Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02e90b90-ba05-308d-a524-04c1e7546a46.roa
File:                     02e90b90-ba05-308d-a524-04c1e7546a46.roa (raw, json)
Hash identifier:          lYbFEwFnBE2v1UdpEEuXKq7IyzGqA3KaclBg0nqYyPo=
Subject key identifier:   D3:90:F3:94:1F:A2:84:FB:67:F4:7D:32:81:09:E0:B6:45:F8:17:E9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFE131EC5F2AB1ED6D100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02e90b90-ba05-308d-a524-04c1e7546a46.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:812a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:fe:13:1e:c5:f2:ab:1e:d6:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0618809a-ed23-4cef-b7bc-428c6b42a0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:64:c4:00:6d:27:40:42:2b:92:75:e0:4b:
                    3d:9e:9e:2e:0d:6f:8c:c8:3a:33:7c:3d:b3:99:8e:
                    1e:a2:6b:bd:8e:4e:d0:68:c7:27:8e:c2:cf:1c:64:
                    64:b8:9e:9c:04:70:52:c2:00:40:9b:19:03:46:46:
                    df:8d:8c:7d:7a:38:1d:2d:84:72:ae:73:c8:f6:0e:
                    97:1b:2e:63:64:87:bf:20:33:c3:3c:ec:d9:34:54:
                    73:a0:b3:5b:16:fb:5c:a0:ed:68:9c:4a:84:1a:56:
                    5b:24:a2:e8:6c:a9:c1:82:ce:47:e6:08:db:b5:aa:
                    ea:b3:49:a6:f4:d6:b3:8f:18:dc:35:b2:dc:1c:da:
                    0a:c8:a4:a5:3e:10:9f:6e:43:66:c0:0a:e8:fe:25:
                    c0:ee:78:ca:a6:1e:17:19:29:d1:33:06:8f:de:71:
                    eb:dd:a7:45:bf:55:f7:04:6c:bf:6e:27:87:65:6f:
                    09:00:8f:56:3d:77:ec:09:c3:89:c8:b7:51:40:af:
                    b6:05:4d:ba:ce:92:4d:85:09:57:3c:83:e8:2a:7b:
                    c8:60:23:7e:0a:b0:d4:24:97:ab:da:ca:70:52:16:
                    fb:c0:8a:a8:eb:a6:5a:af:8f:5e:f3:8a:04:af:25:
                    65:c0:67:48:d5:4e:bf:ee:36:2a:d6:86:b6:91:00:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:90:F3:94:1F:A2:84:FB:67:F4:7D:32:81:09:E0:B6:45:F8:17:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02e90b90-ba05-308d-a524-04c1e7546a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:812a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:34:a1:46:d1:85:99:11:98:1e:95:d5:1d:ba:1d:d6:de:c5:
         6d:eb:26:1f:cc:1b:15:4a:eb:6c:b3:04:75:d6:72:dc:b3:b5:
         1c:ef:d4:32:e1:14:e8:e5:9c:16:9e:d9:54:47:74:21:38:63:
         87:92:35:df:ef:bb:67:12:8d:0b:02:18:d7:b2:5f:91:44:f7:
         ed:5e:45:39:47:71:39:33:08:4a:e2:4d:93:09:35:7f:07:f5:
         ba:66:dd:fe:a5:de:69:1b:97:8a:b5:d9:be:5a:d0:bb:12:0f:
         63:f1:e0:ae:66:13:50:4f:ef:6d:5b:c1:7c:ad:8f:0c:69:8d:
         4b:b8:93:5b:ad:24:fe:e0:d8:d7:7d:81:38:08:f2:a3:df:bf:
         63:90:d5:42:1c:ed:50:37:3f:82:91:07:82:c0:9b:d8:4f:31:
         61:77:84:3c:39:ad:c4:cc:d9:bd:f6:85:7e:d0:30:5d:be:da:
         ab:73:49:e0:76:51:8b:a8:0b:4d:ec:b1:e4:bd:a6:08:21:0f:
         96:12:46:fd:fb:da:16:45:99:e8:f3:88:ba:08:73:38:1c:5c:
         db:00:99:51:5a:89:01:86:de:60:d6:74:ce:f1:4c:c0:a4:d5:
         b0:73:17:89:17:c6:34:cd:57:b3:80:f7:a8:de:57:8a:b6:3c:
         b2:b5:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:08 2026 by rpki-client