Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa
File:                     a46157e0-a7ea-356d-a381-71067022a9b8.roa (raw, json)
Hash identifier:          3MXJsGbwl0MIF0vmgVc95ISLvF7bFxjr4sJfYGzfDOY=
Subject key identifier:   EB:A5:AD:98:B9:6A:C4:E2:8B:1D:3C:FB:12:EE:5E:18:E9:1E:74:92
Certificate issuer:       /CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
Certificate serial:       010D0C9F4328584DAAE0534D5FE0971470014300
Authority key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     394457
IP address blocks:        2604:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:53:4d:5f:e0:97:14:70:01:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=4f4e276b-e9ba-44ac-a67f-51176f34426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:b1:b7:8d:93:33:ac:00:8f:77:de:48:3a:
                    3e:e8:b6:db:c5:ac:fb:74:a5:75:28:79:7f:99:9a:
                    d6:99:93:6e:43:3f:42:60:e3:ed:e4:7a:46:8a:2f:
                    6d:db:de:9f:26:23:f1:87:a4:8d:4b:5b:e6:07:22:
                    95:cc:f2:ec:1a:0b:a2:85:a1:a3:1c:e5:dd:47:b2:
                    cf:f6:fe:a8:dd:b2:76:ec:19:a0:48:40:82:0f:47:
                    ac:29:a9:7a:28:53:21:2c:f9:22:f2:6c:94:19:54:
                    ac:a4:0f:c7:ec:75:5c:41:33:65:0f:e6:ac:d1:40:
                    f9:ad:b8:5a:88:9c:d3:bd:b2:83:52:aa:8b:5b:ec:
                    39:38:0f:76:66:38:5c:85:09:c6:2b:59:13:29:7d:
                    b0:37:99:dd:8e:2d:71:0a:3c:6f:01:06:4a:5b:a3:
                    8e:5b:dd:02:95:4f:63:0c:1e:27:30:6d:e7:49:1c:
                    9d:d5:d7:3a:d6:3d:8f:a7:ac:0c:7e:38:bf:dd:fe:
                    e0:2b:7d:93:14:5a:63:d3:75:26:56:28:20:f8:e3:
                    a0:2d:a8:65:81:8e:13:5c:12:20:da:3f:1c:e3:f1:
                    06:63:03:18:85:da:0c:00:0b:2b:1c:fa:86:c2:c0:
                    1b:12:5f:7e:66:e3:da:22:b9:1f:12:da:3d:fe:34:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A5:AD:98:B9:6A:C4:E2:8B:1D:3C:FB:12:EE:5E:18:E9:1E:74:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl

            X509v3 Authority Key Identifier:
                keyid:B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2960::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:d0:5a:84:c4:d7:11:70:22:4f:89:da:87:a8:e7:93:c1:
         ae:5d:67:d3:ec:1e:dc:78:c6:4e:d7:5a:a9:42:76:af:9e:da:
         66:e8:98:f1:e3:2b:ff:37:19:1d:db:ac:92:9a:36:87:9c:7b:
         0e:b4:0b:8f:88:38:62:3b:ad:16:f3:e6:f8:d0:92:79:11:fc:
         8c:3d:ed:ac:c7:0c:69:8f:56:68:ee:9f:35:cd:62:92:b8:7c:
         45:5c:2f:05:92:8d:93:c2:61:f4:c3:fa:de:04:48:8e:54:3e:
         95:bf:83:b2:d1:a8:5c:1a:43:fc:dd:96:0e:a9:41:d1:af:a4:
         b8:1c:21:47:ea:ad:4b:3c:83:a1:b9:57:20:bc:21:7a:f9:50:
         20:cc:bb:da:60:12:4c:62:07:c9:35:5f:0f:b9:8e:bc:8c:6f:
         dd:94:2d:fb:4d:d2:4a:83:47:f0:51:2e:86:dc:d6:41:f9:6f:
         79:ff:3e:6c:e1:01:96:a6:60:ca:8e:ef:14:32:64:be:2f:63:
         53:a6:6a:85:dd:d9:25:71:ec:f2:78:58:10:2e:68:22:ca:0c:
         65:f6:18:83:90:a1:ba:4f:de:5e:ea:c3:3e:b2:72:f9:e1:ee:
         fe:5e:ff:81:d2:c3:c2:53:f9:be:44:17:ac:c8:18:13:81:0e:
         95:77:7f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:40 2026 by rpki-client