Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa
File:                     bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa (raw, json)
Hash identifier:          XgZBeB0RTEhZ5dlcj2vscm0XuTmxH7RXl59TU8fFo1o=
Subject key identifier:   79:07:8B:EC:E7:DB:A8:93:A2:A2:5E:8A:03:BD:42:FD:73:79:44:CA
Certificate issuer:       /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
Certificate serial:       010D0C9F4328584D2A74C7FB6C4A055281B7DA40
Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     36221
IP address blocks:        2607:f7c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c7:fb:6c:4a:05:52:81:b7:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=d09f83dc-bff1-487f-b85f-53a77f0ecddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:ce:d9:c4:c3:9c:13:d8:f6:f6:ff:d1:07:
                    80:1e:3d:5f:e7:6d:8e:4a:8e:94:94:91:c3:13:7b:
                    1b:9e:fa:36:2a:38:3c:df:81:11:15:95:2f:58:73:
                    14:b2:b8:34:ee:26:f9:ec:44:d8:d9:6b:fa:54:7f:
                    f6:6f:f7:dd:cc:a6:f6:dd:f0:f4:cf:6f:91:53:29:
                    da:31:6c:88:a7:ad:e6:46:de:31:fe:e8:cd:fd:2f:
                    6f:5e:78:f5:68:43:7d:4a:52:a3:64:76:30:a0:5a:
                    ec:5f:97:37:99:8c:9b:84:dc:3b:32:2d:34:8c:66:
                    a6:cf:c2:e9:41:cf:3a:4b:b4:86:3f:1b:3d:ff:cc:
                    a0:2b:75:a1:ec:00:26:2e:fa:68:62:4d:90:5f:25:
                    13:d3:4c:89:93:45:5c:37:5b:fa:18:46:0c:0d:4a:
                    06:32:03:f2:c3:96:2e:9e:86:04:15:63:cf:00:5c:
                    79:a8:80:2f:d3:1d:ac:c2:ae:14:3b:5f:64:3d:8d:
                    7e:0e:4c:ca:80:2b:b6:c7:dc:57:35:c6:4e:46:46:
                    ef:44:7e:88:cf:39:f0:f6:af:9a:5b:ab:e7:c7:a0:
                    42:37:d7:ae:be:26:07:78:e4:b7:0d:38:37:2d:c5:
                    b9:72:a3:18:54:83:a6:d9:4b:1d:1f:51:b3:af:da:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:8B:EC:E7:DB:A8:93:A2:A2:5E:8A:03:BD:42:FD:73:79:44:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f7c8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:4d:f4:7d:6b:a9:2b:fd:b5:2b:61:f8:65:0d:6d:ca:96:
         48:e0:9c:b4:ad:86:98:df:2a:1f:f6:4a:7f:e4:9b:db:8c:e1:
         a4:b4:de:47:ea:74:cc:b9:a7:0b:7c:94:bb:9c:6a:58:0e:83:
         c2:bf:bc:37:d1:c8:f4:17:8d:9a:c3:54:87:fc:53:11:b9:92:
         77:c9:68:b5:80:71:f1:93:68:6d:31:4f:14:0d:74:cf:1f:a8:
         75:bd:3a:38:67:18:55:df:4e:04:c4:3f:ef:6b:5a:cb:8c:7c:
         63:cd:2f:89:57:de:cf:3f:30:de:26:4f:9b:1d:85:e1:61:41:
         ed:48:43:d3:c7:5a:23:98:0d:35:9c:c2:2b:5e:ad:9d:05:94:
         01:3e:d5:1a:0b:65:bc:76:91:e3:7a:12:56:6b:e3:8b:df:01:
         cf:71:b3:94:62:3d:67:1b:5e:33:4e:a0:aa:ef:45:48:9c:d1:
         09:68:6c:16:f5:f2:a1:c4:0e:c1:b0:2b:c9:b2:3d:8e:90:6e:
         c0:ee:5b:6e:b4:30:65:80:59:61:9c:0b:0d:b2:6d:dd:36:de:
         05:fe:93:1a:85:68:9b:dc:a7:d1:07:17:b5:c9:6e:c2:c6:a6:
         3a:d7:9f:1b:0c:db:bc:1a:1b:a9:95:88:a9:f8:77:ff:54:fe:
         f6:e3:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:00:43 2026 by rpki-client