Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa
File:                     c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa (raw, json)
Hash identifier:          QWmEa/xbukr8FHexuU6KIl2lBKPUFOPkyspz6zlgQ+Q=
Subject key identifier:   3F:27:8A:49:E9:C6:21:1B:42:86:F9:44:E9:C9:5B:BF:88:F6:FE:55
Certificate issuer:       /CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
Certificate serial:       010D0C9F4328584DD4C0668B1BB4B6624B9BE080
Authority key identifier: 79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     10587
IP address blocks:        2607:f670::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:66:8b:1b:b4:b6:62:4b:9b:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=61d5cbb9-37f8-479f-b191-264dd4f0fafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:80:48:5f:cf:d0:89:53:4f:18:1f:fb:b0:
                    96:cb:d9:92:c0:5a:7c:03:55:a3:14:b9:45:d8:2b:
                    ef:c3:3c:e2:55:e2:90:2a:50:e0:c5:69:6e:b8:fb:
                    86:5c:c3:30:37:d6:0b:8e:dd:ca:24:fa:d2:11:b1:
                    4b:19:9a:90:f7:05:8f:b9:dd:85:90:75:f7:8b:a5:
                    50:c5:4a:6f:14:9c:06:15:bb:2b:31:07:38:04:0f:
                    7e:93:2c:75:b0:23:86:f5:09:75:eb:4d:3e:eb:36:
                    6f:18:9b:64:01:6e:42:c1:a4:f3:07:89:4b:fa:57:
                    5c:5f:aa:0e:f6:af:1b:c0:d0:3f:8a:19:61:23:c5:
                    81:13:82:c2:95:04:e8:c2:ca:e1:ce:73:4f:8a:4e:
                    81:b8:d5:be:b5:14:14:45:93:d5:28:9a:f4:03:21:
                    5d:98:07:dc:fa:f0:6a:d9:60:db:a6:ef:c9:64:e1:
                    a1:7e:68:2c:d1:f8:37:32:63:7b:c9:6d:f1:08:b0:
                    f5:b7:9a:aa:31:26:d4:15:c3:68:b4:ec:bf:b5:16:
                    ee:56:1f:a3:0a:4d:c5:e6:2b:ed:49:91:51:7f:c9:
                    b2:24:04:f9:dc:9f:8e:47:e1:72:13:27:4e:9b:3a:
                    fa:07:d8:4a:d5:fb:48:c7:f8:45:0c:6b:10:3d:29:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:8A:49:E9:C6:21:1B:42:86:F9:44:E9:C9:5B:BF:88:F6:FE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl

            X509v3 Authority Key Identifier:
                keyid:79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f670::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:2e:d7:64:0b:4f:c1:d8:93:44:b5:f1:90:a8:66:79:55:a4:
         60:3c:a6:d2:c6:ac:a8:6b:21:b7:01:c5:57:4f:19:e0:2e:69:
         b5:f4:dc:ca:e7:84:27:ab:4f:e4:86:f9:32:fd:46:6d:23:34:
         d6:5f:40:81:f2:17:ab:f5:26:5d:ee:b8:c2:3f:d6:f8:11:1a:
         65:2d:69:d9:80:57:9e:88:18:8a:51:c5:a3:60:94:a3:05:cb:
         1c:cc:49:1f:3b:fe:9b:d5:23:aa:38:4d:a1:fd:59:3f:02:fb:
         26:02:8a:47:0f:2f:a0:07:72:63:24:3c:49:ed:d0:75:e5:36:
         ee:3d:60:27:b7:20:ca:85:d0:1d:8c:c4:3a:8f:15:ee:94:f5:
         4b:f8:8a:7a:22:93:a1:4f:54:d3:6c:da:f4:cd:63:14:cc:7d:
         83:f7:3c:91:80:6f:2e:3e:16:67:a7:a2:b0:f8:ef:3c:95:d0:
         3a:b1:fe:9f:25:fb:2e:c8:6c:b6:b2:28:ef:42:f4:0d:99:20:
         a0:e6:39:9d:e9:70:0e:5b:71:15:51:dc:bc:e3:70:2e:f0:54:
         d9:e7:76:24:21:dd:ad:19:b3:dd:4e:e5:52:78:ce:1f:2e:c9:
         ce:96:d4:23:0e:fd:fc:31:3f:39:28:36:e9:dd:fc:c8:e6:7e:
         3d:9f:0f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:38:47 2026 by rpki-client