Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa
File:                     0fc501a8-9b51-3494-80e1-b539914bd3c7.roa (raw, json)
Hash identifier:          inCDGWD0wUloyD8a6Tf3igRKUfH57Uy+Gl2TDyccu2E=
Subject key identifier:   CF:3A:44:E1:C2:DD:A6:7E:C2:94:38:63:E6:D2:8E:F0:AF:1C:95:DE
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584DBE6B1F4FEFF1BAC412DE6E40
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     26383
IP address blocks:        2605:e440:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:1f:4f:ef:f1:ba:c4:12:de:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=dad1b18c-3900-4c39-b6fc-bdd2f5a287c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:f5:aa:0f:c1:0e:15:f9:07:cf:c4:59:e2:
                    c0:59:9e:15:a5:bb:69:6d:72:d9:07:40:43:dd:0e:
                    54:74:2f:ff:bb:4a:4c:4b:f3:76:97:be:67:77:9b:
                    64:f3:41:00:97:69:59:ea:e2:c1:44:ac:cb:20:38:
                    45:c5:0e:56:39:76:58:ca:2f:df:a5:f0:cb:ea:1e:
                    b1:72:17:cb:2a:e0:3e:2b:18:72:95:3f:18:01:ae:
                    94:f0:74:58:d2:36:7f:90:90:b3:8e:1f:42:d7:40:
                    ab:e9:a5:ae:d0:cf:d2:be:56:f2:b3:e6:4e:b1:32:
                    be:c8:f8:bb:a4:91:43:05:ee:b1:20:d5:eb:17:48:
                    6d:82:50:05:f6:17:1c:f6:eb:a0:2e:16:67:d7:80:
                    75:72:17:1a:6f:88:dc:ae:18:a8:a5:8c:29:99:37:
                    b3:48:de:64:e6:db:95:77:ab:5e:f9:76:76:c7:bf:
                    de:d7:3a:de:30:68:4b:1a:55:ec:6a:61:a5:c7:f3:
                    37:dd:a2:96:a6:c2:d9:1e:7d:50:71:e9:06:50:e5:
                    b1:72:da:7b:82:7f:18:dc:aa:60:5a:80:df:5d:98:
                    05:25:3c:66:4d:c3:54:c9:db:cd:13:ae:ed:2d:2a:
                    46:40:6c:31:76:c7:ac:30:b0:e3:a2:99:31:3c:87:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3A:44:E1:C2:DD:A6:7E:C2:94:38:63:E6:D2:8E:F0:AF:1C:95:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:1f:45:79:56:78:aa:16:9e:91:c1:e1:0d:a7:26:a4:a9:
         38:97:ca:1d:6e:08:ed:fb:13:87:8c:84:bc:0e:b8:c8:dd:0e:
         1c:99:8d:f8:aa:25:3c:df:ff:90:b0:cc:b0:57:56:6a:4e:11:
         41:c6:be:4c:0a:30:9a:1d:f4:13:6e:51:8b:02:5b:83:65:8f:
         4c:cc:9b:0e:6e:63:ea:c5:b4:17:de:45:de:9b:95:53:29:d3:
         00:93:94:41:7e:90:b2:02:66:8e:06:3d:77:f6:25:f7:a6:80:
         2d:17:05:ec:db:77:f8:76:7f:60:a1:15:3e:89:3f:cf:a9:ab:
         f9:e8:b6:6f:c2:fa:02:32:63:ce:91:4e:74:f7:39:34:90:4a:
         f6:6c:2c:2e:c4:f9:3a:3e:e6:f2:82:bc:1f:55:f3:a9:5c:7b:
         ad:80:44:9d:93:f7:0e:b9:10:0c:1c:27:0d:3c:7b:6d:07:c2:
         5e:ee:c8:24:46:f6:fd:61:f1:ed:5c:5b:e0:35:ac:09:1e:88:
         f5:b7:68:d4:3f:44:3d:5e:e1:0e:bc:9d:75:39:d1:29:f9:ae:
         e9:f6:cc:0a:a2:5a:cd:fd:6d:6f:ab:f9:13:e9:6a:6e:77:ae:
         76:8f:06:9c:c4:d6:25:bf:b0:2e:73:56:a6:45:39:22:e0:2a:
         b0:0f:2b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:14:38 2026 by rpki-client