Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/4557ed77-d3f6-3a71-8268-aebad1bdaeb1.roa
File:                     4557ed77-d3f6-3a71-8268-aebad1bdaeb1.roa (raw, json)
Hash identifier:          6Hm+V+ODNftRDvMImix9yrIMYMTDzBBDW/Xf0RzUn0A=
Subject key identifier:   57:F8:63:1F:89:2E:80:26:47:3F:14:F9:73:F5:D0:AD:68:00:81:7E
Certificate issuer:       /CN=37090917-e988-493b-8a89-f34e7d005ea2
Certificate serial:       010D0C9F4328584E561A15A2FB22A68BB9B15730
Authority key identifier: BD:65:DF:2B:A0:5A:98:CC:7D:82:FD:EE:FE:3D:C9:EE:C0:15:B1:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/4557ed77-d3f6-3a71-8268-aebad1bdaeb1.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     402395
IP address blocks:        2605:d7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/37090917-e988-493b-8a89-f34e7d005ea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/37090917-e988-493b-8a89-f34e7d005ea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:15:a2:fb:22:a6:8b:b9:b1:57:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37090917-e988-493b-8a89-f34e7d005ea2
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=392fa5fc-046a-400d-bdb7-0111ff35ae0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:a5:f1:cc:c3:2d:2d:ab:83:f4:ec:3f:9a:
                    07:9b:d5:be:12:60:98:49:c6:b2:5a:3c:ce:e3:22:
                    1a:4d:eb:68:96:68:82:84:ef:cf:f2:9c:9c:e6:05:
                    35:f0:1d:f1:1c:e5:83:40:c8:3f:75:52:af:83:4c:
                    40:d6:6f:06:7d:72:68:dc:87:b8:01:9f:38:a9:15:
                    0b:0d:83:c3:b0:79:04:71:ff:eb:f8:0f:dc:eb:64:
                    f0:c8:b0:d7:32:14:4a:c5:93:33:70:5c:6b:b9:9b:
                    36:3f:b3:4d:05:d7:88:ac:ff:a1:47:45:92:b9:14:
                    10:c1:00:3a:09:7a:7f:ad:c6:de:43:72:f4:c0:76:
                    1f:57:4c:dc:24:ca:1f:6b:a7:d8:98:7b:07:55:2e:
                    ce:4f:51:38:1b:82:78:17:98:16:b8:07:8f:5b:8d:
                    6f:66:93:25:26:38:fb:9f:26:8d:3e:b5:3c:63:14:
                    31:36:1e:4e:98:2f:53:22:a4:41:1a:15:73:09:54:
                    fa:3f:76:3c:29:31:32:4c:e4:eb:d3:e5:ea:9a:f3:
                    43:2e:38:ce:3b:fc:f0:fb:e8:c0:7a:5b:28:55:5b:
                    ef:93:a0:aa:94:0a:e3:73:28:ae:8f:0c:a6:bb:08:
                    05:b6:e2:70:76:cf:50:6a:d9:ea:3f:08:29:5c:50:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F8:63:1F:89:2E:80:26:47:3F:14:F9:73:F5:D0:AD:68:00:81:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/4557ed77-d3f6-3a71-8268-aebad1bdaeb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/37090917-e988-493b-8a89-f34e7d005ea2.crl

            X509v3 Authority Key Identifier:
                keyid:BD:65:DF:2B:A0:5A:98:CC:7D:82:FD:EE:FE:3D:C9:EE:C0:15:B1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:db:8d:85:e5:68:2a:6f:1a:46:2b:e7:3d:05:aa:3e:a3:63:
         64:a3:66:60:53:88:3d:44:48:4f:30:e0:09:3f:fa:4f:aa:cf:
         4f:bb:58:b1:3a:4c:0d:d3:6e:db:c2:b7:0c:23:e8:db:c0:17:
         0a:1d:5c:5b:93:bc:80:7d:29:bd:e2:3f:85:49:21:6c:39:bc:
         8d:5c:36:23:58:36:c4:c4:fb:14:cf:6f:51:f9:18:af:55:36:
         8f:eb:fb:f3:a2:6f:ab:b2:89:7f:52:ec:6b:fd:0e:1d:bc:01:
         f3:91:8a:77:58:09:19:c1:74:2c:ea:9f:9d:96:4d:91:3d:32:
         ed:aa:c8:28:2a:6a:95:0c:27:b1:02:8d:e2:4e:c0:97:fa:07:
         7c:f3:ab:4f:25:39:d0:b6:43:58:4b:24:83:ba:cc:96:14:c2:
         5b:da:5b:d2:79:c8:1b:4b:79:70:33:35:48:68:55:f8:64:d3:
         2c:66:a8:9f:85:bd:79:b1:bf:d2:d6:95:99:5a:2f:6a:03:04:
         01:30:3e:b6:52:20:49:8b:2f:ba:a8:25:f4:fd:a3:65:77:a1:
         38:99:6e:b5:30:b1:3a:c3:b0:e2:69:40:ad:9f:71:03:8f:dc:
         e0:ef:c4:bc:e3:83:79:6b:3d:be:f0:67:97:9f:a1:4b:4e:62:
         e1:e2:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:24:02 2026 by rpki-client