Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/4bbf466c-14ac-3882-ae09-72594596985a.roa
File:                     4bbf466c-14ac-3882-ae09-72594596985a.roa (raw, json)
Hash identifier:          pePeh4SZ6uvqp3Ov2LxL54QytXMwGh4M1p0YW3dpzEc=
Subject key identifier:   74:97:E1:E1:BA:2B:00:27:D4:79:0F:77:96:00:17:10:0A:41:6A:10
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584D237A5E6E9A2BD7F9BD144420
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/4bbf466c-14ac-3882-ae09-72594596985a.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     27539
IP address blocks:        2604:a900::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:5e:6e:9a:2b:d7:f9:bd:14:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=7fdd8ed1-fa24-49b7-abf2-3be5fa1837e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:75:c2:c5:f1:65:8d:eb:4e:23:60:bc:1d:
                    8c:7a:01:97:f6:85:99:f9:93:38:d2:2e:21:c0:25:
                    45:54:f0:dd:f1:e7:b5:df:97:06:80:08:05:7a:62:
                    1d:a9:fc:cc:d0:9f:fe:1e:ea:56:1b:04:da:77:1b:
                    06:f7:cf:e7:85:49:c3:67:05:86:3f:d3:b0:19:53:
                    d9:af:c1:58:ff:f6:cd:be:f0:b0:c7:59:fc:41:0f:
                    03:7e:61:f0:59:7b:4a:80:b1:ea:6b:38:c0:82:30:
                    a3:48:b2:98:83:f5:61:b8:46:c1:14:20:6d:f7:78:
                    14:dc:6b:4d:1d:9f:5b:07:ac:b0:29:27:a8:3c:c5:
                    ca:15:61:89:42:7e:e7:39:81:38:83:86:81:52:94:
                    68:0d:5f:8c:ec:c7:9f:12:84:3f:8f:a0:b0:b1:8c:
                    97:66:82:e0:ad:a2:d6:5b:6b:5f:6d:88:de:32:64:
                    4a:fd:09:28:95:ed:1c:37:80:af:9e:ed:09:8e:ce:
                    02:dc:7f:0c:a9:fd:2b:05:1b:47:23:e5:c3:c3:d1:
                    63:45:5f:92:17:9b:59:87:30:11:b5:b2:96:5c:d0:
                    3c:45:b7:ff:19:66:7f:fa:a0:cc:23:ce:f1:7b:3c:
                    a9:57:54:71:a8:e5:21:3d:3f:5e:e2:68:86:d3:c0:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:97:E1:E1:BA:2B:00:27:D4:79:0F:77:96:00:17:10:0A:41:6A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/4bbf466c-14ac-3882-ae09-72594596985a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:80:4c:c2:9a:6c:cd:b8:d3:f2:22:9b:c3:10:80:d9:ad:2c:
         7b:fe:44:f9:89:c9:79:ab:87:15:f5:50:bb:19:e4:e7:46:0b:
         18:a4:d8:f0:fd:13:3e:97:d0:4e:a7:ff:54:5f:9b:e6:96:0d:
         5e:66:24:bc:13:b6:d4:a8:15:37:26:f1:b0:70:cf:d8:be:93:
         66:a8:18:d4:26:c7:fb:9c:ac:2f:7a:9a:50:68:82:64:1e:38:
         b0:76:6e:11:5f:7f:ca:0c:10:e0:3e:51:6c:c4:8d:da:29:17:
         34:97:15:e4:58:75:c8:72:c7:5a:2b:be:82:c3:de:0c:db:c0:
         6f:6e:55:71:ea:e3:d7:8c:68:59:18:bd:ef:ad:8a:eb:8f:30:
         48:cb:43:6f:3e:fd:cb:32:be:13:3a:76:86:98:69:0b:e8:08:
         14:41:16:a9:b9:0c:ac:88:cc:cc:47:8b:41:c4:96:ec:65:9f:
         42:c1:dc:31:97:87:6b:27:10:49:9a:d9:4a:fc:d3:d0:26:dc:
         bf:ce:30:63:0b:11:62:2b:43:95:1b:cd:c8:33:d1:16:db:71:
         3f:28:17:e3:4f:4d:96:83:6d:11:db:42:7b:c4:87:49:98:12:
         cc:96:98:10:1d:b0:3c:6b:ed:7b:82:83:4f:7b:46:8d:67:db:
         19:2f:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:16 2026 by rpki-client