Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa
File:                     30d374fc-486d-372b-9c83-8a66ef0b4926.roa (raw, json)
Hash identifier:          edQXPqzAswCRjTv02Bt7LU65BhXNGHI5Sz1ZxXSZggY=
Subject key identifier:   96:F3:B3:55:33:AB:9C:67:59:26:64:98:AC:F5:86:03:E7:7C:16:7C
Certificate issuer:       /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
Certificate serial:       010D0C9F4328584D0D426D3D1F46A8CE6F364800
Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     395261
IP address blocks:        2607:4980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6d:3d:1f:46:a8:ce:6f:36:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=42bc80e8-5d7e-4d66-9d53-c1e68c5cd75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:f1:db:ed:b1:78:e8:d7:6b:01:54:de:32:
                    8d:ba:80:ac:09:a1:b3:34:c2:8e:a4:25:a3:4e:d4:
                    f4:ed:24:40:b4:a7:6e:49:14:ab:0a:f4:aa:c3:79:
                    73:57:b2:69:0b:8f:b2:87:0f:cc:bb:a7:74:d4:af:
                    25:7e:b4:56:70:00:da:db:d0:90:94:c4:ee:0b:59:
                    69:d4:19:9f:8a:55:ca:12:cd:c7:31:a5:43:e9:35:
                    e9:cd:aa:04:99:81:34:dc:f8:c9:d8:85:59:8f:23:
                    60:eb:3e:64:3b:30:17:99:37:5f:2a:9e:09:f2:3e:
                    3d:97:12:1b:49:e2:73:d2:f5:61:ca:99:e2:68:a1:
                    84:7d:19:3b:86:36:02:9d:d1:ae:ec:64:96:1e:7c:
                    32:f2:4f:f7:c6:19:db:ff:0a:ef:6a:75:36:d8:7c:
                    59:79:4f:58:53:ec:e4:cc:9d:50:23:a0:d8:a6:13:
                    46:94:cf:cb:84:3c:b4:9b:76:1a:ba:32:9f:47:35:
                    7b:71:dd:57:bf:c2:fb:c5:fd:ea:a8:e8:9c:a1:5f:
                    b0:ce:ad:b4:92:3e:5d:35:5c:1f:54:02:ce:c2:dc:
                    91:58:7f:72:99:39:e9:b0:96:0e:3c:aa:80:2e:45:
                    2c:ef:37:02:95:72:06:af:bd:57:ee:83:cc:74:76:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F3:B3:55:33:AB:9C:67:59:26:64:98:AC:F5:86:03:E7:7C:16:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:aa:6a:f7:92:08:ea:e7:0f:58:af:76:a5:0e:b4:43:de:
         7b:27:be:99:f1:f0:cb:5b:16:63:24:2e:8d:a8:6b:1c:af:a2:
         07:0c:a6:82:60:83:d2:39:c2:40:27:44:f6:82:32:18:16:99:
         9c:65:c2:8f:e9:f3:16:84:cb:e1:44:22:e4:f8:3a:42:c4:42:
         dd:9f:79:ec:6f:31:24:17:59:45:da:51:43:cc:bb:da:f2:6c:
         94:d5:87:d8:34:f7:9a:ec:79:9e:94:68:ff:47:3d:cf:de:eb:
         dc:0c:9c:47:be:62:d7:1f:cb:de:7b:77:43:67:f9:61:57:ae:
         c3:96:b1:83:4e:cc:fe:e7:54:20:9e:41:86:3c:d8:22:3e:05:
         55:1d:ea:99:47:1a:08:a8:ae:b3:c5:d3:41:5b:48:ac:2d:07:
         bf:36:e4:d5:b6:b2:29:9f:2d:78:f9:9b:45:e5:ff:4e:5d:a9:
         68:e8:11:64:c7:06:23:a3:73:b5:75:ef:26:2c:4d:2e:44:41:
         ef:33:02:85:32:9f:70:5b:47:f9:4a:15:15:36:2f:0a:23:d2:
         52:43:9c:6f:fe:df:dc:51:79:3a:01:10:c1:d5:fa:58:8c:d9:
         62:35:bc:47:cf:c2:8c:1d:12:fc:df:c3:2f:8b:d9:3e:2c:8a:
         10:dc:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:36 2026 by rpki-client