Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0b0739d9-cc90-3b35-97d6-61e2a17e2038.roa
File:                     0b0739d9-cc90-3b35-97d6-61e2a17e2038.roa (raw, json)
Hash identifier:          KtMntN3AdYFvSMEZP7EjUtMjJGNjnI+LfaXvZNrsyP4=
Subject key identifier:   EC:54:15:EE:4A:2D:DB:C1:07:BF:A3:90:62:86:9D:E1:DC:45:F0:0E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D975570A1C9B257198CABA080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0b0739d9-cc90-3b35-97d6-61e2a17e2038.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     33363
IP address blocks:        2607:f098:3500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:70:a1:c9:b2:57:19:8c:ab:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=1c23aadc-9a4a-47e5-857c-ecc005255ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:5a:87:34:a3:24:ef:65:42:71:03:f2:22:
                    a0:61:3c:55:8f:e6:e4:7b:ee:7a:63:60:b6:5e:58:
                    32:a5:e0:5d:58:57:92:82:20:e3:51:42:26:5f:d8:
                    d4:b6:f8:68:34:e1:62:a4:7e:e0:ea:87:70:f7:39:
                    cb:b1:53:d5:e1:40:29:3e:6c:4f:59:93:7b:a7:ab:
                    d0:d6:54:54:a9:34:0b:30:71:f1:11:8a:b7:3e:d3:
                    ae:92:3f:1b:96:e5:67:bf:44:e9:cb:4b:f8:12:57:
                    94:43:8d:4c:50:e5:e6:b3:ee:34:21:a2:c7:9d:b5:
                    f1:83:d0:53:ce:60:ca:e7:4b:0f:65:58:a7:e5:44:
                    d4:a0:9f:fc:f1:3f:52:4d:a9:8c:08:20:ed:57:b6:
                    d0:47:7c:3b:89:9d:51:fa:64:bf:bd:4b:4d:2c:50:
                    c5:18:1b:7f:2e:b9:9b:c6:9a:87:71:27:a9:1e:39:
                    70:d5:f0:46:21:8c:74:ef:9e:80:9a:20:33:94:0c:
                    0d:5a:d3:b5:92:45:77:b3:d0:11:51:4f:41:4f:bf:
                    b9:d2:8a:6c:5b:49:28:18:db:fd:58:f1:ea:fb:e3:
                    70:88:10:93:73:e3:b3:ad:30:fe:ac:f2:be:e2:98:
                    bf:30:e8:d6:3e:4f:a9:db:2b:c4:5f:77:4e:a5:16:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:15:EE:4A:2D:DB:C1:07:BF:A3:90:62:86:9D:E1:DC:45:F0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0b0739d9-cc90-3b35-97d6-61e2a17e2038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:97:87:63:8f:bb:08:14:74:76:c3:e9:bb:66:1a:5e:b8:
         7e:b7:24:ac:86:ee:c6:d5:eb:5e:7f:9f:66:e1:13:23:5a:6d:
         f9:e3:5f:0c:0c:70:35:31:25:21:73:7b:ad:85:f7:38:43:03:
         d4:c6:45:f9:ca:8a:4d:71:0e:81:22:50:81:c2:06:ab:2e:ce:
         e8:f3:72:02:41:8b:2f:02:52:16:65:60:73:fb:63:af:03:4b:
         dc:ac:19:10:52:3a:9e:17:67:6b:8e:9d:d8:7f:7f:21:84:bb:
         c0:34:5a:44:4c:c5:5e:6a:03:4d:08:5b:6b:00:f3:ec:66:05:
         e2:34:09:8c:34:4f:9e:3d:52:a6:9a:a2:31:e4:66:e1:94:ce:
         98:57:24:e6:5d:74:5f:bb:7f:46:70:ed:c3:d7:a8:0c:ba:95:
         24:5f:32:f2:4e:e7:32:a5:b0:e9:97:d7:cf:4e:95:10:1d:d4:
         21:77:42:ca:e0:e2:6a:d8:a5:e8:ad:ce:29:d3:be:89:20:c7:
         ea:c0:2f:62:9b:dc:c2:3b:83:0a:d1:b8:2d:76:61:bf:f7:0e:
         7b:3c:88:d9:04:84:8f:0a:27:0d:a5:ed:ef:46:28:74:6b:0b:
         7a:0c:9e:65:12:81:0c:e7:a1:0e:35:a5:d3:60:47:8c:7b:f4:
         c6:a1:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:52 2026 by rpki-client