Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1212aef-6abe-3edb-a3ae-da462038ff57.roa
File:                     f1212aef-6abe-3edb-a3ae-da462038ff57.roa (raw, json)
Hash identifier:          +28gDSGdHeRbb3CgRRuI+ptZbltLdamQvMclndGIN+I=
Subject key identifier:   86:3E:B3:07:4B:07:39:6E:6F:8B:27:2A:47:C9:68:67:E3:F9:98:E5
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D4984220FCA5616B46B7EC200
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1212aef-6abe-3edb-a3ae-da462038ff57.roa
Signing time:             Wed 25 Mar 2026 16:01:49 +0000
ROA not before:           Wed 25 Mar 2026 16:01:49 +0000
ROA not after:            Tue 23 Jun 2026 16:01:49 +0000
asID:                     20473
IP address blocks:        2606:f180:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:84:22:0f:ca:56:16:b4:6b:7e:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 25 16:01:49 2026 GMT
            Not After : Jun 23 16:01:49 2026 GMT
        Subject: CN=ad044d36-6836-4396-ae9a-e6a9ef7c5802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:48:b5:82:f1:4e:42:6c:37:7b:02:e3:53:
                    ea:87:2a:3a:89:96:c2:79:69:f9:bd:e7:e1:24:af:
                    96:e2:84:86:03:8c:49:55:d2:6b:21:68:77:0f:d7:
                    d0:a5:f8:e1:fa:2b:0b:15:50:16:a7:c5:0a:53:41:
                    97:32:b4:51:3a:e8:64:f7:6f:8e:77:35:c4:ff:8f:
                    b6:cb:df:24:fb:e9:68:93:54:31:51:34:27:44:ce:
                    37:a3:21:7b:84:27:16:b7:fd:45:36:ee:48:94:c2:
                    45:25:5f:3a:8d:c3:94:1f:ad:de:f8:f7:c8:5f:75:
                    f3:46:16:a5:cb:97:a4:b4:5d:17:f2:6e:eb:6b:b0:
                    15:63:b0:27:56:94:0d:32:1f:9f:40:f2:f6:c7:85:
                    50:84:29:cf:a5:03:73:3d:0f:1c:c3:d5:1c:6a:d7:
                    ba:62:20:ce:23:2a:1a:fd:62:55:a4:30:28:4a:3e:
                    58:a4:8e:3a:38:4b:7a:0d:35:78:54:00:70:f9:43:
                    25:ce:a9:84:70:96:fa:a3:29:30:00:ca:08:09:61:
                    af:48:69:bd:1b:b9:2f:86:15:6b:02:a2:ad:fc:f2:
                    6f:c0:45:47:11:11:4b:7f:27:c1:25:8d:84:99:4f:
                    ab:30:bb:9e:69:e9:47:e5:ae:cb:2e:f3:41:25:33:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3E:B3:07:4B:07:39:6E:6F:8B:27:2A:47:C9:68:67:E3:F9:98:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1212aef-6abe-3edb-a3ae-da462038ff57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:0e:b4:48:29:c3:85:55:e3:1b:01:6d:3d:8f:02:ba:4e:
         cf:5c:50:55:07:e5:e1:df:59:ab:3e:98:86:c5:67:88:29:3c:
         1b:80:f5:7d:cb:a1:ab:bd:52:5a:2c:a3:4a:46:05:a1:91:da:
         c5:32:05:d5:cf:d2:47:ed:25:b7:e6:2b:20:1c:97:14:8f:6e:
         2a:1c:35:74:bd:33:59:01:74:d3:25:f9:ab:a4:2c:ae:a5:ba:
         d1:06:5d:68:cf:73:cd:15:1b:d7:36:03:e7:cd:fa:57:25:7c:
         0a:fe:23:45:b5:87:28:eb:b9:ef:c7:1f:34:49:ae:04:5c:af:
         11:75:48:e4:63:83:ba:80:eb:8a:6f:d3:50:52:ea:b9:c8:b0:
         e0:eb:6e:ad:42:8b:b9:4e:f2:c2:2a:65:48:76:90:ac:33:06:
         25:80:cb:e0:8b:a2:d7:02:c8:4a:3b:06:1b:e3:35:ca:0e:53:
         cb:9d:0b:4f:78:85:98:a2:51:5c:9d:99:37:49:8a:bc:93:89:
         f2:91:10:82:5e:96:db:d8:45:d8:de:f1:a8:e4:45:40:ef:ac:
         e0:65:90:04:6b:6c:c3:4b:3e:23:d0:7c:c5:79:f1:80:ff:be:
         d2:6c:c6:6a:dc:37:84:0b:00:33:95:62:a6:95:e4:ae:0f:a7:
         cd:4e:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:28 2026 by rpki-client