Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/c487fbf0-c7cd-3e3f-8212-ba4d4228262a.roa
File:                     c487fbf0-c7cd-3e3f-8212-ba4d4228262a.roa (raw, json)
Hash identifier:          nzzb08qmExC6Kuy7NaYmOeVMnYtbHNcE49HKO5c+Q7I=
Subject key identifier:   DC:C7:5B:79:B0:94:15:1F:DE:E2:57:93:39:8A:C0:39:E3:9A:16:20
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584D47C4DA53A6147C32C3A42480
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/c487fbf0-c7cd-3e3f-8212-ba4d4228262a.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2603:5000:3040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:da:53:a6:14:7c:32:c3:a4:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=55e13628-d23d-415f-a7ec-530e232b00ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:65:25:9c:2c:84:25:b3:84:b9:c7:b8:fa:
                    e3:05:3d:00:dc:91:46:84:97:0e:72:98:f7:59:0c:
                    a6:eb:d8:db:60:e2:08:0c:91:c3:17:46:1e:91:d0:
                    4e:d6:c7:1e:3b:ea:ff:e9:22:b7:07:39:58:ed:55:
                    bc:9f:f9:73:58:1f:98:e6:c7:36:69:1d:bb:3a:3b:
                    14:9d:97:c3:a5:94:52:62:15:39:d0:f5:a6:12:5d:
                    0a:54:61:08:a5:ee:f2:eb:ac:a0:7c:7e:d6:f8:0e:
                    f9:bc:bb:d2:14:0d:75:e6:92:11:09:85:6a:84:b3:
                    5e:f2:dd:b8:da:bd:c7:75:bd:d3:f5:b2:5b:61:49:
                    9f:17:78:0c:5c:5c:cc:89:be:90:5a:90:fc:6a:28:
                    34:d7:ae:9a:e5:a9:9d:0a:88:e4:95:29:bb:7e:bd:
                    a0:0d:d8:14:84:fc:d3:01:54:c5:b4:32:91:a9:fa:
                    1d:e9:72:d4:a0:0f:26:bb:b8:3c:0d:20:b6:c7:dc:
                    80:e1:0a:96:be:44:45:01:93:27:d3:9b:be:90:d9:
                    48:bd:72:0a:0b:2a:b3:2c:57:2a:d9:a6:c6:e5:51:
                    85:81:b6:4f:77:1d:6f:7c:8e:3a:12:b1:02:6f:bf:
                    05:6a:d5:32:c8:73:ec:7c:ae:c5:ec:84:e6:fe:0c:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:5B:79:B0:94:15:1F:DE:E2:57:93:39:8A:C0:39:E3:9A:16:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/c487fbf0-c7cd-3e3f-8212-ba4d4228262a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000:3040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:5e:05:90:f3:ba:1e:57:03:bb:db:e1:55:69:fd:db:60:73:
         70:a6:62:f9:2a:e4:9d:f3:a8:98:23:e7:a3:12:a8:7c:17:c1:
         ef:25:1f:2a:94:20:32:4e:6e:ad:41:df:a5:d0:cc:48:e8:38:
         d9:fb:fb:a2:90:5e:ab:c1:24:86:36:9c:fc:86:0b:dc:4a:46:
         88:74:ac:f9:72:48:1c:a6:3b:7c:91:dd:d8:f1:96:0d:6e:9b:
         ef:33:4f:5a:be:a7:3a:b3:dd:15:36:23:d7:00:3b:1a:d0:3c:
         5e:b8:36:68:ac:9b:e8:57:98:08:b5:bb:5a:64:32:96:c4:26:
         09:72:f0:fa:64:99:fb:b8:d9:c6:c8:3d:ab:23:99:41:12:1e:
         62:31:f9:a1:dc:4e:79:0d:e3:47:dd:c2:95:64:5b:e5:99:ce:
         ff:8a:72:8b:e0:dd:a9:a9:ea:d2:09:f5:54:f4:94:1e:09:d6:
         66:6c:31:e4:8d:08:64:cb:e9:21:a2:8b:e2:b4:1f:63:f8:a7:
         18:3f:84:57:40:0a:8e:16:5e:cf:53:ae:a6:59:85:74:5b:61:
         a6:9f:8a:0e:9b:28:c8:8c:3d:91:dd:53:bd:d0:16:df:c8:e8:
         8b:11:b2:8e:c6:06:31:76:ed:20:27:ff:14:d4:bf:fb:0f:95:
         f9:38:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:48 2026 by rpki-client