Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa
File:                     dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa (raw, json)
Hash identifier:          4+u8Y4xeMeI3pdQ4AVKvqOAOHyIlRVQLuBbdegkvSJA=
Subject key identifier:   8B:CD:ED:03:1B:E1:7E:79:FA:0D:C9:22:45:5D:8A:9F:6A:1D:1D:9F
Certificate issuer:       /CN=05791d14-11f0-4527-a43c-e6b2425f6d16
Certificate serial:       010D0C9F4328584D237A606865E0DC8D0878D900
Authority key identifier: 53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     32738
IP address blocks:        2604:4a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:60:68:65:e0:dc:8d:08:78:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05791d14-11f0-4527-a43c-e6b2425f6d16
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=9801f744-755f-4848-b7f2-d88febec8abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:b4:c4:13:89:93:a0:06:c3:20:a2:0f:02:
                    f6:5d:a5:ad:b6:24:1a:55:6e:79:a3:0b:7e:64:bb:
                    8d:80:49:55:5b:0c:a0:b7:4f:dc:80:c2:f5:e1:df:
                    11:ca:ff:11:ba:92:55:9b:eb:36:bf:6b:66:4e:b0:
                    68:cf:98:c7:09:2c:4f:f5:f1:f0:ce:96:83:29:8b:
                    93:33:c3:57:9e:14:87:d6:c1:0a:db:a1:af:28:d4:
                    11:65:be:29:6c:19:9e:32:7b:54:0a:4f:cb:8f:2c:
                    44:d5:a6:8e:f9:3b:29:06:52:96:4f:a3:b7:f0:6a:
                    14:e8:ba:a3:74:e7:ad:6a:7d:54:14:6c:3e:bf:51:
                    eb:d4:6c:6e:23:5b:c3:d0:c9:b6:f2:60:86:f9:fc:
                    56:19:17:f2:c6:f5:de:a0:95:5c:06:fc:86:b0:7e:
                    73:ca:12:17:79:a3:04:51:37:85:52:b5:fa:92:07:
                    3c:d6:91:7e:d9:94:e7:3f:35:4f:7b:a8:1a:0b:d4:
                    bf:e9:7f:a0:24:53:aa:a6:e7:e7:39:b0:5b:d6:1b:
                    3f:45:b2:8a:f3:fe:42:7c:f2:86:fd:a1:57:e4:e9:
                    17:9f:cf:a0:f7:d7:bf:27:83:1c:70:e5:87:7d:2d:
                    62:af:75:60:4d:08:27:11:02:61:16:1b:16:20:cd:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CD:ED:03:1B:E1:7E:79:FA:0D:C9:22:45:5D:8A:9F:6A:1D:1D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl

            X509v3 Authority Key Identifier:
                keyid:53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:ea:4a:b3:7e:c0:e0:0c:13:91:15:af:e8:92:e4:d4:e6:
         c1:a6:bf:6b:66:dc:6a:2e:ee:3a:24:cf:f5:98:f6:88:53:ce:
         5c:cf:fa:65:2d:f5:4d:1c:c9:86:5f:dc:aa:06:38:87:2f:fa:
         8b:9c:0d:73:36:ef:36:44:4d:7e:0a:bd:1e:a5:01:ab:b6:e0:
         fc:cf:83:6f:3b:12:b6:ca:24:2f:19:6c:06:d9:70:ac:33:fa:
         39:64:9c:d6:59:dd:6b:92:fe:3e:d6:1f:0d:69:48:2d:90:1c:
         18:1f:0d:b7:73:1e:55:7b:71:13:5b:fb:d3:25:d1:1e:57:7d:
         33:5b:e9:36:03:87:24:15:1a:be:f3:b2:af:6f:34:22:ed:46:
         67:80:00:50:2d:6d:89:b0:19:fb:8e:69:90:16:0b:4e:4c:2c:
         86:ec:dd:f5:be:7e:eb:c1:79:9e:a9:e7:31:cd:41:25:2b:9a:
         69:33:06:d0:57:a5:75:76:9c:d3:3c:89:7e:d2:32:29:20:73:
         ba:9b:cd:f0:1e:40:6b:c1:4a:66:2a:ec:57:7c:8a:0c:ce:de:
         33:dd:96:0e:5e:0d:20:6a:65:c1:67:92:39:22:64:7b:7a:d3:
         18:c5:d1:0f:ab:a8:c4:3b:29:91:3c:d4:88:c7:0f:e8:a8:a3:
         c0:78:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:00 2026 by rpki-client