Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
File:                     11869df8-11c1-3bf1-903f-f89a2a459e6a.roa (raw, json)
Hash identifier:          KFN6fZqRUgHA85FBn8OKDIkaWZEyXTrgLWq/aDLueQw=
Subject key identifier:   74:4C:4D:E7:62:73:21:56:93:CB:3A:E3:7A:AA:24:31:82:00:33:C9
Certificate issuer:       /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial:       010D0C9F4328584DAC45743A1604CDE0CE89D900
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     12261
IP address blocks:        2606:900::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:74:3a:16:04:cd:e0:ce:89:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=3671e62a-fb95-4cc2-875f-e6de8d9660ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:0e:43:20:09:c3:bf:02:3f:b8:1f:b8:ec:
                    97:0d:ef:83:d2:9a:3c:ae:0e:a2:1d:0b:bc:f1:12:
                    cd:d2:2a:4b:4f:4b:e5:7f:35:93:9c:90:2a:8c:b3:
                    b8:98:46:01:db:3d:44:d7:54:08:93:28:36:f8:e6:
                    32:e3:15:f7:52:62:a7:c2:01:92:d6:ae:ac:2f:50:
                    2e:cc:2c:12:02:de:a0:6d:75:20:f2:a4:2b:0c:07:
                    0e:90:33:ae:f4:95:82:59:09:e6:11:bb:69:77:41:
                    e9:ca:2c:68:26:06:08:c3:0d:96:91:72:ea:4e:b2:
                    71:e3:45:2d:2f:ee:2e:13:91:0a:8a:dd:62:4a:08:
                    7c:e2:e6:8a:ea:23:a4:22:1e:7b:4b:50:71:6d:bf:
                    62:53:cc:01:cb:48:a6:e0:35:f5:c4:ff:ca:b1:42:
                    c9:84:e0:34:a9:0b:6a:d9:e1:be:cf:63:45:70:75:
                    9d:34:17:dc:06:d4:24:5e:e4:93:78:38:68:c8:e9:
                    09:e7:1f:12:76:a0:6e:51:be:76:7e:5d:d6:24:16:
                    2e:17:d4:0f:54:c4:99:0d:cd:81:df:35:a6:b2:75:
                    00:e2:9f:af:f6:d5:1a:e0:2d:38:00:85:a0:f6:cb:
                    de:eb:32:96:54:8d:83:12:55:6d:07:0c:df:b8:c1:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4C:4D:E7:62:73:21:56:93:CB:3A:E3:7A:AA:24:31:82:00:33:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:65:29:30:d3:31:be:71:3e:a6:96:89:25:38:3a:25:18:1e:
         fd:b6:b9:fe:64:0e:c2:3c:5d:f2:db:16:aa:7d:99:ef:8e:fc:
         4c:dc:48:af:f6:de:3f:b6:33:f8:0b:33:34:ee:e2:03:a2:eb:
         36:ad:4c:37:4a:4c:13:09:9d:b3:53:81:7c:30:c2:c1:07:de:
         2a:39:75:8c:46:48:e0:e5:fa:7c:13:95:35:83:ee:52:69:3f:
         ec:e9:33:b0:ab:6b:da:ee:3f:35:e4:f0:99:9d:b2:80:55:ab:
         c5:83:7b:2d:d4:23:7d:94:b0:cc:13:5d:18:9c:1f:05:e0:b9:
         1f:13:04:54:3c:7e:39:5f:b3:cb:90:60:39:bd:ca:54:47:5a:
         9d:10:33:37:93:62:e1:16:95:27:07:5d:39:a1:c2:80:6b:85:
         dc:f3:e2:d3:22:8d:95:11:79:48:6f:e6:36:e5:78:f4:8c:04:
         90:ce:74:af:ad:aa:9e:d6:ba:23:e7:f4:6f:32:45:80:05:1d:
         91:f5:95:7c:70:46:eb:bc:f3:c8:11:24:02:15:7d:47:ff:c5:
         95:bd:50:32:e0:15:7e:27:11:f3:27:62:26:cb:88:61:28:9c:
         da:ba:98:0c:79:91:a7:c9:4c:66:13:44:70:cc:fe:45:76:08:
         34:79:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:26 2026 by rpki-client