Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa
File:                     4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa (raw, json)
Hash identifier:          JKo8ZhljhqgApqvNUQyImn58CS16TC9Fj2lzH7nL44w=
Subject key identifier:   28:27:28:0E:DD:A9:B7:EB:BB:BB:96:4A:1B:64:82:77:05:EF:7F:54
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584D91C0135FFC3FBFC396351B00
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     398663
IP address blocks:        2607:2240:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:13:5f:fc:3f:bf:c3:96:35:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=cf2fc62d-f5d9-4ae9-b83e-7158945ba762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:97:a6:7b:b7:de:8e:3e:91:fa:b9:d6:62:
                    60:5d:0e:73:1f:d4:71:41:21:21:da:a0:af:5b:e1:
                    da:96:d3:a5:05:7e:ea:2a:cf:11:22:bb:e4:f0:86:
                    3f:f2:c0:f7:b4:5a:23:0c:96:18:81:2b:bf:e1:90:
                    ef:a6:cc:e9:10:79:3a:1e:5d:0a:13:f2:1c:9e:2c:
                    9f:10:77:2e:43:67:4d:65:e0:5c:ea:8c:19:4b:79:
                    18:bc:21:9e:6b:18:3d:03:45:61:36:fc:04:7c:24:
                    07:d3:78:8b:c5:23:39:ad:59:04:e1:49:89:7e:e5:
                    5f:99:fe:7a:80:bc:26:16:a3:60:f3:cc:ff:8c:b7:
                    25:9b:3b:c4:ff:3c:53:6a:08:1a:f8:7e:38:33:ec:
                    15:9d:51:aa:82:10:12:73:53:ed:ae:35:e4:1b:ee:
                    35:12:fa:e2:e4:7c:8e:b7:25:86:cd:45:35:1e:82:
                    7f:33:08:d0:37:6a:31:e1:4d:88:10:08:d7:cd:a6:
                    33:44:89:20:88:0e:bc:54:95:1d:1c:e4:fc:05:63:
                    04:91:b5:e1:35:1e:2e:8f:55:d1:f4:8f:5f:c4:9f:
                    d0:92:2b:ca:fe:9b:a3:59:ff:b6:e0:57:34:48:80:
                    b4:67:0a:62:99:e6:a8:20:a8:2b:6e:6b:78:2f:e1:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:27:28:0E:DD:A9:B7:EB:BB:BB:96:4A:1B:64:82:77:05:EF:7F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a6:e5:21:96:f4:8f:c6:5b:cf:4b:53:b3:23:97:a3:6c:3e:
         87:0d:86:ed:cb:6d:8a:9b:67:f0:d9:de:76:1d:d3:39:b7:56:
         08:6a:b0:84:28:c2:fc:12:f7:88:5a:37:d3:0a:cb:c6:8d:cb:
         75:b8:68:d2:b8:6a:4c:58:e8:ad:a6:8f:9a:a5:f9:16:72:3f:
         54:17:4e:d2:03:18:87:1f:57:a3:b5:24:39:68:94:9a:36:e1:
         cd:39:c2:46:11:27:f2:5d:fc:97:95:ed:97:89:de:fd:08:79:
         9d:40:3c:f8:40:ff:d5:0c:31:3c:11:cb:62:78:d6:6c:c8:db:
         43:b5:75:e2:d4:59:77:a0:c0:3c:c4:fd:fc:71:57:07:ea:96:
         ff:3d:71:7b:68:26:fd:47:0a:42:74:f4:b5:3a:7e:4a:0d:c4:
         54:b7:26:a1:fa:d1:10:04:e5:bf:31:3b:61:b8:6c:32:bd:75:
         cf:b3:e3:fe:0a:a2:0d:d2:37:d2:72:e1:cb:88:49:03:8d:47:
         79:aa:c0:39:dc:00:c5:b6:bc:91:6f:3d:dc:5f:cf:45:db:7e:
         d8:dd:66:a0:37:02:63:b0:85:9e:f9:7d:0b:a4:f4:14:a9:e6:
         ac:72:30:06:8e:34:72:ad:ef:a0:d1:8a:7d:74:7d:8a:5d:c1:
         dd:e1:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:08 2026 by rpki-client