Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa
File:                     3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa (raw, json)
Hash identifier:          X1zkq1A5xY8U4EljYc6TV6myllLHg6cKZM+vqOm8A/4=
Subject key identifier:   95:83:4C:C5:F5:E1:5E:2E:4D:3D:A4:DA:65:10:7D:D0:27:4C:E2:14
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584D9FB56CABA0352A28FC1230E0
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     0
IP address blocks:        2001:504:44::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:6c:ab:a0:35:2a:28:fc:12:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=61a2fad7-6d68-4399-8072-229be85da41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:23:f9:64:77:c1:06:5c:0b:2e:41:33:ec:19:
                    f7:38:92:22:b8:64:9c:b8:af:54:0e:48:fe:85:6d:
                    42:c8:f0:5a:10:03:c0:82:69:ce:0d:4d:f9:ab:94:
                    5a:59:c0:61:6d:d8:6f:21:f1:10:b3:65:98:b8:f3:
                    41:d9:cc:34:0a:c4:63:de:a5:ec:a5:76:ce:c4:f8:
                    d3:05:18:10:f1:5a:64:bf:25:26:ad:cf:49:dd:94:
                    60:0b:b3:23:5e:e9:f6:15:f6:1e:f6:38:ca:7f:f6:
                    9c:4e:c2:00:87:93:bc:f6:c4:d7:7c:44:8f:9b:30:
                    71:1c:47:bc:c4:83:d5:b4:a4:60:df:7c:62:22:d1:
                    f9:1e:5f:a4:31:3b:4f:67:6f:2c:cd:59:6b:5e:37:
                    ae:f0:f9:d8:3c:0f:48:47:c9:5e:5f:d9:81:ea:40:
                    74:0b:03:d5:ec:3e:c3:ed:30:7b:9d:d1:88:f8:51:
                    0d:bf:28:8c:63:37:06:f2:e3:25:43:e3:31:84:c5:
                    f2:8a:37:01:d4:e3:e0:6d:3c:19:38:92:d7:ea:a8:
                    69:1d:47:d4:0d:16:d8:63:bd:af:ec:db:88:8f:21:
                    cd:fa:69:79:a0:4c:02:37:2f:f2:f1:f7:83:60:e1:
                    b6:37:a4:f8:eb:4f:77:5a:a0:9a:1b:9b:dd:77:90:
                    2a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:83:4C:C5:F5:E1:5E:2E:4D:3D:A4:DA:65:10:7D:D0:27:4C:E2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:44::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:25:3f:f8:b4:c1:d5:df:4f:4a:5b:f9:67:7a:9f:d4:58:35:
         32:1d:d2:29:ae:0e:96:fb:c6:84:15:71:b8:80:c4:06:27:59:
         b2:76:d8:24:3c:ff:46:99:30:10:d7:21:5b:ed:74:88:84:8a:
         09:30:36:18:33:84:a1:8b:bd:8c:a5:ae:20:42:83:39:8f:09:
         f9:e4:59:ab:7b:a2:e7:31:38:29:ab:32:3e:ef:d5:ea:eb:89:
         8a:b5:b2:ad:a5:78:54:2d:40:f3:8c:13:67:1f:ba:91:2b:a1:
         30:dc:fb:a8:a4:aa:29:98:b6:7e:42:a9:72:b8:47:c4:ce:f2:
         13:5c:ce:1a:b5:30:1f:7a:a8:11:f2:fe:f2:6a:72:42:30:92:
         a1:41:47:95:d5:38:1c:17:5a:1d:6c:0c:18:57:c8:2a:53:09:
         ed:23:89:c7:d1:5c:05:ce:ea:b8:3f:81:fa:fe:be:ca:af:d3:
         9c:db:5e:62:4d:d5:a8:e6:fa:06:0a:be:7e:56:47:a5:3c:8c:
         13:c6:35:81:bb:cc:1e:ad:c0:3c:11:86:32:77:b5:d0:71:46:
         db:87:dc:2f:26:32:97:79:78:93:ae:8e:f4:7d:60:67:d0:3b:
         76:30:53:d2:f8:d8:14:37:4e:a8:bf:b7:c1:24:7d:a8:2f:99:
         11:0b:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:22 2026 by rpki-client