Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/9f27c935-ee52-3739-987b-7a2a18d06f07.roa
File:                     9f27c935-ee52-3739-987b-7a2a18d06f07.roa (raw, json)
Hash identifier:          OmU9LGo9ty7AEwd21nd8+cqkxFu/9fMal1aVs2/Ekho=
Subject key identifier:   70:EE:01:20:D6:92:91:54:54:0D:33:6A:C1:14:0C:F8:8F:FF:4B:0E
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584ED001EA1F77F3FE98320CA300
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/9f27c935-ee52-3739-987b-7a2a18d06f07.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     26383
IP address blocks:        2605:e440:11::/48 maxlen: 48
                          2605:e440:12::/48 maxlen: 48
                          2605:e440:13::/48 maxlen: 48
                          2605:e440:14::/48 maxlen: 48
                          2605:e440:15::/48 maxlen: 48
                          2605:e440:16::/48 maxlen: 48
                          2605:e440:17::/48 maxlen: 48
                          2605:e440:18::/48 maxlen: 48
                          2605:e440:19::/48 maxlen: 48
                          2605:e440:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ea:1f:77:f3:fe:98:32:0c:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=9f4ee034-841d-4087-866b-42316961da67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:bd:b7:3f:0b:e8:95:18:37:26:ff:70:ab:
                    86:47:3e:27:43:53:79:29:c6:9d:d0:d2:50:36:ca:
                    2c:f0:4f:45:d1:3b:77:67:58:e8:7b:90:8e:ef:1c:
                    a1:71:31:ca:3e:ba:1f:86:b8:96:5d:a4:22:94:13:
                    4c:06:21:07:d2:f9:28:bc:39:18:ce:a1:b3:0b:46:
                    44:51:53:5b:80:31:a5:99:1c:6d:ed:f3:af:ca:21:
                    2f:46:94:9f:1f:bb:bb:7b:df:7e:9b:a2:47:bf:65:
                    80:13:28:a5:c4:ff:8c:40:e4:45:d7:11:97:2c:dd:
                    8e:3e:40:67:1a:59:11:7f:24:d8:56:b4:d9:1c:80:
                    76:0d:4e:15:92:88:47:21:f2:3d:79:c7:d3:a9:75:
                    d7:d7:5f:d4:c5:73:7f:cf:cf:47:37:53:e8:c0:52:
                    ec:29:b9:80:3c:c5:4e:fb:84:02:c3:18:49:5c:4d:
                    94:c7:ca:b6:b9:f0:c8:77:1b:96:0b:1a:53:a4:54:
                    1b:58:3b:9e:4d:82:25:a0:53:1e:c2:88:90:9f:c4:
                    42:4f:06:12:24:87:34:b1:56:0a:a5:16:a4:82:ac:
                    bd:d8:0c:59:21:72:32:a0:e0:51:ae:82:72:0a:3a:
                    e1:f1:c7:4c:bc:df:a7:78:47:b7:3a:3f:bb:36:4d:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EE:01:20:D6:92:91:54:54:0D:33:6A:C1:14:0C:F8:8F:FF:4B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/9f27c935-ee52-3739-987b-7a2a18d06f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:11::-2605:e440:19:ffff:ffff:ffff:ffff:ffff
                  2605:e440:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:eb:6c:30:e2:2e:2f:df:d7:ff:5b:c4:02:31:85:d0:a3:
         0c:44:1a:9f:0f:ee:4c:f4:e8:bc:4b:69:59:2d:fd:12:24:82:
         34:bf:46:da:c5:b3:b0:6c:02:8c:97:4b:28:47:d1:46:7f:a7:
         2c:65:71:7c:cc:57:a4:63:f8:bf:0d:40:cd:e2:20:5c:13:1a:
         ab:74:6d:eb:c1:e7:72:ef:83:1f:61:41:72:f1:a2:fe:93:a4:
         3b:66:0a:40:b3:27:9c:57:40:21:b5:b8:76:ab:99:33:ab:07:
         ac:c4:22:65:ab:78:5f:15:45:e2:fa:46:72:bd:0f:9b:8a:86:
         78:83:9a:37:ed:24:23:e2:26:5b:2b:14:a8:87:bc:2f:62:7c:
         d1:e8:de:c2:41:53:ed:e4:04:e4:58:4e:a8:05:27:7f:79:8a:
         56:9d:93:2a:33:36:b8:78:5f:c3:c3:b4:b9:80:47:da:35:da:
         06:cb:bc:46:d9:69:88:4c:1a:03:ea:b3:bc:eb:64:42:2c:1e:
         31:42:38:06:f9:5a:73:8d:c6:6e:47:3a:a6:94:64:da:3f:fe:
         ea:17:3f:77:53:b2:df:54:9f:b2:b7:2b:e2:11:48:4c:97:47:
         f7:be:c9:db:9f:71:34:47:e0:a1:c1:21:73:1d:b6:92:06:45:
         c3:31:d7:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:55 2026 by rpki-client