Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09a1217d-f368-394b-9070-eae21f9c775e.roa
File:                     09a1217d-f368-394b-9070-eae21f9c775e.roa (raw, json)
Hash identifier:          gQ3DUcbg6Nv+4oLMLGvV9mY49WNuk35A9YofXtxOE+w=
Subject key identifier:   7E:A9:65:DD:7A:D9:F7:95:C2:6C:11:1E:6E:07:36:8B:38:42:1C:E1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFF7ED9D98072AF5801C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09a1217d-f368-394b-9070-eae21f9c775e.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:87c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ff:7e:d9:d9:80:72:af:58:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=769d30da-1b33-4b99-9c26-58722f8c69af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:5a:fb:70:4c:3b:2d:70:1d:fa:44:55:ef:
                    53:84:91:30:83:42:51:08:85:b5:18:d5:d3:20:f2:
                    e7:23:f4:7e:e9:12:36:e4:1e:bf:b6:80:0b:64:af:
                    ea:98:8c:b5:14:cc:2b:d9:53:95:5e:15:4f:42:47:
                    94:73:51:59:6d:22:6c:75:2b:d3:03:36:c0:98:9f:
                    38:5a:cf:ca:1a:b1:78:28:97:99:b1:b7:87:b6:47:
                    eb:9e:4b:16:02:8b:0b:ef:b1:a2:24:51:5f:ba:21:
                    69:e9:24:e5:35:f2:77:01:58:61:0d:5d:2d:2e:ad:
                    a1:d0:6b:bd:ea:f8:4d:99:e0:b9:3b:c5:b3:b9:50:
                    8c:9d:64:1d:5c:95:38:df:b5:d3:35:2d:07:62:38:
                    89:71:e5:62:46:2c:4a:d8:d7:0c:e5:c1:9c:d4:c6:
                    db:34:3d:b1:02:37:a2:0e:dc:62:86:5e:6a:0a:1f:
                    60:32:fa:04:32:fb:20:9e:ef:b0:b1:03:7a:d7:95:
                    c8:9b:5e:40:fd:61:bd:a4:b8:69:53:05:16:e0:ca:
                    66:e9:56:01:42:af:2e:86:12:b2:2e:7c:ac:87:c9:
                    b3:bd:c4:c7:d1:ad:5f:e3:30:f2:84:71:57:a6:aa:
                    07:65:1a:74:1f:65:d7:51:39:5e:2a:45:7e:cc:a0:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:65:DD:7A:D9:F7:95:C2:6C:11:1E:6E:07:36:8B:38:42:1C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09a1217d-f368-394b-9070-eae21f9c775e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:87c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:c3:f3:fa:32:5c:06:72:08:22:63:2a:ef:99:e7:87:c4:
         94:e8:e2:02:db:47:dc:21:17:5f:22:80:43:e8:f6:b1:c8:ad:
         bd:a2:63:bc:3b:b1:90:b1:33:ba:a9:ef:95:76:d7:89:d6:7d:
         fc:e6:3d:6d:cc:34:a7:58:58:6e:7c:58:0e:1a:55:cd:44:ef:
         3b:e4:ac:45:a0:a2:16:a1:eb:7b:6f:e1:6b:43:15:a0:5e:d1:
         20:e4:1c:76:8e:16:66:b0:2e:dd:ea:7e:12:6f:73:95:d6:5a:
         78:94:9c:03:b6:4c:a8:61:46:3d:5b:ae:08:62:a1:38:30:ab:
         64:ee:a3:7c:3f:d9:ce:4d:dc:c6:c3:32:28:7b:4e:a9:9c:bb:
         d8:22:60:a3:55:85:b1:db:67:a0:d7:76:de:f5:d7:ba:b2:4c:
         18:9f:ed:e2:51:b1:87:e6:bd:dd:c7:b0:cf:5d:55:30:f6:a2:
         4f:02:30:78:ea:b4:55:f1:f3:49:5c:fc:2c:09:18:65:cb:1d:
         f9:62:0c:65:ff:58:3b:c8:a1:aa:a2:fb:d2:28:a2:8d:61:20:
         23:1e:5f:d9:24:25:1d:4c:ee:96:2b:39:33:f1:c7:86:8a:af:
         bc:74:50:55:f8:17:ad:88:ab:d0:34:0c:7c:64:9e:32:75:a1:
         ab:5e:6f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:14 2026 by rpki-client