Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa
File:                     e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa (raw, json)
Hash identifier:          bo/vNjlPceeUChZmjqH9eI2R0wNYKHnCpLIf3dRvD+g=
Subject key identifier:   0F:FA:5C:8C:25:4D:10:82:22:05:ED:C4:0B:4E:E3:CF:FF:64:F1:FF
Certificate issuer:       /CN=8753160d-30e1-48b1-afdb-394389cbcc81
Certificate serial:       010D0C9F4328584D492A46C2124925533CF11400
Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     21723
IP address blocks:        2607:fc70::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:46:c2:12:49:25:53:3c:f1:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=d8711129-dad7-4ba7-b847-cd1ae4612913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:62:70:f9:79:86:0a:3b:81:1d:b1:05:3c:
                    78:e3:77:08:6c:b2:23:1e:8a:69:1f:33:2a:0d:56:
                    90:e9:c5:c6:9e:3e:24:fa:66:e6:f8:57:be:20:5b:
                    20:fe:3e:ae:da:98:3c:d6:1e:f4:22:0e:6e:f9:c9:
                    59:54:7c:d7:ec:4c:e1:c9:03:52:5c:59:d9:11:ff:
                    ca:98:02:bc:fd:fb:a1:73:e2:6c:11:59:10:2d:52:
                    51:9f:dc:96:45:b8:78:c7:5e:76:b6:ca:ef:9c:8d:
                    82:f7:bb:0e:fc:e5:e1:3d:99:72:9e:a7:89:51:df:
                    b8:6c:49:20:15:ce:af:47:aa:23:f1:2c:61:91:e0:
                    53:01:d5:4a:8f:1e:c8:61:f7:b5:5c:ed:98:95:72:
                    13:13:e5:76:25:7a:7f:16:1e:62:3d:cd:85:58:28:
                    e1:b1:71:3c:c9:68:d3:83:4d:d5:b8:6c:ca:51:b2:
                    25:11:cb:2b:8b:2b:c2:d4:c7:85:4e:77:48:79:dd:
                    76:15:db:ab:43:e9:94:3e:53:8f:e7:dc:35:43:c5:
                    bb:5c:a8:74:cd:a2:30:b1:13:5e:6d:a2:57:4d:f2:
                    f7:21:42:6a:77:6e:7d:c7:ee:d2:b4:e9:1f:d7:e6:
                    98:60:cd:c0:6f:22:ca:4d:20:1e:bd:5d:bb:7a:38:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:5C:8C:25:4D:10:82:22:05:ED:C4:0B:4E:E3:CF:FF:64:F1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc70::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:38:0d:e3:75:6e:3e:77:e0:a5:92:35:90:10:6d:87:f0:
         37:31:3d:0d:8e:08:03:d8:3c:9d:5f:f2:d3:17:7d:65:95:1d:
         f6:03:49:08:80:ec:98:3b:f3:4e:54:db:f8:02:84:78:ea:bf:
         cc:b5:8a:1f:36:9e:bc:af:54:20:c4:f5:93:28:32:04:ac:ac:
         7a:92:b6:d6:53:44:fb:a5:62:26:87:06:cb:3c:ad:29:b0:e5:
         93:09:ba:6e:8d:3c:fc:e4:96:2f:74:58:2c:30:c0:84:28:ad:
         dc:c9:76:44:1f:70:93:66:b5:51:18:69:48:4b:42:f1:25:49:
         ae:cd:1d:49:ff:64:9f:00:10:60:81:3d:64:f4:1e:5d:1c:1b:
         ec:91:71:f7:4a:69:61:38:31:a4:ea:08:20:d8:b4:ac:7a:2f:
         5c:1f:a9:28:52:b7:26:63:8c:3b:2b:3b:77:56:de:86:06:a9:
         92:ce:ac:36:56:0f:6e:5e:a4:27:dd:03:d8:0b:3d:f2:e4:c3:
         eb:63:ed:50:ff:a3:6d:b9:a8:73:58:2c:23:f3:66:5d:27:59:
         2a:5d:b8:5f:e6:77:4e:6c:8b:bf:34:6e:58:69:75:03:c6:5c:
         e4:d0:0c:57:24:28:6b:a3:f7:a4:9e:45:19:10:2e:d2:6e:37:
         d8:11:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:44 2026 by rpki-client