Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/d87d0d0d-08dc-3bb5-8862-c02c9bf96a74.roa
File:                     d87d0d0d-08dc-3bb5-8862-c02c9bf96a74.roa (raw, json)
Hash identifier:          ONaGGtz97+T3RjvmIk0qlXyaKD0ktWPf7w/Qz4ZFnig=
Subject key identifier:   D8:03:AE:2C:F3:AA:D3:59:4A:89:6E:97:F7:89:1D:55:FB:CB:20:98
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584D3DFFADA025ABCDCC29FE6180
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/d87d0d0d-08dc-3bb5-8862-c02c9bf96a74.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        2601:9200:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ad:a0:25:ab:cd:cc:29:fe:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1d5de85e-86f6-4c32-8706-a0157fd68337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:7a:c2:9d:a1:9d:a6:9c:62:6a:ec:e6:fd:
                    e2:85:df:57:20:29:56:de:86:5a:ec:59:9e:1f:65:
                    9b:51:7b:3d:5e:a4:41:e8:6b:b8:a9:55:89:cb:81:
                    8c:e7:ab:b9:88:1f:30:e3:c4:85:15:5d:7f:7b:c0:
                    71:51:1a:48:6d:40:7c:91:35:4c:8f:7f:f0:12:b1:
                    a7:95:81:4d:28:c9:3e:c8:18:90:44:cf:50:8f:6c:
                    ef:52:2a:0d:c2:28:40:84:1b:18:13:87:ce:3a:1b:
                    76:fd:fe:f0:38:51:20:eb:1f:cb:a8:b7:62:38:42:
                    51:97:7d:0d:b2:28:50:75:3b:20:af:43:0a:34:bc:
                    d7:53:52:f5:60:6b:6e:46:13:4d:d9:af:fd:77:5a:
                    e3:76:df:c6:a2:54:31:2d:89:a2:b0:af:66:7b:80:
                    70:8b:39:f8:b6:31:a3:a3:17:c0:1b:21:b7:c4:ff:
                    85:5b:d0:10:3a:13:77:96:41:eb:b6:80:be:e0:c1:
                    4b:4f:56:6c:3a:d7:f7:22:cb:46:77:5a:63:aa:94:
                    38:33:f7:43:6e:55:d1:2a:7b:81:98:57:60:4a:30:
                    ac:72:ff:f3:a9:9f:77:71:d5:fd:2b:2d:04:98:85:
                    ab:fd:f5:07:4f:83:f1:09:81:d9:c9:03:c7:c5:0c:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:03:AE:2C:F3:AA:D3:59:4A:89:6E:97:F7:89:1D:55:FB:CB:20:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/d87d0d0d-08dc-3bb5-8862-c02c9bf96a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:4b:7f:4f:1d:ad:2a:27:47:e2:67:b5:ab:ba:7c:43:f8:
         ec:6e:dd:ff:87:2d:2c:a0:ac:98:d6:06:75:f3:ea:4c:cd:a4:
         23:ea:2d:fd:48:bc:34:88:cc:dd:b5:37:19:06:87:6c:d5:ae:
         3c:ad:49:ab:88:2b:b3:c3:43:dd:08:96:c5:9d:89:06:f5:fc:
         da:6b:1f:64:a8:2d:b7:f4:7f:ec:86:0b:f5:8a:44:28:4e:58:
         01:6c:48:a9:5c:32:13:db:e7:1a:e5:1c:ba:9e:43:f1:ed:0b:
         ca:31:ec:53:fa:56:d5:e8:10:f9:99:e1:7e:cd:f8:29:56:62:
         ff:22:19:cb:d6:db:1f:4e:d0:5e:28:bc:01:f3:6d:03:69:fe:
         79:98:44:3c:60:45:02:63:ee:53:0d:19:6f:fa:3e:c2:65:3b:
         83:63:5a:f5:99:01:2b:81:b6:3c:86:56:a6:ea:5c:b7:c5:fc:
         b2:7a:5f:93:18:27:5d:e9:85:6a:c3:a2:7b:11:cc:45:f9:a5:
         d6:7a:59:80:b5:51:4a:86:23:e4:a1:64:ea:f8:ff:00:60:de:
         c8:69:fb:f9:44:d9:20:cf:e6:ce:cf:ae:e7:03:0e:94:4d:cf:
         99:38:40:a3:97:60:85:6d:7c:6e:4e:51:7c:25:3f:90:cd:93:
         79:7e:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:51 2026 by rpki-client