Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa
File:                     bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa (raw, json)
Hash identifier:          AmlPfX+yT5bSp4MZsBLkKed9kumIGJzMUQW6mEJiLiM=
Subject key identifier:   CD:60:7E:B1:18:B0:26:7E:57:07:9C:E3:1F:DD:D4:86:38:0E:D9:9C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA8C187A9025D4224ED380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     12271
IP address blocks:        2604:2000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:8c:18:7a:90:25:d4:22:4e:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=65d51cae-9e3b-4244-9634-35080d427209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:fe:9c:ac:6f:11:29:eb:b1:2f:e7:0a:54:
                    cb:4a:ac:eb:11:ff:f2:52:a5:21:aa:b1:53:12:db:
                    26:66:18:90:09:16:fa:e0:4a:1c:f3:32:37:05:91:
                    88:50:e7:97:ec:43:bd:4b:61:68:a5:9e:6d:6d:99:
                    ad:8d:76:6c:14:ef:fa:2e:00:28:2e:54:1b:91:8e:
                    1a:58:78:4f:f0:62:17:fb:bf:a2:a3:07:83:79:23:
                    35:49:86:88:57:eb:95:e5:ad:ee:d6:24:b9:18:72:
                    50:be:59:29:46:d2:ba:99:d6:d9:da:01:b6:9d:55:
                    84:4e:c0:49:ff:02:00:06:aa:e7:ed:57:bc:ec:5d:
                    5d:19:50:1e:7a:4f:31:9c:28:1c:27:10:a8:58:b0:
                    1b:8c:b4:4f:70:93:1f:d8:d0:48:b5:28:16:72:8b:
                    92:66:d0:8b:59:69:f2:9f:06:f2:cc:2a:21:1d:c3:
                    b0:e7:04:ed:6c:92:6a:c4:80:c7:2f:16:05:e9:8a:
                    e2:f2:90:c3:3a:06:b0:5d:4c:59:ae:0a:d6:f4:95:
                    79:4b:1d:93:a2:ff:8e:72:4b:64:7d:23:b9:c1:0c:
                    2f:34:0a:38:58:87:aa:65:ac:3c:38:73:83:80:dd:
                    6e:f2:ba:24:48:7c:0d:1a:88:88:12:2e:bd:b6:02:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:60:7E:B1:18:B0:26:7E:57:07:9C:E3:1F:DD:D4:86:38:0E:D9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:a2:c4:af:1e:18:9d:c7:5b:fe:5c:fb:1e:6d:6d:9a:3b:
         09:a4:7a:00:f2:14:89:fa:6e:a9:b0:a4:ac:dc:df:03:8a:20:
         c2:d4:23:da:50:64:53:47:e2:e8:23:37:e3:63:ca:9e:d4:86:
         34:85:df:e1:a4:04:dd:3d:bd:be:94:36:b1:7b:4a:01:98:1f:
         5f:a8:a8:30:6e:01:2a:2c:74:f1:a2:a6:56:e1:a8:cd:6b:42:
         ed:bc:a6:01:bd:ab:07:90:d7:62:98:eb:97:ae:ab:de:97:84:
         f0:8a:70:39:3b:99:c3:ea:c2:d2:6c:de:0f:f6:47:dc:07:1b:
         8e:5e:50:56:0f:d1:1e:93:7a:85:24:f2:e7:de:53:7a:a8:01:
         46:fc:b9:dc:97:c1:4f:f6:4f:29:ba:7d:10:e5:40:19:f7:00:
         b3:b7:36:74:36:eb:ee:b1:90:b2:4a:57:f3:23:e1:3a:85:f3:
         fb:0a:4c:65:d7:55:40:09:39:44:6d:c6:55:e3:99:4d:bf:a4:
         9e:e4:ee:49:6a:de:05:3f:d4:3b:ec:bd:57:d7:c6:07:0a:6a:
         e3:c0:46:09:d6:87:84:70:60:a1:2b:22:0c:2d:28:91:56:e6:
         5e:94:36:67:da:b5:6b:66:d9:b8:39:55:cf:81:8f:eb:93:20:
         d3:1f:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:28 2026 by rpki-client