Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa
File:                     9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa (raw, json)
Hash identifier:          sLlRF69KQF5d1GWQKM2re5eAaZJIhtEsJToTyh9oHWE=
Subject key identifier:   9B:62:DA:61:C6:8E:26:51:E3:A0:7A:F6:5C:C9:75:00:3D:AA:7F:4D
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F4328584D2D3F777BF77FB41301A88980
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     36222
IP address blocks:        2604:d9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:77:7b:f7:7f:b4:13:01:a8:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=84f46ab8-ba9b-4457-8636-60140e0cead7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:95:2c:22:94:3d:c4:ba:12:c4:99:91:82:22:
                    7e:c0:2f:43:30:5b:40:99:09:8a:f0:a9:d0:27:b9:
                    3f:1c:d6:8d:9d:44:ae:74:89:21:27:e4:0c:4f:88:
                    56:d2:d7:55:d6:cd:41:71:04:a8:c4:9b:fd:56:b5:
                    64:c6:84:0c:7f:2c:07:f0:66:ca:31:73:7f:df:fd:
                    29:56:f2:7d:2f:3d:92:f2:92:3b:44:39:96:a7:b9:
                    fb:d0:73:6a:d9:a6:70:5b:47:18:e5:07:92:97:48:
                    a2:7c:36:7c:cd:10:54:12:f5:a5:a3:c5:b9:53:35:
                    bd:15:52:02:62:da:12:bd:ae:04:75:b0:68:1f:39:
                    9c:1f:95:be:08:94:be:01:87:63:8a:22:d8:45:02:
                    79:d1:74:7d:81:72:ab:a6:5d:e3:8a:e4:ff:5e:2d:
                    fb:c5:01:21:6d:d2:21:65:8e:71:a1:09:0b:85:da:
                    aa:3b:b5:92:62:07:5a:04:57:12:14:56:fa:2d:55:
                    f6:17:ba:56:ae:21:6c:19:dc:48:42:be:2a:bd:0d:
                    da:5f:7b:22:c0:e4:8b:32:b7:1b:c6:7f:13:e1:1e:
                    74:5d:a2:9f:67:8c:5e:92:36:0b:01:68:da:48:e8:
                    8f:62:96:87:6c:a8:a1:d3:95:af:33:e7:65:0a:5a:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:DA:61:C6:8E:26:51:E3:A0:7A:F6:5C:C9:75:00:3D:AA:7F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:17:4c:32:7f:41:38:56:ca:d7:c2:f9:f0:96:40:12:d7:
         c3:35:fe:60:86:51:9c:e1:c5:af:e2:c0:5e:46:10:f0:f3:e8:
         b9:9c:4a:9c:2b:88:26:f2:f6:dd:8c:ef:df:68:2c:86:48:2d:
         cd:cb:06:39:96:5e:7f:68:5e:4a:3f:44:64:48:da:e6:33:9f:
         25:31:ef:d7:bc:c9:0b:a7:5c:46:d1:07:0f:8a:be:bf:ca:75:
         43:12:60:37:0a:cf:2c:74:e4:df:41:3f:89:01:5e:80:fe:9b:
         fa:d6:03:d1:bb:79:17:74:60:61:cd:1a:64:0b:42:b1:1c:8b:
         9c:8e:10:44:89:55:69:32:a5:98:ca:0c:81:d5:45:46:ed:ff:
         b0:e9:90:05:f3:db:3e:a7:76:d5:c0:e3:94:b2:bc:b8:bb:4a:
         f8:ad:b5:2d:69:bc:02:23:f7:f4:86:96:35:8a:a5:b4:93:29:
         29:40:69:74:bc:96:50:00:48:ec:6a:7c:44:10:72:63:19:3b:
         6a:81:41:8c:9e:6f:71:6f:f6:d9:12:88:f4:9b:e3:92:cc:aa:
         75:23:65:7d:17:48:f1:93:f8:92:9f:78:99:a3:bc:5e:00:e4:
         04:3b:4b:a6:2a:9d:e8:67:20:30:7e:09:67:17:4d:a3:17:d1:
         9e:c0:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:56 2026 by rpki-client