Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa
File:                     c665f46b-83a0-3159-8392-368a8eda0dad.roa (raw, json)
Hash identifier:          r4/T/ljul9ryUxLAUzwx2ZlBt2gL2PwfVKgz71MOCV4=
Subject key identifier:   3B:1E:ED:07:E9:39:26:72:37:19:26:71:6D:B5:47:5B:E5:52:70:22
Certificate issuer:       /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
Certificate serial:       010D0C9F4328584D98BAAD0E35FA28D0FD76D600
Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     46757
IP address blocks:        2620:123:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:ad:0e:35:fa:28:d0:fd:76:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=76222f49-cde6-4a7b-bd0e-48be6eba9a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8a:ab:4e:7c:2e:8d:90:f0:9a:47:33:9a:42:
                    f6:14:6e:80:d3:f1:97:f0:74:25:70:e1:98:0f:37:
                    36:f6:d3:ad:c5:1b:c8:5a:ce:ba:0c:cd:29:50:7c:
                    14:fd:c5:36:68:f0:d0:94:bc:31:f2:7b:06:19:c8:
                    60:1a:86:3a:8f:0b:9f:37:a1:66:aa:18:fd:e4:32:
                    ea:7c:43:59:ee:6b:2f:23:1b:7e:fa:06:e3:c0:98:
                    4e:7a:2d:0b:60:6f:69:91:9c:53:1c:6f:33:e7:eb:
                    e5:01:42:0e:bc:ea:bf:3d:0c:ab:71:d8:33:f7:93:
                    1e:16:72:6b:47:e3:fd:12:f5:00:fb:cb:ce:0a:a1:
                    65:74:ac:ae:4b:bf:45:88:c3:68:c4:3b:42:e7:7a:
                    e4:cc:e2:6d:75:5f:a0:59:3e:9f:dc:f9:1f:f8:72:
                    40:64:c0:f5:4e:29:c3:11:1d:7b:68:dc:d3:40:2f:
                    da:6b:f6:11:95:8c:ce:d2:4b:d0:5b:fa:41:94:d5:
                    e6:c1:88:6d:a1:ba:ff:44:85:29:41:b3:f5:ac:8a:
                    94:18:e1:54:37:dd:6d:79:4c:29:fc:1c:17:b5:54:
                    32:19:87:d3:0a:c8:1e:9a:b2:5a:dd:e6:5c:47:01:
                    e7:6f:10:23:b0:20:66:b5:aa:61:28:43:31:59:5b:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1E:ED:07:E9:39:26:72:37:19:26:71:6D:B5:47:5B:E5:52:70:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl

            X509v3 Authority Key Identifier:
                keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7d:a5:58:85:8d:8d:eb:b3:a8:b0:80:e9:82:55:2f:48:a4:
         c1:c2:57:c5:e2:cb:be:8f:69:e2:ff:fd:5f:e2:a5:53:46:b3:
         ac:68:48:ec:47:3a:b3:ac:95:17:52:b5:d7:91:7c:ea:93:d4:
         d6:4f:c6:2b:fe:e2:e5:4c:c8:32:dc:39:64:d6:ec:6e:97:aa:
         a4:0a:fc:1d:7e:c9:8c:01:ac:a8:56:02:e7:c6:16:1d:66:f1:
         a1:c3:d1:6c:67:af:d3:0a:ee:ad:5f:71:a0:68:0a:bd:78:0a:
         b0:fa:91:42:89:31:d2:0c:61:b5:b7:94:49:86:3e:7f:06:e5:
         39:38:dd:fc:34:6c:04:80:36:44:09:83:70:b0:ef:a6:81:6e:
         66:25:f5:d4:77:d8:d4:2d:af:d1:bb:07:e4:98:a7:36:87:db:
         4f:21:96:b8:19:bd:10:15:3b:16:73:16:fe:09:52:4c:09:66:
         18:c7:64:08:29:8f:a9:62:84:a0:03:67:4d:6a:95:76:84:2f:
         17:11:85:cd:cc:e6:a8:83:f6:5c:72:f6:fb:4d:5f:71:5c:df:
         eb:bc:46:75:f2:17:83:e6:3a:7c:36:d5:d1:51:03:9d:6a:66:
         74:7e:df:0c:96:c4:8a:f6:61:ff:b7:a8:b4:b9:2f:25:b3:d5:
         56:24:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:19 2026 by rpki-client