Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
File:                     1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa (raw, json)
Hash identifier:          qnRZOhsfa+MyTzlnXNk2EFbWlvfBBJiil083C5rn5aM=
Subject key identifier:   4D:D8:8B:BB:BD:DC:AC:D0:67:0C:DD:EC:80:28:68:4A:FB:1D:1E:22
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584D4A8FBA09A70F6D4745F1F580
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        2604:ba80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:ba:09:a7:0f:6d:47:45:f1:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=8f7deed1-1851-4434-8815-ad6fffb8574c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:02:9a:ba:4a:f5:76:28:19:f7:4c:1f:b8:
                    62:02:bf:40:f3:48:c1:48:8a:ea:aa:3a:a6:c9:04:
                    ab:99:e6:84:ae:29:c3:86:a6:b4:53:f0:95:eb:86:
                    d5:a2:b3:d0:fa:ea:e1:6e:15:e6:27:a0:f2:19:fc:
                    63:ea:14:c1:9c:5a:73:44:9a:11:ab:1c:34:cd:1d:
                    9a:59:cf:fd:1f:ae:d7:c9:da:94:7b:c2:84:20:1b:
                    31:e1:2b:85:17:35:e0:91:4b:e2:4f:07:da:2e:0b:
                    58:cb:04:7d:8d:28:b3:a8:f6:4d:14:7b:a1:28:e2:
                    5f:ee:03:c3:09:d3:54:a8:ff:66:b9:ab:34:08:69:
                    6f:77:ab:ca:b2:46:ad:44:7a:87:c7:88:80:29:f9:
                    cc:4f:32:42:27:83:b4:a0:c1:35:17:6c:73:c1:56:
                    ab:95:11:79:d4:21:3e:21:52:df:99:74:a4:a5:da:
                    6f:96:34:fc:1a:e6:b9:6b:9d:62:06:1d:2c:4b:74:
                    89:d2:91:8c:08:9f:ed:a3:2b:74:67:38:b1:f7:c8:
                    b0:f3:cb:db:79:57:e6:58:36:46:2e:c8:2d:7d:bf:
                    83:f1:b6:e2:01:9b:09:df:98:0a:a1:6d:e5:c6:9a:
                    17:02:11:3e:c7:8c:ae:39:61:33:70:47:b3:54:b4:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:8B:BB:BD:DC:AC:D0:67:0C:DD:EC:80:28:68:4A:FB:1D:1E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:38:cd:c9:2c:b7:03:79:6c:ce:27:72:c3:14:4d:52:be:15:
         2b:99:63:b3:6a:53:5a:9f:55:dc:99:84:82:d7:cb:0e:75:a2:
         9b:56:60:c7:ec:1c:bc:2a:ae:10:53:72:d2:f1:38:2c:5d:b6:
         e6:26:0b:a8:5a:37:d8:d8:21:5c:29:78:a3:70:33:95:ea:6d:
         45:8c:e4:fc:c3:4c:7c:9c:25:25:c7:10:22:d1:6e:d6:da:63:
         f2:53:71:f5:99:45:86:43:2c:97:49:be:7e:fb:cd:8e:c8:47:
         d0:24:71:64:3d:04:a2:93:8d:a1:97:ad:12:81:95:e9:29:d6:
         c5:1b:24:e1:f1:d0:46:63:b0:12:7c:ef:54:ae:71:a5:8d:e8:
         a2:40:de:f9:60:87:9c:ea:33:23:73:11:4b:46:87:f6:02:de:
         5f:56:47:6b:68:1e:3a:e1:ca:df:52:1d:2b:7f:0d:05:c7:cd:
         17:ef:f3:de:57:c9:87:34:c1:bb:fa:3d:13:36:b7:eb:f2:6a:
         59:94:f6:14:73:76:19:bb:b2:d3:53:80:55:4e:c2:85:2c:33:
         12:53:be:76:fc:06:c7:55:10:bc:78:13:4e:97:e4:28:4f:4e:
         77:a3:ea:a0:d5:af:11:ae:1f:e2:84:e0:2f:1f:e1:41:99:6f:
         7a:a1:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:35 2026 by rpki-client