Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa
File:                     8b8945c7-3242-3a15-83b1-616402b53b63.roa (raw, json)
Hash identifier:          BZR3ff34KddXkb9iYV0a5rWcT39aeMjrNDTmwz9ovIc=
Subject key identifier:   9E:C7:F0:82:1E:59:8C:38:F3:33:4E:E2:8A:32:D8:06:7F:87:B6:7D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D343A1AB2B6BFF080A6004A60
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     8987
IP address blocks:        2605:4300:2c17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1a:b2:b6:bf:f0:80:a6:00:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=34f6514b-dd82-427c-aa6a-bddc76d8d0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:28:d1:6b:50:ad:c3:dd:d1:b4:15:b5:57:
                    5e:53:fc:6e:65:0d:93:65:b1:a7:cd:10:e3:a5:ea:
                    38:46:63:28:8f:28:aa:d7:aa:68:e8:ec:26:44:ae:
                    19:b9:13:2f:a9:fd:55:f2:2e:f8:3e:f8:2b:bb:6f:
                    8f:e1:bf:31:55:f7:1e:bc:fe:56:54:7e:f7:d7:7e:
                    c5:26:c2:55:88:27:0e:0f:8d:ff:81:4b:d5:b5:88:
                    60:c9:68:49:13:57:b0:bf:57:ff:e9:df:8a:27:06:
                    9f:65:31:d2:8c:08:b6:86:2b:3d:5a:71:08:30:ab:
                    b5:05:8a:21:80:17:2e:5e:83:0d:82:fe:4e:53:ad:
                    db:b3:e2:a2:95:43:81:0b:ef:7c:4c:58:f1:d4:3d:
                    06:bc:a3:67:0d:6f:c8:2e:37:53:b9:7f:09:63:5a:
                    d6:5a:9a:80:6f:dd:fe:64:fe:66:38:52:20:1c:12:
                    5d:e1:76:88:ee:71:d3:d5:47:ba:55:4f:28:e7:7a:
                    35:07:0b:ad:3e:65:1a:ae:1d:62:0e:1d:88:6e:ba:
                    f7:f1:89:5f:36:25:03:60:38:69:8e:b5:fc:d2:d4:
                    1e:82:9a:5f:88:f2:54:8f:35:7a:60:19:d2:8c:3b:
                    79:5c:72:71:0a:2e:96:60:ec:7d:02:c5:6f:d5:78:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:F0:82:1E:59:8C:38:F3:33:4E:E2:8A:32:D8:06:7F:87:B6:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:21:01:e2:ea:62:75:21:0f:65:3e:49:fb:53:91:7c:97:b8:
         fd:80:ac:b5:b9:18:e9:80:47:cd:d1:aa:45:d2:70:26:8e:70:
         6c:07:21:36:cd:41:c0:59:47:ec:02:a5:5a:03:40:82:c8:62:
         19:68:28:a6:e8:69:98:07:4a:a5:ed:63:d6:2d:be:d3:6c:ff:
         a9:ca:e6:68:e7:ef:f1:ba:28:a8:91:1d:5d:b8:16:38:62:d5:
         0f:d6:02:c0:de:b7:8e:de:35:6d:1f:30:1d:5e:53:4c:13:e6:
         d2:8d:0a:8d:07:cf:03:f8:57:02:26:82:cf:df:20:9e:ad:34:
         1f:fe:5c:76:4c:b3:d6:85:b6:96:b9:30:7a:20:fd:eb:5b:49:
         af:ce:63:a2:aa:09:9e:db:e8:63:63:1e:7a:0d:16:2a:6f:1b:
         76:aa:ec:42:6e:e6:d9:3e:ff:a5:2b:58:a0:42:e5:68:cd:9a:
         72:30:cd:d1:1b:d1:d5:59:f8:ab:f0:54:e5:51:1c:1f:16:b7:
         d2:07:86:ad:42:90:8b:92:b3:1a:da:76:04:cb:2f:58:8a:d1:
         91:60:87:70:3d:f3:67:61:e3:8f:bc:30:4e:67:59:78:70:7f:
         41:c6:da:94:e8:eb:54:ab:06:7b:9a:41:32:40:3e:28:05:a3:
         36:19:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:04 2026 by rpki-client