Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
File:                     f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa (raw, json)
Hash identifier:          L+1jG/vr5jxlX5lLNFU9tD7tvc85rmhnrhqIiJ4bC8E=
Subject key identifier:   BE:27:C9:6B:70:F7:E1:66:2D:A8:F8:D1:06:09:99:E4:CF:C3:37:AB
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584D8EF581B152F25ADA5B0A7140
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2620:a0:200f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:81:b1:52:f2:5a:da:5b:0a:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=dc1d1251-70b5-4ad4-a169-8ee408de2b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ff:ae:1d:a2:88:09:f5:87:d7:f1:f7:a0:35:
                    22:6d:98:aa:7c:1e:e4:6b:8f:eb:6b:4e:ae:47:ca:
                    9d:92:2b:4e:f1:67:51:4a:4b:14:4d:10:c2:34:42:
                    1d:2f:da:f3:ce:cf:ad:37:2f:71:e3:4f:96:e5:d9:
                    d7:a4:cb:46:90:87:13:3a:f8:3c:69:4d:67:02:fc:
                    39:7b:cb:bb:ce:ac:a7:54:6f:da:b7:04:a2:86:5b:
                    04:00:1a:a3:a1:4b:a9:4a:f8:d1:e0:f9:61:54:05:
                    9f:04:5f:57:c9:91:62:ff:a0:bb:a7:41:ed:5c:01:
                    f5:b8:67:85:74:9d:8c:28:32:f1:e9:7b:a1:9c:86:
                    1e:14:6e:d7:2c:1f:e0:f2:1d:75:e8:d6:9e:5b:da:
                    fa:16:51:f3:a9:83:ef:36:73:a5:97:87:a7:8f:de:
                    ad:5a:bb:ca:13:50:50:af:f8:61:97:cf:93:f5:4b:
                    cf:16:4f:af:2f:72:fe:7a:d0:77:fb:c4:7d:27:88:
                    fa:ae:f4:54:71:5a:a0:87:f0:64:71:14:cf:9b:cf:
                    f0:a0:a7:6b:ba:86:8d:4c:51:00:7d:0a:fa:f7:7b:
                    77:2d:3c:d5:6c:f6:59:b4:e2:be:b2:b0:dd:7d:2a:
                    9c:d6:8d:3e:da:a6:af:84:89:4a:d5:a1:68:1b:be:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:27:C9:6B:70:F7:E1:66:2D:A8:F8:D1:06:09:99:E4:CF:C3:37:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:ca:4e:65:13:c8:39:a9:59:65:5c:c9:0a:c8:8f:1c:c0:
         31:08:03:69:10:d6:40:a1:26:54:ef:49:0e:b7:e0:ab:2f:78:
         85:51:2b:28:3d:ee:4e:5b:ef:ba:05:59:6f:e0:2c:28:af:d3:
         1f:06:45:66:41:c9:7f:7d:4f:42:db:3e:11:d8:8b:6a:48:d9:
         8c:ea:33:a3:20:59:63:04:84:4d:24:34:ee:a4:80:23:ea:48:
         67:46:ea:88:13:44:f3:ec:8b:28:4c:04:49:19:b9:0a:10:e4:
         c4:1e:e1:1d:de:de:d1:29:aa:25:fa:a8:ea:0d:26:99:5d:d0:
         78:2c:df:d8:da:64:6f:0c:3b:b1:b7:3b:ed:3d:02:a8:d1:b8:
         7c:62:ab:cb:9d:3e:82:ed:97:54:46:aa:38:31:48:14:c8:2f:
         b3:89:e4:76:de:37:30:a6:54:ec:b8:31:80:70:54:04:e3:b7:
         4d:3e:74:38:88:3c:fe:86:28:f4:80:a7:cf:b1:5c:bf:04:7f:
         03:81:61:a1:c1:c2:79:e8:82:8d:95:7d:f8:9f:d4:da:ff:e2:
         98:c2:1e:35:8e:7f:6d:4d:ce:05:d0:3e:0a:f5:5b:0e:31:ed:
         77:a4:5c:1a:0d:d7:3f:16:03:1d:0a:e8:36:3b:e3:ea:2b:34:
         a4:1e:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:34 2026 by rpki-client