Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa
File:                     01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa (raw, json)
Hash identifier:          3lh/4/r+YJLjEyVHn92DI0PSoElN+zkqGuYEQYiiQ/o=
Subject key identifier:   30:67:6C:04:3F:0C:F5:9B:29:13:1A:87:C3:94:F0:FA:86:34:81:D0
Certificate issuer:       /CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
Certificate serial:       010D0C9F4328584D4A8F9A1B4E1489DD12006D00
Authority key identifier: FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     3807
IP address blocks:        2620:104:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:9a:1b:4e:14:89:dd:12:00:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=89aee7b5-be45-4574-8de1-da4e9f998c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:30:76:8d:dd:4d:fe:df:72:c6:0a:41:7e:
                    52:4e:5a:e4:54:b3:15:d2:cf:39:7d:9e:aa:1a:fc:
                    ba:3b:9f:24:65:04:81:7b:bd:d3:a9:7f:f0:55:5e:
                    39:f3:9a:36:2e:84:b0:28:02:3f:3b:d7:eb:f9:63:
                    b3:b1:99:b3:ca:ae:19:64:b1:bb:52:ad:20:73:c3:
                    a9:ab:82:dc:69:cc:ce:6b:54:fe:f5:90:d2:4c:0f:
                    5b:a8:6a:8e:e9:b4:99:9b:8d:53:a2:ad:99:b9:43:
                    5b:67:14:c1:87:7d:cc:2e:09:dd:90:4c:b3:bd:25:
                    28:61:39:e4:c4:63:5a:f0:10:58:69:f4:c3:e6:34:
                    12:58:fd:b0:a2:c2:07:2c:b8:f1:d9:18:b5:44:eb:
                    ff:22:cb:24:e3:26:29:d0:14:e4:d2:90:26:89:bb:
                    aa:65:9e:25:c5:6d:2f:03:74:72:2f:1c:ea:28:4f:
                    42:e3:31:d3:58:40:f2:34:8b:4f:a5:f6:d3:a0:d1:
                    b9:51:1c:67:65:f2:4c:24:7d:3b:50:a2:c5:de:7c:
                    98:61:e0:7b:1d:86:23:0b:f2:3a:6f:3d:2e:82:66:
                    5e:e1:b4:26:99:e7:4a:50:e9:5d:43:3f:dc:64:7e:
                    84:f4:c2:f0:da:cd:3b:f9:0e:fb:98:4d:3f:06:c6:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:67:6C:04:3F:0C:F5:9B:29:13:1A:87:C3:94:F0:FA:86:34:81:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl

            X509v3 Authority Key Identifier:
                keyid:FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:2b:e1:e6:2b:ed:d1:2a:ce:50:1c:30:90:de:88:12:8e:
         db:ab:3b:1a:09:c1:29:11:f2:9a:fc:a6:7f:40:ad:cf:4e:06:
         76:74:89:21:fb:58:2c:6b:7a:9c:f1:b5:82:8b:60:14:9c:61:
         50:db:d7:92:66:1f:9f:77:29:82:63:db:97:18:ad:dd:55:f4:
         6f:75:9a:87:0c:fb:17:b9:25:94:28:5c:cb:30:d6:ab:c0:83:
         ba:8e:77:56:fb:9f:51:c6:de:31:48:e6:1a:bc:e5:f3:04:34:
         11:e0:84:d5:30:1a:8e:f0:c5:9d:97:34:67:86:07:45:5a:fd:
         d0:f2:24:36:b3:ef:41:05:79:45:5b:67:64:6c:83:13:95:39:
         4d:16:0f:49:da:e7:c5:8b:d7:0e:01:6f:12:fc:51:ab:a1:67:
         97:2a:85:40:e6:ec:71:60:4a:31:a2:8a:a0:23:fd:7d:b1:ad:
         26:f0:97:8a:1b:1f:ee:dc:43:34:92:ff:1a:fe:1c:e3:53:44:
         b2:dc:1e:0c:00:b1:f2:5d:8e:4e:01:e5:2a:63:aa:46:4c:c1:
         cc:2d:de:0d:b9:c2:44:7a:f3:bd:ae:bc:9e:88:50:b7:00:de:
         b1:24:e2:0b:40:dc:cb:28:05:12:d1:73:c1:97:d5:f0:8e:7a:
         19:9c:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:41:21 2026 by rpki-client