Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa
File:                     3607c477-33e0-329a-922b-0339e2172692.roa (raw, json)
Hash identifier:          JePrIFXWECA8TdMuJ9LPbbA1UaXmsG/t83nZFT8BMDk=
Subject key identifier:   AB:A4:52:CD:2B:D4:52:9A:EF:74:18:44:22:E3:4F:A9:4D:D8:AD:C0
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DAC458CAECE250C5D3421F700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     11232
IP address blocks:        2605:4a80:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:8c:ae:ce:25:0c:5d:34:21:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=58d0e0f9-bb8e-434c-9762-6b468c90b44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:31:51:17:fd:e4:6a:15:c9:16:50:5c:15:
                    19:59:b7:af:0b:2f:84:96:bb:41:f6:d8:72:c0:0c:
                    80:2a:16:43:aa:bb:39:49:f9:92:2e:4c:20:36:3c:
                    0e:93:1b:2b:5e:ca:ef:e4:fb:aa:e3:34:28:d3:5a:
                    68:24:b4:72:15:d8:22:a9:bf:38:88:b2:b3:2c:2e:
                    90:75:1b:bd:16:f9:53:57:6d:4b:ec:37:49:a3:85:
                    88:07:8f:c0:86:b7:c6:f7:d3:d2:c5:01:84:a3:19:
                    d4:82:70:01:51:21:a1:e3:64:4b:c1:28:e9:8d:88:
                    dc:e9:f4:74:83:20:d9:01:39:ad:02:ed:77:79:2c:
                    c2:d0:e2:46:42:b3:7f:ad:bc:9a:49:25:13:a7:04:
                    84:33:9b:38:1b:be:42:62:30:bf:5b:60:4f:55:09:
                    87:8c:e0:2b:e4:8e:ae:5b:6d:5a:54:1a:71:5b:b0:
                    cd:0f:77:e8:a1:49:df:03:30:8b:8d:e1:81:83:db:
                    d9:34:81:7b:11:c2:1f:df:98:77:89:7c:15:d4:26:
                    ae:1b:a0:81:c9:b7:13:be:3b:6b:ef:0a:fa:ba:24:
                    a0:2e:b9:55:b7:f7:44:c4:0e:5a:f7:2c:91:c0:ae:
                    1e:a5:cd:48:0c:be:09:d9:69:4d:3d:59:ca:9c:57:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A4:52:CD:2B:D4:52:9A:EF:74:18:44:22:E3:4F:A9:4D:D8:AD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:2000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:48:e6:87:b1:2d:08:b7:1d:6e:13:a4:e0:b0:eb:51:d9:
         6b:68:39:44:22:83:df:9f:02:41:e2:d6:04:d7:ec:d6:e7:fd:
         84:d2:5e:e4:4f:b8:7a:08:af:4e:91:c7:e1:76:e7:7b:ba:ab:
         1b:d2:80:f7:80:a9:31:86:a1:58:01:73:de:bc:99:b7:59:b9:
         98:4c:4b:99:ff:6c:79:15:e0:cd:a3:e8:28:b0:78:6d:bc:b4:
         84:81:eb:3f:e8:2b:c8:74:22:4a:7e:94:1a:b5:67:e0:f2:03:
         d4:f0:c5:7a:51:b6:3c:b8:a7:59:8d:e8:61:58:9a:86:9d:9b:
         87:92:98:df:45:31:99:73:f8:65:8f:06:41:c2:9a:46:a9:73:
         75:8a:74:41:5e:1b:8e:93:b2:17:51:55:4c:e8:13:b8:38:b3:
         ba:d5:2d:e3:c1:b1:dc:50:d8:a4:42:83:c2:dd:8b:0a:4f:ab:
         c0:0f:36:60:b8:c6:e2:7a:8e:95:67:bf:37:92:f9:07:5f:9a:
         c3:70:eb:56:6a:ec:6a:8b:cd:9d:d6:bc:bc:c0:4e:3c:e0:82:
         f0:88:b4:10:ea:3b:96:55:2f:15:e0:97:99:b3:c1:76:f3:21:
         d4:73:ee:9f:ea:48:c5:9e:00:42:f3:ed:4f:0d:87:1a:84:3a:
         62:9d:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:18:35 2026 by rpki-client