Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa
File:                     25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa (raw, json)
Hash identifier:          JKewtEdmZGz5KiqzPS1n+Wj+2nkvQJTRHMBXnv8nMIc=
Subject key identifier:   2B:2C:E9:08:02:D2:FF:F9:05:95:61:E9:BD:5F:2C:FE:1F:69:2F:22
Certificate issuer:       /CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Certificate serial:       010D0C9F4328584D3F64E7C806D9613D0D50E880
Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     33680
IP address blocks:        2604:9d40:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e7:c8:06:d9:61:3d:0d:50:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=0e11ac10-4f5e-4f2e-ba9b-e67af48c2874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ab:ad:7b:60:4b:41:f7:9d:88:7e:77:a1:ad:
                    fb:7e:bf:5b:d7:80:55:f7:3a:a7:b8:30:dc:f3:12:
                    04:c1:60:23:cf:c1:4c:4d:61:29:04:eb:15:6d:2c:
                    89:2e:26:67:db:bd:8e:6e:4d:94:40:e0:f7:f0:c6:
                    1e:bf:81:93:4d:7f:90:23:6b:c0:53:3e:f8:85:b2:
                    45:18:52:04:ce:54:e0:16:20:4d:1e:e5:a1:a2:47:
                    e6:ab:b5:0a:75:28:0d:cb:3b:74:64:3d:cd:71:ff:
                    90:8a:62:8d:b2:af:65:72:e2:ee:66:e8:82:7c:0c:
                    b4:16:fa:ed:a3:5d:6d:60:85:61:42:90:f9:39:e9:
                    a3:37:8d:42:c0:78:55:ef:f3:75:a8:65:d2:41:67:
                    c0:50:7a:d9:79:4c:f1:d8:68:8a:80:45:6d:cc:97:
                    e4:81:0c:0e:79:4d:72:1a:3c:14:91:7d:28:30:fd:
                    e0:8e:3b:88:38:08:c9:25:6c:80:a2:62:e9:fb:84:
                    10:9c:6b:dc:64:15:9f:78:d4:00:57:36:44:36:a9:
                    eb:d1:25:d2:de:f6:5b:d7:3e:3c:70:43:48:7b:56:
                    8f:c1:0e:a9:69:a1:7f:df:6c:4b:1a:4b:57:91:e6:
                    a0:d6:b7:ff:2a:4d:f0:71:07:2c:84:41:0d:7a:82:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2C:E9:08:02:D2:FF:F9:05:95:61:E9:BD:5F:2C:FE:1F:69:2F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl

            X509v3 Authority Key Identifier:
                keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9d40:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:36:13:93:d7:8d:34:56:3e:e8:04:e4:7f:a0:72:52:36:
         1f:0e:e8:4f:00:28:46:91:c3:a2:b8:18:6c:8b:ee:3d:ab:fe:
         fa:41:96:f8:0b:09:84:af:53:18:02:d9:c8:fb:cf:ac:67:76:
         4e:9c:81:8f:6c:e1:b0:ca:02:7a:22:f0:2a:d5:28:88:fb:42:
         4f:58:c6:d5:4d:d9:ef:2c:1e:8d:51:05:20:cb:25:0d:ca:e4:
         d7:2e:ef:cd:32:35:e5:09:86:8a:f7:e7:a2:78:2f:45:2a:58:
         47:e2:c1:37:44:f5:0d:27:98:a9:d7:ff:57:a9:e8:0b:10:3b:
         e2:55:5c:82:62:1a:21:ca:70:60:e3:3e:58:84:87:fa:da:eb:
         8e:31:ed:67:78:88:07:cb:ae:d0:34:35:5f:f8:56:44:5b:b0:
         65:0a:1a:92:b7:10:97:18:73:0b:a4:a1:bc:8e:2f:43:1a:e3:
         30:d6:33:ef:23:ae:fd:b6:79:eb:c2:85:0c:b9:a6:19:10:b6:
         fa:68:8c:fa:40:97:80:37:b7:9b:dd:c6:c1:a3:14:d3:f0:45:
         99:d8:9b:31:22:a9:d4:f2:a5:74:85:9f:ea:5f:6b:a5:66:d2:
         39:1c:d7:d0:b2:27:fe:c1:6f:53:12:f3:b5:9a:77:96:5e:e3:
         e6:57:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:44 2026 by rpki-client