Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/887ed675-9c65-3d98-9efe-a8220e32f001.roa
File:                     887ed675-9c65-3d98-9efe-a8220e32f001.roa (raw, json)
Hash identifier:          kyYRllvZw2Qvv33oWbbkUC8UC8htsG9wR+oDampHSW8=
Subject key identifier:   83:E8:9F:1D:3B:1E:DC:4F:3C:B6:45:E6:FC:CD:81:79:DB:B6:59:BF
Certificate issuer:       /CN=d1cc8500-bae2-45fc-bc07-4020eda9134a
Certificate serial:       010D0C9F4328584D70E2E95CBA2E12F832525600
Authority key identifier: 53:07:AF:B1:C1:33:61:14:2C:DB:99:A0:A1:01:38:C1:6A:5D:C9:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/887ed675-9c65-3d98-9efe-a8220e32f001.roa
Signing time:             Wed 08 Apr 2026 18:29:19 +0000
ROA not before:           Wed 08 Apr 2026 18:29:19 +0000
ROA not after:            Tue 07 Jul 2026 18:29:19 +0000
asID:                     19058
IP address blocks:        2605:d640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:e2:e9:5c:ba:2e:12:f8:32:52:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1cc8500-bae2-45fc-bc07-4020eda9134a
        Validity
            Not Before: Apr  8 18:29:19 2026 GMT
            Not After : Jul  7 18:29:19 2026 GMT
        Subject: CN=a6b62714-a3cc-4fe0-b5d9-5155a94e0c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:29:97:a9:2f:80:c3:fd:c8:bb:44:77:fa:
                    a6:9e:90:65:ba:4e:65:d7:3f:32:e5:4a:db:57:70:
                    8c:f6:fe:33:1c:72:cd:4b:fb:e6:c3:bb:50:ae:5e:
                    74:88:50:dd:b4:dd:80:d8:9b:00:85:dd:4a:e4:9a:
                    52:06:fa:70:37:ed:14:e6:08:2c:8b:09:c1:01:b9:
                    30:2c:6d:f0:88:4a:f7:f5:09:d7:30:ae:2a:c4:ca:
                    12:8d:2e:b8:49:a6:e7:3f:cf:d2:77:7f:33:86:1f:
                    a6:ae:ea:84:36:54:76:53:67:b7:c1:94:38:d7:f1:
                    3e:63:86:91:c0:3a:a4:d7:84:2a:62:6b:c8:d3:0c:
                    07:05:ed:ac:ca:b5:16:0e:93:c0:1c:85:b5:37:27:
                    26:81:9b:1c:cb:b1:72:94:e4:44:2b:f7:10:02:0a:
                    fd:55:db:f9:73:7c:a0:d1:1b:1d:6c:e9:02:18:8d:
                    14:fd:75:ea:bb:47:9e:dd:35:c2:99:a0:60:5b:52:
                    be:de:a8:12:fb:ff:d5:09:67:79:b8:5a:2c:69:05:
                    e5:32:c9:69:1a:06:63:47:0d:53:e2:cf:ff:d8:d6:
                    d5:8d:8d:3b:df:52:bb:fb:44:a6:11:ee:34:36:76:
                    95:cb:c8:48:08:24:f8:08:c4:09:a4:e5:d7:93:ae:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:9F:1D:3B:1E:DC:4F:3C:B6:45:E6:FC:CD:81:79:DB:B6:59:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/887ed675-9c65-3d98-9efe-a8220e32f001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.crl

            X509v3 Authority Key Identifier:
                keyid:53:07:AF:B1:C1:33:61:14:2C:DB:99:A0:A1:01:38:C1:6A:5D:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:6e:f8:99:04:60:fe:44:09:85:83:03:d0:72:29:47:32:
         81:3b:fc:b9:d7:e9:40:5c:68:09:17:1d:1a:2a:de:6c:bb:17:
         0f:a5:5f:e0:02:44:fd:8c:73:4f:6b:77:b4:03:98:6c:c8:ce:
         43:de:c7:bb:0f:bc:b9:b0:32:dd:43:54:33:2f:76:d4:c4:72:
         c8:48:15:fd:25:58:a4:30:08:cb:e8:42:79:81:3a:25:d7:27:
         be:03:65:ce:58:f6:14:16:e4:1b:40:ba:b6:96:b9:c8:55:25:
         8f:0a:35:90:3e:56:5e:79:82:b5:03:75:6a:4d:5d:fc:1b:21:
         d0:8c:3b:9f:0f:a6:9e:13:5f:a4:30:71:76:0d:3b:3f:b6:a8:
         25:c8:ea:88:fd:4e:4b:51:16:cb:29:d3:bf:5d:46:2b:88:9e:
         15:b4:6d:61:40:bd:22:fd:33:4d:6b:ba:2c:3e:cc:fa:71:45:
         c7:16:e1:f1:1b:c4:65:a9:ac:b3:bc:51:48:2b:75:e3:d6:eb:
         25:0f:09:25:37:d2:a7:5d:b5:b8:e7:57:66:dc:6a:a7:12:48:
         c8:0a:b6:c0:06:6c:88:56:e8:a6:38:76:03:d3:ae:89:3b:77:
         b6:1d:ac:e0:b7:00:ff:8d:2d:0c:04:ba:21:5a:8d:07:05:5f:
         1d:76:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:01:08 2026 by rpki-client