Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/35ae4912-626c-38be-a192-e3b717b3fc6a.roa
File:                     35ae4912-626c-38be-a192-e3b717b3fc6a.roa (raw, json)
Hash identifier:          Sf629zuT9UNF65zMKLl3prCSkKTQw1y06xO0XmVuD/c=
Subject key identifier:   BA:23:5B:4C:1C:E8:64:B8:91:EA:72:14:0B:D3:BC:16:A5:72:5C:56
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC99471803C84DA517880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/35ae4912-626c-38be-a192-e3b717b3fc6a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c9:94:71:80:3c:84:da:51:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0f9e89a1-403f-4937-b000-433c85efd4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:96:77:b3:0f:51:49:0c:5e:db:15:68:ad:
                    f5:8b:1d:b3:f2:ad:7e:25:4a:f0:7b:1e:95:a7:6b:
                    a2:87:c3:ab:af:a8:bc:f7:41:cc:19:ab:39:bf:df:
                    09:b7:52:91:a7:41:8c:5a:b2:10:98:77:d5:cf:98:
                    06:0a:4b:34:37:a1:1f:6c:e6:8f:39:dc:96:f1:5b:
                    ba:3b:03:68:64:13:a7:35:2d:f4:23:1d:a4:31:97:
                    10:0e:f9:28:b6:5d:ee:5d:24:dd:9e:78:3f:a3:70:
                    87:f9:ec:92:37:2e:c1:02:2c:b3:54:bb:ba:f3:33:
                    7c:68:cb:a5:07:9c:9b:8d:70:c2:f8:50:60:89:d8:
                    dd:ba:f1:57:a3:e3:e1:01:4c:e4:fe:63:2e:84:53:
                    d3:c6:20:ed:58:7b:59:05:f9:d1:c9:97:ed:33:73:
                    a0:81:72:5a:70:56:61:fa:13:a4:b8:e5:b1:2d:b8:
                    0b:59:fa:cd:80:fe:f0:70:a3:b1:e8:99:1e:46:4f:
                    13:2d:3a:b1:ea:31:3f:a3:18:8e:a6:3f:53:81:c3:
                    87:9a:4d:45:46:19:5a:ad:db:40:69:3f:c1:d8:63:
                    32:bf:e4:bc:09:7d:a9:93:7d:67:12:74:36:86:f4:
                    54:ef:67:9c:66:9c:b4:d2:2d:d1:5e:86:8f:ff:7c:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:23:5B:4C:1C:E8:64:B8:91:EA:72:14:0B:D3:BC:16:A5:72:5C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/35ae4912-626c-38be-a192-e3b717b3fc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:84:f0:d1:3b:12:27:32:2f:f4:01:d4:6f:9b:ad:77:a9:
         dc:39:1d:87:c5:6c:cf:7c:75:55:42:34:bc:ea:9a:ea:78:eb:
         9f:02:51:d7:dd:43:80:88:39:95:c5:b8:b9:66:2f:57:fd:85:
         61:09:b9:3c:5f:cf:84:e9:d3:f9:f0:1d:8a:8f:5f:08:59:70:
         0e:e3:b3:ce:b9:0f:fa:79:b4:fa:1e:3b:0a:f6:16:1d:98:54:
         3d:7a:f9:94:b6:b6:e4:94:cb:74:70:5e:8e:a2:3f:ff:ff:23:
         1e:00:f9:02:b1:d5:e9:55:b0:b7:36:fc:43:32:0b:af:9b:e7:
         72:0f:3d:88:88:87:57:7a:b2:69:0c:3b:6f:f7:74:8e:36:ed:
         90:e4:9d:e2:33:17:95:51:30:88:06:95:05:07:55:44:e4:0d:
         63:66:73:8a:c0:82:43:77:14:f2:b7:0d:79:78:9a:4a:bc:f7:
         87:c1:9c:94:e0:09:7b:77:11:16:ba:f7:74:ea:a4:4e:b3:f2:
         d0:3b:4d:bf:43:d7:0c:e3:cf:6e:ca:c6:1f:39:33:66:05:21:
         89:11:ca:91:71:c7:e4:63:33:dc:f0:9c:dd:b2:f2:52:4e:bd:
         80:f8:db:42:54:79:a0:1c:ac:be:d7:b9:c1:60:28:71:3e:d0:
         be:51:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:30 2026 by rpki-client