Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa
File:                     3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa (raw, json)
Hash identifier:          ODUeVJi+nzLRoJqbpfugBYEn7nqr3PEZ3qrTrr2RGbs=
Subject key identifier:   EC:61:67:B7:AF:0F:B7:ED:7D:96:DB:74:9B:46:09:D9:72:3C:FF:CE
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D1707D866603CA6A35A3AD8E8
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     64286
IP address blocks:        2606:f180:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:d8:66:60:3c:a6:a3:5a:3a:d8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=218f0bff-2187-4f28-8cfb-a63ec93828c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:b3:14:90:17:0d:cd:4e:c9:ee:37:e2:44:
                    1b:2c:e9:be:e2:f3:1b:44:f0:5f:4c:1e:1b:4f:4f:
                    b1:04:00:15:c1:b4:d0:f9:85:fa:10:b0:30:a0:56:
                    0e:4d:5d:fa:cf:cc:58:03:01:ad:a9:54:b6:fd:ed:
                    e6:58:95:7c:fe:76:52:30:ef:66:1e:12:df:5a:88:
                    2d:b8:30:8e:d0:3a:d2:e1:fa:fd:ce:d2:d8:aa:80:
                    6b:68:ef:13:5f:4e:18:ba:be:95:65:9a:e3:11:d1:
                    2f:b3:ee:da:46:59:2e:56:69:3c:5d:3c:88:5e:ca:
                    27:7f:b6:f7:5b:a0:9d:09:e4:e8:67:c9:f1:12:1f:
                    b7:08:fe:44:88:5f:77:4b:51:de:4a:b2:f3:2a:e3:
                    4a:d9:76:d8:44:08:6f:39:fc:5b:06:95:e7:4f:4c:
                    ba:5d:c7:25:33:c5:dc:57:6e:25:3b:9b:e7:75:c2:
                    30:51:64:5e:d6:7e:08:c0:8f:b7:ee:2b:61:97:57:
                    e4:81:a8:bd:b7:0a:40:b3:22:83:43:82:fb:9a:85:
                    1e:34:83:39:2d:58:cc:94:17:81:f6:65:0e:86:76:
                    7d:a0:09:42:0d:90:05:fd:64:67:51:0d:29:c0:44:
                    16:62:78:bd:fa:b6:54:1c:42:5b:8a:1d:9f:35:cf:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:61:67:B7:AF:0F:B7:ED:7D:96:DB:74:9B:46:09:D9:72:3C:FF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:df:b7:d4:19:b0:fd:ff:64:f8:07:dd:67:de:00:ef:5d:80:
         00:fe:30:a8:c4:5a:fb:4c:c6:bd:49:70:ff:6b:f4:2d:97:76:
         77:58:a4:1e:fa:5a:2e:f1:78:eb:9f:a2:e8:89:cc:66:25:46:
         c9:5e:90:4e:51:40:51:35:ed:b8:d6:89:7f:bf:84:3d:5d:97:
         82:1a:3e:c3:8a:9f:4e:a9:f8:65:cf:b3:dd:6b:4d:c7:cc:af:
         de:3c:c7:33:df:73:1f:4d:01:11:d6:c8:61:03:90:c5:3a:d7:
         7f:27:b7:7e:6f:e3:df:13:81:ff:72:23:d9:e1:4d:60:16:eb:
         20:36:7a:28:04:cc:6a:05:ea:3c:5f:e8:3b:30:93:42:7b:0e:
         4e:91:16:25:6e:6d:41:cb:c6:f9:64:21:c6:48:9f:49:55:f5:
         77:c6:d3:fd:0b:0b:cd:e9:84:59:eb:b7:f6:22:e0:88:28:b2:
         82:a6:32:16:99:0e:4d:48:6a:b0:f2:33:e4:11:66:bd:e7:f9:
         d2:a3:6b:b2:56:44:71:17:db:be:12:a9:74:25:9a:1f:16:d9:
         e8:2d:56:4b:a1:66:dd:01:43:fc:ff:8e:8b:b6:24:59:ca:3d:
         36:06:9e:1a:cc:03:44:fc:51:f0:62:16:c8:f1:cd:1e:b8:f1:
         a7:50:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:54 2026 by rpki-client