Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/0b5500fc-03d6-398e-8d7f-254c1db89c75.roa
File:                     0b5500fc-03d6-398e-8d7f-254c1db89c75.roa (raw, json)
Hash identifier:          HRJ/vCjqBled9D+OZiM68IUxcgtLADz2TDXFYKyspT0=
Subject key identifier:   8F:C4:8F:5C:D4:1F:5E:B1:2E:34:3D:A8:71:E3:A3:51:CC:1D:E1:4B
Certificate issuer:       /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e
Certificate serial:       010D0C9F4328584D27EFE678442DA6606BC37BC0
Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/0b5500fc-03d6-398e-8d7f-254c1db89c75.roa
Signing time:             Fri 13 Mar 2026 15:21:28 +0000
ROA not before:           Fri 13 Mar 2026 15:21:28 +0000
ROA not after:            Thu 11 Jun 2026 15:21:28 +0000
asID:                     20014
IP address blocks:        2604:1080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:ef:e6:78:44:2d:a6:60:6b:c3:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e
        Validity
            Not Before: Mar 13 15:21:28 2026 GMT
            Not After : Jun 11 15:21:28 2026 GMT
        Subject: CN=560cf587-862f-414a-9751-37a45ca73807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:3b:2f:8e:ad:1d:e7:3b:a4:0d:f1:40:f1:
                    f9:a0:65:22:59:6a:4d:f5:9b:77:6c:06:e9:db:5d:
                    6c:90:00:10:7a:6d:10:f9:ad:10:85:4e:8c:89:08:
                    9e:b3:98:a0:42:2c:94:00:10:f5:cd:db:d6:41:6a:
                    58:a0:df:6e:30:a1:43:c7:b5:20:ee:93:aa:1d:f8:
                    b3:58:f3:3f:4b:de:10:d9:3c:fd:11:c0:ee:34:0a:
                    6d:f9:99:98:d6:2c:33:d7:16:49:80:8c:96:c1:7b:
                    12:60:36:d9:82:b3:fb:06:a7:02:fd:1a:0e:b7:16:
                    f0:65:8b:0d:19:12:18:52:89:a4:5e:56:c9:93:80:
                    a3:80:8a:e0:b9:da:cd:fb:21:18:2e:69:2b:95:3b:
                    4d:b7:a3:ed:cc:97:9d:57:a2:c9:65:a7:f4:a2:73:
                    dd:3a:c2:d7:5d:38:20:bc:8e:33:e3:cd:56:23:2e:
                    e4:91:c2:11:11:0a:dc:4b:84:86:33:30:1b:25:c9:
                    e0:0e:aa:13:e2:c6:d7:a9:fc:fd:41:00:44:44:88:
                    9f:1c:89:c5:f2:83:59:0e:9a:f9:39:7b:ba:66:61:
                    1e:00:37:fb:4e:52:3e:1a:40:21:73:aa:68:3c:8f:
                    e7:9a:3c:66:c1:e3:88:e0:14:44:e4:28:4f:5d:6c:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C4:8F:5C:D4:1F:5E:B1:2E:34:3D:A8:71:E3:A3:51:CC:1D:E1:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/0b5500fc-03d6-398e-8d7f-254c1db89c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl

            X509v3 Authority Key Identifier:
                keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:21:4b:72:6d:13:fa:2a:b9:4f:ee:ae:60:bc:6d:21:6f:b2:
         93:30:dc:d4:ae:96:7e:09:7a:7b:41:16:2a:b7:d8:43:d7:25:
         91:f2:11:76:64:31:96:f7:82:89:42:ce:49:a4:20:11:72:05:
         f6:99:14:29:bd:15:81:fe:b3:7c:77:a0:6f:e6:e6:08:b3:f9:
         8f:2a:20:0f:a8:7c:3c:74:a7:fa:03:89:22:a2:64:d0:da:63:
         36:4c:28:cd:a6:b3:e3:e6:7b:ab:02:b9:b0:05:26:dd:09:78:
         b3:d7:6d:34:64:b8:02:0a:36:6e:84:9f:60:a6:d3:ad:42:19:
         ae:15:4a:4d:39:65:41:fa:7d:68:2b:72:fd:f2:cc:34:ad:e0:
         9a:5a:43:92:23:2f:bc:f1:33:6f:e5:a9:83:1f:9b:d9:50:8b:
         b5:ec:2c:11:3e:be:e0:af:fb:17:50:2e:a4:d9:63:a7:67:6d:
         57:21:86:03:11:d3:95:d1:66:92:15:25:f0:14:09:a5:cc:1a:
         39:45:c3:0c:35:85:17:ef:75:69:f3:7d:d4:27:1c:8b:71:44:
         11:ce:66:6c:98:be:3d:aa:b7:12:dc:76:ea:ce:1d:04:c2:74:
         27:8c:41:ee:cf:35:8d:1e:16:fd:ce:0d:f6:cf:e7:f9:cb:2f:
         39:a1:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:40:05 2026 by rpki-client