Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa
File:                     a6ff856c-46ae-36b6-987f-46ef805f5376.roa (raw, json)
Hash identifier:          ibe0jinG7TzmUlpFNVRvQ3n/wIGFV2O0drpePwgSg5M=
Subject key identifier:   B8:4D:80:41:B2:E2:D2:98:39:48:EC:C6:32:EF:31:28:BE:67:A8:E3
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584D948AAAE7EC9BB691F9689400
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     22351
IP address blocks:        2607:f668::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:aa:e7:ec:9b:b6:91:f9:68:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=385be816-38e4-4764-ace2-26d5687f27e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:66:72:fb:94:15:d4:e9:49:1e:ac:ea:22:
                    93:5f:30:e4:3f:82:e3:12:c5:1e:54:f3:06:01:68:
                    de:53:3e:3e:2e:ff:82:55:44:fd:a9:6b:1d:aa:fd:
                    58:9b:82:6d:8a:77:d5:a3:0f:75:d1:8d:85:aa:3f:
                    b2:9a:c3:f4:62:6a:a6:dc:8f:a6:a9:1d:9c:0b:31:
                    4f:e1:b1:8d:09:ac:af:79:ea:f2:80:a0:2b:ca:72:
                    86:03:16:8a:d2:d2:4c:2d:9a:78:97:d8:2c:6c:eb:
                    97:78:68:5f:10:b1:6a:01:67:8d:e0:d7:33:fe:8d:
                    e2:88:7e:9d:eb:e9:42:bd:44:5b:60:fd:45:e4:55:
                    65:83:be:61:49:76:98:43:b4:1d:ca:75:26:73:00:
                    a7:37:0c:a8:bd:3f:78:d4:0d:c9:cf:da:a4:d1:b4:
                    60:e2:df:e2:ee:57:8f:32:fd:4d:19:0f:68:e4:a6:
                    3b:aa:a6:36:7a:00:13:91:d8:ff:ac:b2:1a:ab:b2:
                    79:4a:21:54:af:49:8b:8c:67:2b:81:f8:46:83:c1:
                    ee:4e:9e:35:bc:d2:46:bf:18:41:73:ff:fc:3e:85:
                    5b:12:c1:6d:b4:35:11:8b:d2:a2:a9:a4:29:19:05:
                    8d:ec:45:b2:17:8a:4b:ae:e6:82:d8:f6:71:ae:88:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:80:41:B2:E2:D2:98:39:48:EC:C6:32:EF:31:28:BE:67:A8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f668::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:60:b3:6c:11:9c:64:ec:04:16:af:65:a3:d1:1b:6f:0f:e7:
         7f:f8:07:6e:5f:5f:04:8b:70:a8:fa:b6:46:c6:ec:5b:ca:9f:
         8f:9e:f6:31:89:e8:7e:d1:25:5e:6c:61:67:07:d8:f8:65:a6:
         45:a6:03:89:d0:6d:fd:6f:93:d3:9d:66:ca:90:5d:c9:26:63:
         99:7f:65:9c:38:e7:ee:61:83:f3:1d:1e:e6:c0:1c:2d:2d:03:
         8f:a6:5c:96:27:7c:79:2a:3f:10:f8:6b:6c:60:70:d8:8f:8b:
         da:1d:b3:2d:d2:61:98:36:35:14:df:d0:62:39:22:4c:d0:dc:
         88:7a:91:b8:76:8f:27:31:c2:74:ca:ec:40:37:95:1a:1c:f2:
         ea:1e:e8:5a:48:dc:de:cc:91:2a:69:31:52:7c:1a:c3:f2:e1:
         8b:e4:b8:45:a5:4f:b3:68:23:87:ca:0e:63:9d:ac:ef:a0:6b:
         35:e9:16:ed:f8:b9:8a:33:cd:9a:82:cc:fc:28:25:4f:a4:67:
         57:3b:f7:3d:cc:e2:a1:c7:cc:f5:06:5e:24:a9:29:21:3d:5d:
         9f:19:8a:f9:b0:71:6d:09:19:34:f0:ff:1f:9f:b4:99:9a:d0:
         b4:d4:3e:41:4b:61:7f:a7:8e:a4:9a:19:ce:a0:4a:2d:ea:71:
         5c:cd:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:02 2026 by rpki-client