Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa
File:                     a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa (raw, json)
Hash identifier:          sD3QnHGDllnnN8+v4Vtm5g2qiseUbl7EiCVYCruKrpM=
Subject key identifier:   36:2F:00:4E:E5:4F:A4:15:07:15:4F:49:61:6A:15:15:C1:3B:B4:2C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DA3E55DA57F99E52AD8888A40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        2605:4300:2c11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:5d:a5:7f:99:e5:2a:d8:88:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=fb6869c4-2a78-428e-847e-605dba0b8f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:7c:00:0a:0d:10:d2:d5:30:bd:ec:33:ab:
                    29:31:6d:9c:42:28:6d:7e:99:06:ac:01:2b:3f:2b:
                    7b:6e:b0:06:a5:00:4c:62:51:dc:ee:3b:fd:e6:a5:
                    b3:7f:f8:ce:7a:ec:2b:a7:64:5e:0a:b3:24:2d:5d:
                    de:55:6e:f4:be:41:4a:de:95:ef:1f:11:72:81:c9:
                    75:4f:dd:80:17:b7:c4:bf:2e:65:46:a2:80:95:f2:
                    e5:cd:5c:4e:fb:3e:fe:d6:84:91:29:5d:96:a2:f5:
                    5b:96:49:0f:fa:8c:26:a5:23:06:3a:9a:e3:1f:19:
                    92:20:02:44:76:4b:91:3d:83:41:ce:33:19:35:06:
                    a6:09:98:38:13:a7:6d:65:11:39:fa:ec:8d:d5:80:
                    ba:76:d8:11:64:5e:70:87:05:d2:56:f5:79:64:2e:
                    0a:42:bb:a3:9a:ab:62:94:99:c7:1f:9d:b1:88:42:
                    c8:ca:59:3c:a2:3d:49:50:a5:3a:6e:10:3d:24:63:
                    ee:9c:16:4e:c6:d8:9f:cf:b5:7c:42:35:9d:02:5a:
                    b3:5e:3c:85:0f:4d:30:e3:84:c6:3d:68:55:11:ee:
                    c8:68:78:d8:17:20:4a:cb:75:c2:46:23:06:71:b9:
                    e8:3e:e1:e6:24:82:4a:df:26:da:51:65:ce:80:42:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:00:4E:E5:4F:A4:15:07:15:4F:49:61:6A:15:15:C1:3B:B4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8e:4a:ed:c3:c5:f5:5a:12:ed:91:8d:a5:a3:f5:e8:78:19:
         48:e3:9e:69:a5:06:00:72:ca:36:02:f2:6e:a3:1c:d0:98:18:
         a0:38:30:4a:ad:c1:37:93:1b:e7:cd:ca:cd:e4:2e:b9:34:c1:
         1d:8d:d7:bc:53:a6:b9:a1:6d:bb:fe:45:c6:eb:3b:06:1e:bc:
         7b:62:40:3d:39:b1:2e:6c:b2:5d:94:e3:65:e2:85:61:fb:93:
         e3:24:29:57:83:b9:6d:5f:2f:a2:fe:a2:7c:bd:8a:1c:5b:ed:
         69:97:12:6a:ab:4a:67:29:c3:e9:d3:e6:c4:4f:ed:47:bc:38:
         e0:c8:23:0b:83:81:a3:34:8f:b8:f7:dc:ed:35:02:ce:dc:dc:
         e7:79:9d:40:26:91:3d:e6:49:6a:ad:e4:ef:7c:cb:cc:67:3e:
         bd:e6:a4:df:fc:91:fe:55:b7:f2:f5:18:b1:bb:ff:57:9f:83:
         dc:c2:34:9f:40:8f:9b:b5:40:df:8e:61:b4:99:b5:e1:ca:82:
         e7:30:9c:fc:4c:48:28:91:3a:b8:83:e8:98:5b:57:c1:ae:30:
         0a:ff:42:91:01:56:6c:f8:6c:86:54:f9:a7:70:89:1e:75:ad:
         c2:ea:f7:c3:fb:d8:7d:ac:99:e8:78:c6:2c:de:08:7b:66:e6:
         e8:f7:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:53 2026 by rpki-client