Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa
File:                     1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa (raw, json)
Hash identifier:          p2jAMKdyLe2fgolBl+L0tDOXP0JGpIwoNKe3SYLlwzQ=
Subject key identifier:   54:57:4F:97:A9:C1:40:27:01:29:D4:F2:8E:70:14:CA:B3:0B:A4:BB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF677DF920A43E1A78700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8088::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f6:77:df:92:0a:43:e1:a7:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=911bc364-a990-4685-9649-11f332fdaece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:a5:25:74:05:20:1f:7c:fe:87:bb:89:6d:
                    1f:7e:aa:33:58:da:f9:6c:8a:ed:40:1f:fb:0b:95:
                    6b:f0:a7:79:10:b8:15:a7:d4:07:d0:6d:19:db:c2:
                    c2:d4:01:c3:4d:c9:91:fd:cd:64:b8:8d:9e:00:7e:
                    16:08:ce:1d:41:f2:a5:8d:f4:2d:92:fb:f0:50:cb:
                    4e:20:c0:03:ea:6b:b6:ca:60:ec:2d:42:34:67:06:
                    31:b7:bd:84:29:a4:8a:fc:47:87:62:bd:e3:b5:4a:
                    96:e1:ab:8b:68:ca:bb:4e:1d:a0:47:21:81:a1:1c:
                    a3:b4:34:6b:e2:83:bb:fa:de:b5:93:ca:b8:24:15:
                    41:c9:a6:8a:57:dd:fd:ec:0d:93:fd:6b:86:3a:5b:
                    5b:40:e9:66:32:d7:ad:bb:0b:5d:8b:44:57:67:63:
                    09:bf:61:49:f8:2e:44:f0:0f:88:94:6a:c6:ec:c4:
                    98:8c:7a:39:6b:84:37:66:54:62:9e:e5:84:8f:ba:
                    a1:23:d9:15:7e:cf:ef:a1:dd:91:2a:f6:71:75:ba:
                    1d:51:89:14:3e:99:c6:92:8f:fb:d4:da:48:5f:e0:
                    95:e1:fa:8a:ae:fb:be:b9:0a:79:3d:c0:f0:22:d4:
                    13:c8:fb:f3:4e:06:61:38:f1:47:41:97:03:e6:61:
                    34:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:4F:97:A9:C1:40:27:01:29:D4:F2:8E:70:14:CA:B3:0B:A4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8088::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:23:d3:8a:e0:b5:d6:69:c9:12:0f:7e:d6:4b:33:58:80:f0:
         db:1c:70:79:49:f0:21:8a:65:19:26:df:ce:f2:fd:da:da:23:
         76:b3:03:c6:7d:11:ff:a4:a0:a3:25:ce:15:17:37:bd:dd:eb:
         a8:de:00:b9:cc:0b:53:2b:94:22:37:44:47:7a:96:27:ce:4f:
         f7:5a:f3:40:3e:3d:73:a2:35:3d:89:67:31:d9:5b:76:9c:3f:
         25:6e:b7:82:47:5b:a2:ce:ee:20:f0:6f:53:b2:eb:7f:93:d0:
         8c:95:94:0d:be:e8:3b:36:a3:f6:89:73:ff:73:38:56:f1:8b:
         a3:03:94:f3:52:7c:08:7a:9b:a1:60:ce:7f:a8:c9:5e:18:f7:
         29:73:5c:fc:d8:07:33:89:23:88:01:98:bb:d0:06:31:0d:09:
         62:05:ef:93:86:86:bc:de:5e:02:0f:3f:8d:1e:77:51:e6:3c:
         8e:89:55:57:61:ba:73:56:f8:cd:fe:16:d6:ee:c4:3c:f4:85:
         7d:53:4f:fe:95:81:6d:06:02:d3:3a:c7:c8:46:3d:43:d5:9a:
         51:1c:0b:ae:98:9f:c8:e6:e3:de:a3:13:50:eb:ce:77:5d:b2:
         3f:18:55:b1:30:9b:3f:08:2e:cb:ef:fa:11:28:fc:30:3f:3a:
         aa:6b:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:07 2026 by rpki-client