Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/b9946d59-d8ec-34d2-a5b0-e2778172690b.roa
File:                     b9946d59-d8ec-34d2-a5b0-e2778172690b.roa (raw, json)
Hash identifier:          PYlgAJHVqnRla5ZfmSbBYXB1lx3sGs01gr1vIEmyzrk=
Subject key identifier:   F7:0C:C3:80:01:64:5A:9A:D7:5E:12:99:41:54:F6:65:00:B6:C8:20
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F4328584D1F4A48434BF4ED486DAD9F00
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/b9946d59-d8ec-34d2-a5b0-e2778172690b.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2620:ac:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:48:43:4b:f4:ed:48:6d:ad:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=6f937703-27aa-4162-87ac-09666518e8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:9c:67:cd:01:7f:65:a6:02:e4:0f:9a:d1:
                    58:a0:96:2d:ac:58:20:69:ff:6c:0e:90:34:19:b2:
                    15:64:ee:4f:57:ac:99:19:0f:c6:26:50:9a:59:ab:
                    82:44:32:6a:cc:15:b7:42:78:4d:d8:62:f7:18:1e:
                    24:72:6e:04:a6:94:f5:51:47:45:a4:52:5a:5b:38:
                    ab:c3:99:e4:32:c4:a2:47:13:4a:68:f2:3b:1c:f6:
                    e2:6e:97:19:1e:20:07:06:cb:6b:0c:46:26:f5:b9:
                    37:c4:11:82:d2:70:e7:39:85:1c:cd:c6:ce:11:eb:
                    71:be:bc:0d:3c:0f:57:02:5c:4e:76:c7:f3:2a:5a:
                    9b:bf:9c:f0:46:b8:6f:39:2c:67:90:ea:53:c4:59:
                    ad:af:e6:32:6a:3f:67:0c:b0:1f:37:aa:68:56:0a:
                    79:37:93:d2:2e:53:d7:e5:17:88:1e:d7:6f:38:e3:
                    75:3d:c1:6a:30:ce:e7:54:56:c2:bf:9b:3b:63:3b:
                    ea:92:d9:70:41:a6:10:e9:ed:97:3f:95:d1:0c:7c:
                    7a:d2:49:d2:be:15:ac:56:69:ab:e0:dc:7c:d7:de:
                    41:20:1b:34:06:43:9b:a3:9d:4e:46:a7:5f:f2:33:
                    c8:4b:91:be:8d:d3:a3:6f:d2:6f:25:0e:73:60:ad:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:C3:80:01:64:5A:9A:D7:5E:12:99:41:54:F6:65:00:B6:C8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/b9946d59-d8ec-34d2-a5b0-e2778172690b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ac:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:95:a7:0e:e5:a0:78:28:f4:c3:06:37:bc:db:7f:96:69:47:
         2d:36:68:1c:e0:c8:10:34:db:74:da:8b:cb:eb:da:07:26:3f:
         d9:da:78:aa:66:95:2d:d8:3e:7a:97:cf:81:7a:a2:9a:14:a9:
         a4:06:d8:29:2b:9d:17:34:57:69:61:d3:f9:cb:fb:4a:eb:e6:
         34:f2:63:8d:83:95:b6:51:65:1d:9d:92:ca:d2:f1:38:ac:1b:
         2a:1e:f0:aa:5f:df:32:d0:4a:da:d1:da:33:69:76:42:14:b0:
         b7:86:f1:8f:b0:c6:5d:fd:7c:51:2c:e6:86:20:3a:2f:43:61:
         ad:0b:97:03:7d:d2:ea:22:19:fb:d5:74:e6:12:ef:a5:32:bc:
         2d:1b:89:88:f1:12:22:70:9f:b4:f7:90:5d:7d:c5:d4:16:93:
         e9:53:86:98:dd:82:33:6f:49:13:28:1a:05:21:fa:0d:6d:20:
         c4:ba:9e:00:5c:4a:3b:57:f7:3c:9f:ab:2b:9d:5a:14:b3:9b:
         37:c7:89:9a:f8:cb:fc:26:7d:21:57:29:1a:45:94:76:ea:0f:
         72:5d:a8:24:9d:ba:18:48:c6:93:3e:f5:47:0f:9d:5b:bb:89:
         fe:b1:d7:c0:48:ce:55:30:81:31:6c:f5:ce:92:3f:13:c6:9b:
         80:0d:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:37 2026 by rpki-client