Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/64330574-c8be-38a4-9915-f2974fb16123.roa
File:                     64330574-c8be-38a4-9915-f2974fb16123.roa (raw, json)
Hash identifier:          lBQDVZqqj5uS2cj8k4tXA2bZ/hYeJzXDnRoBOaQP23w=
Subject key identifier:   23:E7:30:09:0A:60:41:F8:3C:30:9B:53:AC:78:6B:8F:03:FF:CD:EA
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584D8EF581BCB6985AA203966380
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/64330574-c8be-38a4-9915-f2974fb16123.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        2620:a0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:81:bc:b6:98:5a:a2:03:96:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=96efb22b-7e66-4639-b76b-00791d91bf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:13:98:1c:bd:cb:05:38:a1:a7:4b:86:a6:
                    92:a7:13:2a:64:aa:06:20:3e:46:32:cc:1c:e1:45:
                    a1:89:ae:30:e2:d3:23:82:61:ad:1d:e6:61:69:38:
                    e2:82:c7:fe:6a:fb:f6:bb:c4:ce:b2:01:de:3a:98:
                    83:e2:c3:b5:93:26:0a:eb:c6:3f:6d:dc:c1:4e:25:
                    da:32:1c:40:e5:12:35:e9:68:91:52:19:a7:49:86:
                    88:80:73:16:c3:5a:61:4f:1b:f7:b6:fc:39:f5:b2:
                    35:be:d1:bd:0d:87:e0:61:7e:78:da:08:e9:69:93:
                    b4:61:f3:3f:e6:4b:d9:a4:c7:9b:0d:16:43:33:4d:
                    b5:38:e9:db:4b:e3:68:cb:53:da:54:97:c2:a1:26:
                    d3:0e:50:38:85:18:94:c7:61:47:1c:22:19:ec:ad:
                    38:5e:33:32:76:42:49:ba:c9:d7:c3:93:db:17:cb:
                    e3:f6:a5:64:38:11:3d:ef:b4:7c:02:0d:51:62:c1:
                    c9:52:9d:ae:d1:c7:8d:33:42:91:44:cf:a5:86:5c:
                    b0:bb:1e:97:56:c6:d1:51:66:71:3c:22:c2:85:f1:
                    ed:a2:f0:ea:58:82:23:85:6a:a1:21:ea:d8:e1:b9:
                    cd:0f:17:a1:c5:fb:47:88:1f:89:ce:36:9c:9a:7c:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:30:09:0A:60:41:F8:3C:30:9B:53:AC:78:6B:8F:03:FF:CD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/64330574-c8be-38a4-9915-f2974fb16123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ee:e5:bc:9e:6e:1c:db:bb:d1:33:29:e6:09:d1:89:a5:62:
         06:06:ea:16:11:27:50:71:e1:71:65:d7:91:2b:72:b3:63:6c:
         cc:e2:d2:c1:5f:82:10:c0:0d:4d:c0:64:f9:29:0b:9c:49:31:
         11:b0:d1:ce:34:ce:40:49:5d:26:64:c3:07:58:0a:55:d3:1c:
         1c:05:01:ac:9a:b4:f6:61:b1:ec:40:98:14:d4:f6:19:49:f6:
         f5:13:08:b6:33:6a:8e:22:1f:a8:6a:59:87:ce:df:02:79:14:
         ca:e5:a6:cd:02:33:01:4b:ed:39:a8:00:92:05:f1:42:36:af:
         1d:b7:b1:c6:65:9b:97:5a:72:65:21:5f:44:5f:e0:01:45:65:
         ca:72:d9:66:57:40:82:3c:2a:e5:9c:40:9f:8e:fa:ba:a4:a8:
         67:12:9c:77:1b:3a:1d:29:bb:2f:99:8a:58:1f:50:33:63:d5:
         4b:ad:ec:f9:80:fd:7a:7d:55:ea:ba:46:b5:bf:10:52:cd:ea:
         d2:78:c1:b1:56:f4:24:83:81:74:4c:0a:53:e7:b3:ed:a2:50:
         7e:88:f3:39:68:66:ed:11:58:4f:24:b0:b0:25:9a:4e:14:e7:
         da:0f:82:1f:f0:e4:e5:ce:d1:22:b7:be:4b:ce:a7:aa:c8:8a:
         1d:b0:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:17 2026 by rpki-client