a:1f:44:2b:
                    20:b9:1b:6d:93:37:41:cb:9f:42:19:99:6a:95:a5:
                    3d:2f:57:d0:81:2b:0e:be:25:16:c2:25:73:cb:88:
                    13:ef:bd:b7:8d:fe:c2:25:20:7e:de:6d:d5:a3:f4:
                    25:52:b2:94:b2:a9:e3:b0:83:cf:25:6b:eb:8d:fc:
                    7b:69:69:f5:69:49:9e:df:c4:33:33:cd:e5:d3:2c:
                    36:f0:45:98:2c:85:30:b6:6c:2f:5d:0b:93:a2:4b:
                    50:5b:c4:89:36:0a:66:b3:be:91:b6:14:b1:f2:22:
                    6d:c3:cb:be:6c:12:c2:b8:1e:0c:d4:79:aa:ba:61:
                    c3:67:91:8b:0c:87:cb:90:7f:d8:b6:43:ce:95:2d:
                    6e:76:80:05:c9:97:d8:7a:f7:2d:e0:fa:25:89:69:
                    98:b8:8c:e4:da:42:ed:0f:40:9a:7b:95:9c:2f:18:
                    76:1a:01:cc:7d:de:4a:41:0f:90:a1:9d:a5:49:7a:
                    ed:df:ba:a3:6f:83:91:a3:dd:6d:ee:31:6e:1c:3d:
                    d1:be:27:05:44:ed:ec:36:61:d1:9e:15:21:aa:94:
                    69:bf:76:f8:9d:8b:6d:77:8e:e4:ce:de:6d:88:a2:
                    c6:41:8d:d1:d9:81:1a:87:98:0f:1f:fb:72:e0:df:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:32:C5:59:A5:1A:E5:31:7A:9C:C4:7C:78:2A:1E:2D:53:5A:C2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:e3:13:6f:46:6f:09:3b:f8:26:37:94:28:8e:7b:df:83:
         30:3b:96:60:19:60:04:99:5b:dd:86:bb:ee:f7:06:31:40:49:
         7d:eb:06:cd:d5:8a:c5:ed:4e:2c:1a:da:20:0a:a7:08:1f:45:
         91:6f:e6:4c:40:9f:05:d4:92:a1:a1:97:00:ab:09:53:f7:c4:
         d0:70:c5:ac:71:ce:99:f0:94:29:3f:54:18:d1:e8:3c:17:59:
         6c:e5:3b:7b:2d:bd:fa:41:16:91:db:11:4b:6c:d5:c9:f0:39:
         3d:7e:70:00:cc:d8:0d:55:7b:8d:47:3b:71:2e:dd:10:fe:11:
         a0:6d:2b:67:71:ab:bd:bc:ae:1a:42:70:3d:42:80:14:d0:b9:
         92:1a:bf:82:aa:04:73:c2:be:51:2c:fe:3d:80:ed:75:b0:1c:
         e3:68:f3:77:52:c9:9a:7a:82:c6:fd:1e:69:39:1a:0c:8e:61:
         b5:c6:40:fe:ea:2a:2c:c0:d8:05:27:4a:21:20:7e:41:43:a0:
         40:43:f3:1d:8b:51:4f:30:a6:ad:72:20:f6:23:f5:1e:f8:f0:
         dd:31:1d:16:12:3f:f1:b6:17:08:9a:3d:36:ea:a1:41:0f:79:
         62:af:c7:f0:71:78:5b:b9:fb:80:3e:21:1b:21:0e:34:9a:30:
         fb:30:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:41:30 2026 by rpki-client