Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa
File:                     f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa (raw, json)
Hash identifier:          tptRuLOYqPX/hOJOqcT6E761hc7SBWFD2sVW8Dn26yg=
Subject key identifier:   29:C6:E3:62:6C:9F:33:19:BC:91:C4:D5:50:57:53:F4:1C:D3:8C:71
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584ED861EBB96B40EC5E9D8F7780
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     398549
IP address blocks:        2605:dd40:5005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:eb:b9:6b:40:ec:5e:9d:8f:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=1a57dc81-9ef6-4c4f-a001-683a1f51755e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:6c:17:21:24:a6:26:b1:f7:ae:0c:f3:e0:
                    3b:46:90:bf:c6:c1:ae:fe:43:85:02:73:28:83:44:
                    f8:ef:1e:49:94:40:6f:a6:8e:4d:cb:99:92:f5:f8:
                    2e:18:21:1f:e2:01:a3:0d:cd:49:17:78:81:19:ce:
                    01:ef:a2:a6:d1:f9:41:d2:ad:d2:0e:ad:98:98:d6:
                    ad:61:a7:1f:36:2d:90:2d:5d:88:41:e2:0d:44:6c:
                    1a:e8:0a:d3:08:28:0f:c5:37:10:f5:cf:7e:6f:f8:
                    b4:cc:6f:da:4d:08:0a:33:ed:12:e0:14:cf:e0:09:
                    07:16:e5:c6:61:87:03:11:79:30:57:2b:77:a9:67:
                    5d:9a:90:97:3c:af:61:58:9e:44:d4:74:1b:7e:ae:
                    fb:ac:ef:8a:2e:75:68:a8:f4:d1:8c:70:d2:49:79:
                    eb:b9:a9:3c:0f:4a:22:db:f3:81:dd:80:96:8f:b0:
                    3b:d4:1c:ad:d4:9c:83:af:55:95:c3:83:68:6d:7a:
                    72:d3:de:ce:c6:ca:20:ce:9d:2b:52:98:f1:c2:a6:
                    c8:e8:b5:e7:74:49:8f:b7:e7:7e:cf:f2:e3:6d:83:
                    3f:ca:74:02:e9:5f:db:1e:b4:df:17:81:0b:af:55:
                    3f:f1:be:13:45:ed:32:db:78:a7:9b:4c:b5:25:0b:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C6:E3:62:6C:9F:33:19:BC:91:C4:D5:50:57:53:F4:1C:D3:8C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:5005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:c7:5e:14:28:62:cb:77:98:d5:7f:72:bf:e0:78:cc:ee:
         b4:8e:ca:4e:02:64:04:f2:da:5a:15:55:9f:bc:4b:0d:16:8c:
         7b:8a:51:47:94:1d:ef:ea:cd:40:74:ab:21:13:9a:80:39:53:
         c0:d7:4f:97:4b:65:e9:10:e7:d9:a1:d0:b8:04:32:f2:74:5b:
         91:b6:29:47:1f:41:12:ea:5d:1a:e8:e8:2e:54:32:36:12:cc:
         40:dc:ca:c0:c2:0e:b1:63:6b:73:f4:92:ef:ff:69:5e:b2:c0:
         c6:5b:19:48:bb:46:50:a0:f8:dc:9f:a1:49:95:46:35:3f:60:
         28:60:12:db:16:5a:66:f0:da:9a:d4:26:a2:13:77:b8:07:7f:
         f3:5c:54:e6:59:9e:73:c2:43:0d:bb:c8:f6:5a:ec:ef:98:cf:
         de:03:a9:26:f5:90:41:c0:a4:51:63:ba:d4:de:74:92:32:f1:
         7d:cd:49:05:2b:f1:59:74:0b:6b:77:4e:07:7c:66:c6:53:92:
         a8:94:de:27:d1:ef:08:18:7a:31:a2:e2:50:3b:bf:3b:cf:4a:
         9f:8f:8b:b1:a2:6b:ac:31:ae:04:2d:aa:b8:83:e7:06:fa:9c:
         21:19:fb:e4:f4:93:a2:3c:1c:7a:82:7f:df:c0:3d:51:fb:64:
         be:52:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 12:52:02 2026 by rpki-client