Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa
File:                     32c994a1-ef40-386d-a407-28e1c00909b9.roa (raw, json)
Hash identifier:          Vs+uZ8UZIPrsQbSo2dZCyFgjYi78D0umfrib0R0RtFE=
Subject key identifier:   4A:DC:76:F6:23:81:AF:AB:7F:D7:13:BE:4D:A4:15:05:5C:07:7C:08
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584D8EF5813CC5A9AF8CDC06B500
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     25645
IP address blocks:        2605:8300:2::/48 maxlen: 48
                          2605:8300:8::/48 maxlen: 48
                          2605:8300:e::/48 maxlen: 48
                          2605:8300:f::/48 maxlen: 48
                          2605:8300:13::/48 maxlen: 48
                          2605:8300:14::/48 maxlen: 48
                          2605:8300:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:81:3c:c5:a9:af:8c:dc:06:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=8fa8ef88-6d44-4c26-b53a-4b39ae059d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:e8:c8:ea:10:9a:b8:bf:9c:03:74:5b:c7:
                    47:cf:f0:88:39:cd:a3:b1:ab:4d:7d:a8:5e:77:2a:
                    1b:a3:8f:3e:86:68:da:52:66:4c:b4:d3:d0:93:1d:
                    3b:c8:28:be:f4:f1:09:6f:48:84:b7:4e:b6:39:dc:
                    c7:7a:38:00:38:aa:61:44:dd:41:7a:aa:13:46:14:
                    29:48:71:95:8d:3e:b5:d9:d0:89:4f:f8:27:a0:6b:
                    89:9a:7d:b6:79:03:63:17:93:bf:65:55:d2:75:49:
                    67:b5:e6:64:9a:02:9a:02:d8:ce:24:0b:f5:5c:73:
                    27:0e:47:62:f1:e7:73:ea:67:ca:02:74:13:03:33:
                    a7:94:b2:da:ae:09:00:00:e0:f9:d0:e9:9d:95:1c:
                    6f:fd:f1:2f:e6:81:eb:84:9b:80:5b:83:24:9a:8f:
                    da:bc:c6:01:7d:7c:99:fc:c1:30:38:4c:dc:2b:dc:
                    79:41:8d:0d:3e:a5:49:a1:79:9b:23:c9:51:cd:c8:
                    17:72:4e:cb:4d:77:a6:c5:c3:11:a6:c0:34:b6:61:
                    88:f4:e3:35:b6:06:8c:dc:5f:9a:c7:b5:af:53:46:
                    25:5e:81:d5:9d:b0:56:7b:52:34:cc:58:e1:1e:fc:
                    06:c5:75:ea:6e:40:e6:03:d4:24:d4:cf:a0:8e:23:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:76:F6:23:81:AF:AB:7F:D7:13:BE:4D:A4:15:05:5C:07:7C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300:2::/48
                  2605:8300:8::/48
                  2605:8300:e::/47
                  2605:8300:13::-2605:8300:14:ffff:ffff:ffff:ffff:ffff
                  2605:8300:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:11:21:1e:c2:10:1a:6f:bd:bf:93:fb:91:3b:e8:f5:f2:93:
         11:26:29:a1:c0:c8:1b:c2:75:14:df:f2:fd:23:33:c0:75:e1:
         a0:36:3b:98:91:25:ec:04:95:89:e2:b9:6c:a1:85:1c:0f:d2:
         39:21:a3:a3:cd:09:15:85:e5:1a:70:16:9c:89:fd:1a:15:45:
         93:40:8b:ef:d1:b6:d4:9f:5c:c4:21:ad:74:ae:37:3e:2e:d3:
         6c:9a:03:b4:68:57:94:33:89:7e:48:f4:9e:2c:f0:3d:7d:5e:
         82:54:34:8a:7b:d4:cd:c9:0a:6d:9e:10:d5:ff:4c:fd:a4:45:
         16:34:fe:29:20:5b:14:54:a2:f8:44:c1:68:fc:6d:d3:55:ed:
         4e:15:4d:81:5a:ef:f7:53:51:4d:ca:fe:38:53:86:37:3b:8b:
         25:b1:90:62:4f:1a:79:64:a5:42:3a:21:11:d2:5b:b2:97:c4:
         b8:b9:cf:6d:b4:ef:de:b3:0d:c0:2d:94:6a:de:8d:63:0f:a1:
         ae:b8:6c:7e:cf:67:d2:a9:94:9d:26:41:b4:a4:9e:7b:79:10:
         f9:ae:07:64:c0:a3:cc:dc:bf:6d:9d:be:9d:61:70:1b:a7:55:
         68:ca:7e:a3:f3:39:14:ad:98:45:5c:cd:9a:f2:f4:b5:1e:00:
         df:8a:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:02 2026 by rpki-client