Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31713cc6-3955-3c53-acd1-f24c605b961a.roa
File:                     31713cc6-3955-3c53-acd1-f24c605b961a.roa (raw, json)
Hash identifier:          25JPuK1kcNbfUMg5lX2e4YWhMHtxI9R3Bzn518JOLj8=
Subject key identifier:   CC:5C:EC:87:14:DA:A3:80:F5:98:6A:F4:DF:1F:71:BA:01:6D:70:F0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC727B56228B9765AB100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31713cc6-3955-3c53-acd1-f24c605b961a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:806f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c7:27:b5:62:28:b9:76:5a:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=42b2a20b-cd61-4d06-972f-7b9f615012c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:bb:e3:0f:88:11:b4:74:f9:4a:9e:14:a0:
                    f6:d9:79:fd:6f:8c:6e:53:70:73:29:ad:08:67:9a:
                    63:ac:80:ae:aa:02:e5:9a:70:73:cd:bd:05:68:d3:
                    c9:2c:03:63:67:8c:dd:0f:c5:5d:52:dc:c2:62:d9:
                    e4:fe:dc:bd:62:00:d9:b8:0d:7c:0b:aa:c8:fb:d6:
                    29:15:ba:db:ca:52:58:29:f4:52:cc:75:a8:71:bf:
                    fa:02:9f:36:cd:b3:cc:c3:e7:c4:d6:fb:32:30:c4:
                    73:d6:81:5d:60:4d:eb:d5:5d:c8:f6:8d:d7:71:3f:
                    cf:ea:54:41:84:d7:ff:3a:f3:da:d7:f1:b3:d6:13:
                    84:67:05:38:ac:54:bc:ab:a6:ac:83:4f:fd:f4:47:
                    6a:e3:35:72:d1:6d:1f:79:c4:e4:0f:9d:9d:1f:8e:
                    cf:96:70:8d:8c:35:b8:13:77:77:49:bd:d3:85:e2:
                    ad:ec:22:5d:8c:9f:38:82:3c:77:28:87:80:cf:93:
                    1e:b6:92:72:4e:2c:44:15:aa:b9:8f:6b:4e:04:d8:
                    16:9a:45:55:e4:3e:df:fe:ea:f3:95:6d:9f:93:7a:
                    25:83:0b:27:fd:f1:3b:39:c9:0c:22:67:5c:e9:05:
                    b0:39:be:2d:34:be:63:f4:13:0f:22:97:12:05:0b:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5C:EC:87:14:DA:A3:80:F5:98:6A:F4:DF:1F:71:BA:01:6D:70:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31713cc6-3955-3c53-acd1-f24c605b961a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:806f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:12:31:94:fa:a9:c6:4e:c1:d7:89:3e:1d:df:d9:bd:89:98:
         de:39:7c:0f:02:f6:55:89:ef:b2:fd:27:5a:8e:26:5f:94:8b:
         b0:f3:1d:d7:16:1e:3e:32:67:ca:cf:dd:85:12:df:a2:fd:ea:
         d7:6a:27:fb:b0:7a:1d:68:90:0e:b0:f5:fa:5a:b3:ab:01:7b:
         4f:54:13:7e:cf:02:db:03:58:b0:01:08:9e:10:25:50:08:76:
         95:7d:60:18:3a:5d:2d:88:0e:9d:0d:78:11:52:89:d6:a1:2a:
         92:fe:77:3f:04:76:b8:74:ce:04:a5:25:cc:b8:59:76:e5:21:
         3d:12:be:dc:89:c6:82:ce:18:d8:20:0f:72:a0:ad:f7:9b:e0:
         65:eb:2a:e2:4f:b4:fe:1f:77:bd:5d:1b:f7:f8:7d:44:86:80:
         dd:a9:1b:4e:83:46:00:99:12:31:c3:0f:52:a6:0b:6e:45:2d:
         0e:c1:25:ff:06:fd:1d:ca:ff:33:f9:5c:6f:5c:21:dc:d7:3a:
         ce:23:6e:4f:d0:d7:f0:64:71:b6:34:2a:d8:d6:00:73:2b:24:
         da:fc:28:b1:32:99:41:5c:31:ac:f2:b5:8f:13:78:41:55:ca:
         a5:cf:ec:e1:1b:6b:f2:0f:5b:bd:fd:18:1f:5c:c6:e6:a5:6e:
         cb:66:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:03 2026 by rpki-client