Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/33b49a1e-712d-3f29-b195-b988e2f8f964.roa
File:                     33b49a1e-712d-3f29-b195-b988e2f8f964.roa (raw, json)
Hash identifier:          jVAmMyhGNLPEiw6avcWjvNRIH92yID9/Trxjpm3gp08=
Subject key identifier:   DD:67:5D:60:E4:C0:BD:80:71:84:F5:7E:BE:88:8F:25:6B:F8:DE:CF
Certificate issuer:       /CN=5fca320f-a628-49d3-afa7-8717a0ad5699
Certificate serial:       010D0C9F4328584D2E4A19AD3AFAB4671C76DE00
Authority key identifier: 56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/33b49a1e-712d-3f29-b195-b988e2f8f964.roa
Signing time:             Sun 15 Mar 2026 21:58:04 +0000
ROA not before:           Sun 15 Mar 2026 21:58:04 +0000
ROA not after:            Sat 13 Jun 2026 21:58:04 +0000
asID:                     33425
IP address blocks:        2607:240::/28 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2e:4a:19:ad:3a:fa:b4:67:1c:76:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fca320f-a628-49d3-afa7-8717a0ad5699
        Validity
            Not Before: Mar 15 21:58:04 2026 GMT
            Not After : Jun 13 21:58:04 2026 GMT
        Subject: CN=8aa8eddc-4663-48fc-8483-521dcd61fbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:aa:58:b5:26:58:a2:cb:9d:d2:82:b0:9f:
                    d5:6f:cf:fb:5b:e8:06:01:49:49:01:22:2b:cd:17:
                    78:ef:7c:31:cf:71:d0:70:42:50:e0:0a:e9:d8:a9:
                    ea:21:4a:46:23:b9:67:7c:e6:16:f4:d1:f3:0f:8b:
                    2b:cd:10:48:e3:3e:93:33:03:28:7b:49:b0:0d:d8:
                    40:d6:db:79:36:0e:20:82:3f:24:0a:37:1e:03:2e:
                    81:f5:1d:7a:c3:1f:78:01:19:ee:4c:01:ee:58:36:
                    c4:2f:bd:94:c8:a5:10:55:f0:ed:a6:34:31:60:fb:
                    a6:26:7d:97:de:8e:f0:7a:79:22:50:3a:6c:d6:f0:
                    29:7a:86:b7:c7:c9:92:fd:19:63:b0:a3:ad:2d:8e:
                    3a:9a:4a:32:ac:5c:43:17:7d:c1:99:1a:98:01:c9:
                    e3:a4:81:6b:3b:f5:0e:41:0a:ad:d3:d6:ae:9f:c9:
                    91:03:86:0a:bb:4b:45:50:ec:30:f9:da:25:f5:89:
                    a9:56:45:ce:15:af:51:42:fa:2d:3f:4c:9c:8a:62:
                    28:f9:a2:56:51:7e:19:c9:2b:18:0d:9f:10:8e:16:
                    32:17:82:ff:52:6b:38:f6:4a:22:0e:69:f3:03:30:
                    21:ac:64:a8:f7:7d:ac:f6:d8:76:11:5e:80:e7:15:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:67:5D:60:E4:C0:BD:80:71:84:F5:7E:BE:88:8F:25:6B:F8:DE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/33b49a1e-712d-3f29-b195-b988e2f8f964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl

            X509v3 Authority Key Identifier:
                keyid:56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f3:af:3a:ed:b7:2c:b6:71:12:89:75:a4:45:94:59:93:ea:
         fa:a3:70:02:44:64:70:e3:af:4a:9b:82:69:dc:75:31:bd:69:
         3e:12:47:5c:80:bf:63:ca:fc:f4:90:42:6c:60:7f:04:76:47:
         cd:91:f5:56:e1:06:87:56:c0:9d:17:1f:72:2c:cc:9f:12:d1:
         06:b5:3c:3f:3a:59:33:0c:85:e5:f2:de:f4:fb:56:71:9b:58:
         58:16:0c:e2:08:7a:7e:41:94:5f:53:b9:9d:6e:44:c1:6a:c4:
         e1:78:53:d2:fd:ff:af:d8:df:b3:cb:74:d0:e4:21:dc:d0:8e:
         3f:2b:c7:d1:3e:35:49:49:bb:3a:19:24:33:99:42:41:fe:28:
         30:0d:44:4c:a8:b8:0c:90:b5:13:ab:34:11:dc:c6:f5:e0:a4:
         6b:4e:b2:c2:cd:96:1c:91:a7:a5:0d:4d:26:8f:73:f5:d1:3d:
         f3:c0:a0:b2:65:0a:48:c0:ec:f8:7e:6a:8f:3a:2f:9b:9c:ed:
         73:9a:24:a7:62:da:2a:13:43:f3:76:13:5c:b8:dc:2b:68:a6:
         2a:e7:b6:29:02:87:af:df:d0:04:16:4e:9e:ab:0d:d9:ce:fd:
         57:2c:7d:81:dd:a3:f1:23:3d:e4:2c:c1:79:03:b8:66:74:b6:
         ff:9e:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:42 2026 by rpki-client