Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
File:                     f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa (raw, json)
Hash identifier:          TpZj+Q3JDTWOIhhflPnh8tnSY8iTmLf3Rwront7+tTM=
Subject key identifier:   83:FF:77:8E:53:AF:68:58:06:E5:55:BE:2F:B9:DE:EF:5B:91:E9:5D
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584D1172682A457261AB42AD0BA8
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     396026
IP address blocks:        2607:fc30:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:68:2a:45:72:61:ab:42:ad:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=617cf45b-13b7-4ec5-a8da-72e27ab0f4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:58:39:51:5b:55:b7:c3:f1:e5:38:02:45:
                    71:8f:a4:32:7e:97:ef:dc:c8:e2:08:33:e7:98:a0:
                    f7:4d:23:32:34:7a:04:46:5c:ba:08:39:b0:31:6c:
                    d5:b8:7b:c1:b8:14:fe:58:43:be:49:b3:fe:eb:c9:
                    3f:ba:dc:d6:48:f8:64:db:b6:b8:78:66:09:87:2b:
                    25:59:b4:ec:27:7a:ec:48:9b:16:22:b3:51:ca:5d:
                    00:30:2c:3f:4d:7f:c2:97:2d:d0:3a:43:1b:cc:83:
                    07:cc:fd:e5:be:10:71:9e:22:de:89:03:50:61:a6:
                    03:eb:ca:8f:3a:a1:03:58:04:70:4c:6f:7d:bd:cb:
                    66:3f:a1:2c:8d:04:dd:d2:8b:84:14:c3:e8:ac:b8:
                    f1:d8:ea:84:8a:ea:ec:5c:04:fb:12:f7:7e:71:08:
                    5e:1a:94:18:d9:cc:c5:26:9b:98:c5:53:9e:0c:20:
                    af:67:b2:c8:e5:bb:4f:04:07:9f:8f:bd:8e:95:12:
                    cb:fc:67:c9:30:59:77:30:6e:77:6a:e2:75:49:72:
                    68:cd:9d:cd:d6:9c:4a:c2:71:53:03:2e:67:93:12:
                    f9:cb:4e:ee:b4:2e:af:66:94:a1:4d:e2:f0:59:f1:
                    e9:2e:23:b9:34:80:51:95:36:56:b0:ae:0d:b7:5b:
                    a2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:77:8E:53:AF:68:58:06:E5:55:BE:2F:B9:DE:EF:5B:91:E9:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:69:1b:b8:59:ad:6a:c8:06:1a:ae:84:05:92:06:3c:11:
         26:9c:d6:38:1d:4c:50:48:35:c1:89:a4:c8:21:4b:6e:fe:c3:
         16:de:2b:ba:29:86:56:4e:76:ea:00:74:0d:88:61:2c:78:dd:
         35:bd:60:f9:96:3c:dd:6d:c5:f0:85:3e:77:82:ac:13:c9:18:
         97:6f:2f:9c:4d:6e:fa:2b:a5:47:ce:22:a8:cc:60:03:e8:14:
         dd:06:f3:5f:10:d4:9c:df:90:36:45:42:42:c4:f6:00:fe:5b:
         e7:45:5b:3e:05:fb:c2:5c:b0:fa:56:0d:24:00:eb:0b:96:a8:
         bf:59:e8:e0:f6:b9:43:6d:df:0a:7a:87:d7:95:0a:44:a2:b1:
         e8:6c:33:88:79:6a:71:bb:f5:ca:11:f7:53:37:ec:4b:9d:22:
         dd:59:07:63:b7:0a:80:8d:08:b5:27:63:2f:91:83:78:8f:88:
         fa:e6:2c:d2:39:58:50:8e:78:85:c8:14:4b:29:7f:33:a8:28:
         7b:40:41:0f:64:53:f6:f3:c1:7e:b5:6e:0e:77:7b:49:ef:0a:
         1d:b5:82:97:16:b0:a4:0b:2a:2e:ff:c2:81:aa:74:07:77:d2:
         7e:ff:a6:e6:d2:bf:63:ec:f0:92:62:72:52:fc:c2:4a:35:3d:
         ca:99:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:41 2026 by rpki-client