Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ebd2d198-ae9a-3c43-b444-5801d8156855.roa
File:                     ebd2d198-ae9a-3c43-b444-5801d8156855.roa (raw, json)
Hash identifier:          2C0Z7v8paBuhBBCcmeiCFFEfzRsNW1IjjkARnqquw/o=
Subject key identifier:   86:6C:CB:DE:A0:FA:F4:24:1B:BD:3C:86:3A:52:55:5F:A0:65:91:C7
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F4328584E3E5F3E6FDFB8DA0F1328DF80
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ebd2d198-ae9a-3c43-b444-5801d8156855.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2601:1904:1140::/44 maxlen: 48
                          2601:1904:1180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3e:6f:df:b8:da:0f:13:28:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=57c52ba4-7235-4dfe-ab22-0e082dade77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:c6:2c:ef:3b:e3:a0:38:72:94:ac:3a:9b:
                    b9:45:33:24:cd:b3:a2:dc:ef:6e:f6:d0:5b:a4:7f:
                    51:4e:b5:69:79:ef:cc:0a:ea:4b:9f:6b:f0:e5:63:
                    a4:63:fe:b6:d1:7b:53:87:ea:43:bd:0c:68:91:c3:
                    0b:7d:b6:2d:3e:3c:2a:73:87:83:f6:8c:b4:e7:9a:
                    2b:a7:c8:4b:45:be:5e:eb:2d:b8:db:5e:72:9e:56:
                    39:91:30:26:0c:f9:aa:29:97:b5:65:a7:b2:e6:03:
                    bd:e6:5a:4b:59:99:b9:f8:e6:ea:9b:85:72:0d:4d:
                    7a:c9:a4:b2:5c:b2:39:ac:00:f7:09:f4:ea:37:31:
                    b5:1e:d1:44:df:68:ac:13:76:01:19:bc:4e:d8:1a:
                    96:ab:4e:90:7c:90:76:e2:c6:ed:be:77:91:16:08:
                    24:86:55:66:fc:c0:76:ab:8d:d2:f9:44:f6:0f:f7:
                    84:52:32:f2:81:f7:66:e7:55:f8:e7:01:72:3f:91:
                    e6:e0:04:12:b8:bd:ee:a7:5a:24:ba:57:db:e2:2e:
                    31:34:fa:d9:16:e0:1c:17:c9:14:d7:95:e5:66:e4:
                    cc:b4:e5:93:48:5f:14:80:9f:92:41:55:e1:a4:91:
                    0e:41:a6:7f:02:82:fd:08:66:ab:3a:85:47:ed:d2:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:CB:DE:A0:FA:F4:24:1B:BD:3C:86:3A:52:55:5F:A0:65:91:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ebd2d198-ae9a-3c43-b444-5801d8156855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1904:1140::/44
                  2601:1904:1180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:08:82:9f:4a:bb:20:17:6b:0a:da:88:72:80:28:98:c4:a5:
         74:6c:0d:a4:c4:21:d4:44:23:af:46:b1:1c:66:5a:d5:c2:7e:
         52:7e:8a:13:ad:a3:50:f3:a8:4a:3b:82:94:60:a7:40:43:2f:
         31:3a:51:ff:70:10:c8:57:26:64:1c:59:fd:18:c9:84:c3:d0:
         ff:61:6c:b5:d9:50:b1:37:44:b5:9f:98:9a:53:2f:4e:47:ba:
         22:5f:2c:6a:c3:13:0c:17:ef:fb:ab:87:76:7e:a6:46:6b:51:
         28:25:c7:19:e6:e8:70:39:af:74:44:44:99:b4:b2:d9:ca:cf:
         16:5f:2b:37:3a:94:94:b3:d9:fb:b2:9a:d4:c4:c7:1b:5f:08:
         ec:d7:89:3d:d2:54:d5:6e:4b:fd:4d:51:9c:e6:ea:38:97:eb:
         b3:80:2c:68:b1:6f:7c:f2:3d:c0:07:ea:4f:f4:0c:26:32:82:
         95:95:e3:ec:df:d3:52:1c:29:64:2c:6d:12:fe:2d:22:e0:fd:
         70:7d:d5:a0:79:81:98:e0:3f:4a:9d:b5:f9:33:00:44:da:b5:
         2e:e4:c4:16:12:5d:72:a3:37:d4:cb:53:3c:e3:9c:9f:f7:92:
         c3:6f:6c:1f:e1:c8:ec:7a:a6:af:b3:fa:bd:ea:95:1f:13:59:
         b1:54:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 20:18:17 2026 by rpki-client