Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa
File:                     fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa (raw, json)
Hash identifier:          1GSDhhtnjTGxWeT4mdR647Jy/d9zhDbxYdN/LUWxCms=
Subject key identifier:   1B:8A:3D:5B:B6:FE:9B:D7:D3:38:9E:EE:D8:71:03:38:52:F7:D3:38
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584D1F4A1230336B745619417380
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     54702
IP address blocks:        2620:130:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:12:30:33:6b:74:56:19:41:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=c29b5d29-8dce-45f6-a45d-8ccfe31a1204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:78:ec:f1:b8:f2:32:5d:6e:26:9d:d4:f2:
                    01:6c:66:a0:0e:1d:1c:75:5f:6d:8d:55:4a:59:4c:
                    49:93:01:e3:0a:2d:31:53:3c:fc:ff:e2:08:d9:97:
                    d9:5b:ee:6d:35:47:8f:e3:67:85:36:a2:93:55:d3:
                    f2:f2:73:2f:cb:d8:f5:b0:16:0b:e3:16:e1:8b:f3:
                    29:9c:bd:6a:c6:c9:42:20:20:7b:c1:15:52:6a:43:
                    a1:f0:8b:2f:b3:68:2e:81:e9:1d:25:91:5b:d9:65:
                    a5:4e:1b:49:c4:c3:fd:a5:37:d6:2c:ae:e1:ae:1d:
                    18:42:67:08:bb:7f:ca:30:2d:e6:59:65:a6:0e:36:
                    e4:1f:c4:46:59:16:68:30:1c:ab:8f:53:67:7a:ba:
                    90:2e:9d:d2:96:85:49:f4:7b:3c:a8:04:a4:c4:c7:
                    a5:f9:ea:e6:4a:94:35:db:6e:cc:ed:7b:cb:15:e3:
                    7d:0f:11:fe:3d:1d:68:4e:81:2b:01:44:fe:1c:b3:
                    c1:94:59:e9:7d:af:5b:fd:af:96:fb:e9:fc:64:5e:
                    81:b3:1b:a1:0a:10:3d:6f:5e:c2:70:8c:19:d9:bd:
                    7a:7e:1b:91:e3:ca:a1:84:25:b2:4f:61:fb:d2:f5:
                    8a:21:df:3d:ca:23:db:3c:ac:dc:42:4e:a0:ba:36:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8A:3D:5B:B6:FE:9B:D7:D3:38:9E:EE:D8:71:03:38:52:F7:D3:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:130:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:cf:be:9b:34:aa:bc:01:ed:9a:18:d6:e5:c1:b2:60:52:3a:
         ea:3b:37:d1:6c:82:a2:87:70:ac:9c:09:d0:ff:35:a2:62:f7:
         6f:7b:aa:57:7c:73:27:af:22:2f:5b:60:a4:b1:5d:2b:2d:5f:
         75:42:52:fb:a7:23:0e:0c:85:ad:81:9a:d8:1f:c3:0c:aa:eb:
         31:47:a0:28:95:51:b6:7e:a1:7d:83:ed:20:d3:c6:03:1b:18:
         4c:84:69:9c:ca:18:ad:c6:c3:f8:6c:cd:a6:8d:96:49:7d:7b:
         a8:8a:c5:53:b7:12:33:f2:ee:d0:ba:62:92:ba:f4:92:76:14:
         d5:15:21:23:a5:eb:77:d5:36:95:60:90:86:6d:87:00:ac:ce:
         01:cc:08:b0:73:6b:dc:e9:a2:52:df:df:75:74:16:65:23:36:
         67:6c:80:74:e2:1c:5f:3e:3f:0e:cb:8d:03:34:cf:04:64:e8:
         c4:80:7a:e0:bd:bc:ee:4f:f1:91:a4:b0:04:91:1f:73:47:1c:
         0b:0d:c2:67:a4:0a:f0:52:e8:af:d5:07:3f:06:f0:2e:11:b6:
         c3:4d:e9:22:0f:4a:df:56:21:e7:7f:71:cc:bb:8f:42:c5:10:
         2a:97:19:48:64:d7:ca:cb:67:7e:00:74:11:e8:64:0c:f0:02:
         27:e2:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:36:44 2026 by rpki-client