Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa
File:                     155a6452-86ab-3797-b141-df30cc5c28ef.roa (raw, json)
Hash identifier:          GYu/beuohGkWG0EyHeoQVk7ZDcLEtbUjPmJjZG20pgw=
Subject key identifier:   3C:51:4F:90:51:39:0C:77:79:BB:D2:AE:3E:C9:3A:DF:56:76:34:DA
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584D91C013C10844A64D3098E100
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     62989
IP address blocks:        2607:2240:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:13:c1:08:44:a6:4d:30:98:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=e3c247bc-4905-4501-894b-faa99db17ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:6b:b4:ba:a1:d8:05:59:b3:a7:f7:0b:bb:
                    07:48:61:4f:3c:9f:38:30:34:3f:4c:8c:c7:95:e9:
                    78:79:ad:b8:f0:38:78:2b:99:53:88:1e:4d:23:c5:
                    f6:f3:bf:e4:d0:53:b1:bd:72:7a:65:c6:be:19:1c:
                    f4:67:56:7e:8b:8c:2c:3a:4a:93:75:0c:78:ea:c9:
                    dc:1e:56:f1:85:3e:14:c2:d9:71:ae:df:f8:5d:eb:
                    e6:a3:af:05:94:4c:ed:e7:63:c2:59:83:ab:cb:ea:
                    f1:47:79:f3:d1:89:4b:43:e8:97:e0:2a:14:65:28:
                    d5:dd:06:23:4f:ab:f8:3d:f2:22:92:71:c6:79:ad:
                    85:c7:f1:59:91:01:fe:c0:1e:ed:fc:ea:c8:0a:9c:
                    ff:18:f4:50:2a:98:aa:9c:6f:73:7d:25:58:24:03:
                    07:b7:f8:e4:85:22:d0:25:dc:09:15:d1:da:69:45:
                    76:b0:76:b0:cb:e2:4b:57:1a:7d:59:68:34:75:aa:
                    2d:94:07:e5:0c:21:23:6b:53:e2:af:04:0b:34:86:
                    12:47:2d:c6:c0:dc:9d:a4:63:59:e9:1c:c1:23:fa:
                    cb:be:ee:f7:eb:4d:f9:79:6a:b7:10:03:9d:7f:3b:
                    51:51:a3:5a:d9:17:4a:5b:0d:da:fc:c7:5f:9b:54:
                    25:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:51:4F:90:51:39:0C:77:79:BB:D2:AE:3E:C9:3A:DF:56:76:34:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:50:00:e4:7d:3d:d1:81:46:c0:aa:35:32:e3:56:ba:70:f5:
         da:df:ac:d9:34:b3:68:19:6c:a1:2c:81:41:ef:f1:18:53:42:
         10:a6:0f:30:d4:76:e4:0f:ea:bc:96:04:71:4c:1c:b3:93:70:
         4b:b3:52:6c:8c:86:cb:5a:0b:0a:7c:1c:c5:5c:6c:73:ec:05:
         fb:f8:77:64:e7:ab:7c:7f:47:d7:44:0a:49:09:fc:6a:55:c3:
         71:55:de:5b:1e:2f:72:e8:90:f4:0a:8c:66:54:5e:fa:9b:58:
         1b:34:8d:81:d1:ef:59:e6:99:07:4d:a3:64:d3:02:80:c0:64:
         c7:82:03:7e:5a:65:20:19:20:a0:7d:db:9c:76:8b:0c:99:63:
         0e:47:21:d7:e5:65:3b:d7:32:a3:c9:46:08:6c:87:e1:aa:f0:
         20:19:87:cd:86:22:35:bd:c6:23:9e:9f:e6:c6:bd:2b:0c:07:
         a9:93:cb:c5:be:a1:20:d7:39:4e:5f:9a:1c:da:de:12:b1:4a:
         85:ad:4f:7a:c4:97:00:1e:3d:41:8d:ec:4a:b8:19:de:14:81:
         a0:2b:c0:23:da:f1:28:4e:88:39:b4:cf:ad:21:32:e8:fe:21:
         ca:69:44:7a:f0:11:f6:10:99:da:8a:80:bb:88:52:71:5f:47:
         b9:e4:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:39 2026 by rpki-client