Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
File:                     9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa (raw, json)
Hash identifier:          IpDNjAg0SUEpn0qTa9DEGHCIIdjPwKWj7Ljculjejns=
Subject key identifier:   E3:DE:71:26:00:67:79:AB:6D:EA:81:13:ED:EC:34:6A:FC:2B:DD:A3
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584D3F64E1B42AE4EFE3DDD75A00
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     36734
IP address blocks:        2607:5100::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e1:b4:2a:e4:ef:e3:dd:d7:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=7f3610d8-fa60-439f-a3de-e83efb8be6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:0f:db:11:0f:ca:3b:5e:66:49:f0:62:76:
                    fd:30:40:53:34:59:83:f3:9a:0a:ce:27:1c:1e:b8:
                    93:c9:35:ad:04:ee:62:6f:cc:f5:52:ff:0b:ed:0e:
                    b6:aa:7b:90:ee:f9:eb:fa:26:58:4d:3a:e7:15:2d:
                    3b:e9:15:e4:fe:77:54:e1:be:5e:cd:ec:7d:75:e6:
                    07:f4:74:de:29:7d:13:5b:90:08:f4:91:f2:56:58:
                    35:4f:2c:4c:38:22:c6:7b:87:28:b2:1c:20:fb:79:
                    92:1e:97:c6:8d:a0:b4:bc:9c:eb:d1:00:f3:86:ed:
                    33:e7:64:77:d5:b4:7b:7d:89:46:5e:24:98:4a:56:
                    0c:4b:56:4c:26:09:22:5c:ef:0f:66:9a:b9:86:2c:
                    64:ac:05:4d:93:80:31:fe:4d:7c:6a:ae:7a:dd:07:
                    c6:d2:c9:77:2a:85:ad:ed:c5:5f:75:b5:a3:85:4f:
                    5d:5c:24:7d:e6:a6:df:b4:eb:47:ec:ce:17:62:bf:
                    b9:3b:84:16:30:2e:0c:d0:7e:90:0b:34:dd:e2:e4:
                    09:03:bc:87:73:50:b9:3e:f2:cc:02:81:ff:42:b2:
                    5b:b5:02:7f:9a:06:33:c0:cf:70:4a:0f:72:82:93:
                    63:27:76:28:ee:c6:c0:3b:c8:67:78:13:2e:f4:52:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:71:26:00:67:79:AB:6D:EA:81:13:ED:EC:34:6A:FC:2B:DD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:35:36:f6:ce:91:4b:ec:44:49:d5:f1:a2:ce:75:a9:b7:d7:
         a8:a6:d1:f2:b8:39:06:51:03:92:df:f5:f5:f5:02:c9:84:65:
         34:0c:c7:bb:c8:fa:5b:ef:f7:58:d7:d2:2d:25:e6:c2:2b:d9:
         4b:27:16:bb:45:14:15:24:90:39:36:88:b5:2a:02:28:de:58:
         6b:f0:6e:db:40:cb:5d:90:ff:52:91:51:83:f6:a4:da:69:f5:
         80:f6:a8:65:49:a4:e4:0f:43:4a:42:75:5d:1e:1f:4a:71:63:
         0e:12:b3:00:73:61:b2:ac:63:c0:5a:ee:49:e6:f2:04:ca:a8:
         f8:09:22:e2:e8:97:c0:a7:f5:71:84:db:8c:30:f5:f5:3c:a6:
         31:51:9e:19:69:82:bd:a8:0f:31:81:b4:29:4a:69:8c:91:cc:
         df:c7:b9:b2:e0:95:c4:25:32:17:7b:80:5f:67:85:16:75:56:
         bf:ab:16:8a:62:0a:a6:ce:8e:11:21:00:5e:7d:0d:38:b2:34:
         b7:e3:b6:9d:5b:5a:40:0c:3a:48:1c:c3:13:59:10:e3:7c:17:
         a6:50:57:10:3e:95:31:c7:d9:d0:55:75:24:b8:10:0b:a4:9e:
         ef:e5:b8:fe:e5:1d:68:81:8f:b0:9e:5d:6b:66:73:14:8f:b6:
         21:21:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:33 2026 by rpki-client