Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa
File:                     38008c1c-3702-3dd3-986f-3285b2a1ad67.roa (raw, json)
Hash identifier:          2uaG2bQoDlbZ+D1jw46wA2bCx6w4DIPcDiH3/kiuQ2Y=
Subject key identifier:   D5:DF:C7:F6:A9:E7:9F:4F:44:F1:9A:E4:EA:7C:C7:78:20:66:A9:0C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF3BC01F52FBEA7890F4C
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2607:f098:50fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f3:bc:01:f5:2f:be:a7:89:0f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=e22e7827-87f6-4aeb-b3f9-b4bdea7d396a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:88:69:01:a3:1b:6d:a2:12:32:c5:48:c7:
                    fd:29:4d:33:a8:7a:c4:4d:8c:c0:d4:f3:70:8c:d8:
                    ce:cd:a6:d8:02:e2:96:ee:8b:ac:4b:8f:50:2f:0f:
                    1e:ee:5c:1a:db:65:d6:38:67:55:91:fd:a4:df:f0:
                    95:36:30:cc:65:f5:22:66:6e:a5:4d:78:81:1a:d7:
                    4a:c6:2e:77:29:98:b7:de:c1:f8:34:9a:e9:79:f9:
                    ca:3a:68:b5:26:f6:23:0b:e9:11:a0:e2:c1:6a:96:
                    af:7e:ca:fe:bd:42:bc:fc:4d:09:f4:89:e6:58:67:
                    09:c3:1a:d4:08:48:00:65:00:65:eb:f2:33:e2:d8:
                    9c:d6:6f:c5:19:77:f4:ec:27:b4:32:34:92:e4:c6:
                    0e:e9:f0:37:28:15:ad:16:2c:4b:e7:b4:50:78:34:
                    81:47:3d:9b:0a:72:fb:06:44:c0:9a:a6:f4:2c:d0:
                    25:a5:31:ba:cf:09:4d:28:ce:25:52:f4:d5:66:69:
                    a7:0a:c0:f4:7c:ef:93:0f:d8:77:dc:a3:da:fe:26:
                    56:fc:2b:e9:43:05:41:0a:1b:12:85:06:04:ed:8f:
                    6a:ba:02:3b:d8:18:e7:27:27:38:71:e6:cb:1f:37:
                    1d:bf:35:22:8d:2d:61:99:73:45:fb:ab:46:b7:da:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:C7:F6:A9:E7:9F:4F:44:F1:9A:E4:EA:7C:C7:78:20:66:A9:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:50fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:36:6b:4f:77:34:31:ad:b7:1f:5e:61:e8:0c:2f:3c:05:
         fa:85:86:f4:cd:7e:db:ee:56:f2:72:be:75:52:9e:28:d0:c3:
         72:2b:90:e8:86:2f:08:b1:85:e5:dc:8d:b4:be:de:9a:5a:ff:
         f4:48:b3:93:6a:54:4a:52:c5:de:f6:26:97:69:77:a9:6d:87:
         b3:e4:84:00:cf:74:eb:2a:01:fe:51:db:30:0a:ca:62:af:41:
         7b:dd:69:cc:8b:5e:b9:7c:fc:09:7d:10:70:c6:be:6a:dc:63:
         b5:31:36:96:f5:33:4b:b6:15:b1:fe:e3:cd:14:e9:be:24:60:
         6b:a0:fb:e0:ac:f7:b5:f1:5b:a3:51:34:8e:10:01:01:13:94:
         b6:b6:3e:e8:74:a9:70:f3:71:00:58:61:0d:1d:e0:90:1a:43:
         c9:6a:9b:f9:e8:3c:f7:ba:96:50:0d:07:c9:5b:6e:01:ee:88:
         0d:76:71:b5:54:3b:c1:c7:5c:f0:a9:4c:77:10:df:6b:2a:37:
         f1:92:27:08:e6:65:ab:e0:5f:66:fa:b2:0f:01:bd:0d:a5:6d:
         57:f0:3d:ec:00:78:90:c8:b0:64:ce:56:14:0d:44:f5:60:79:
         2a:a6:4e:44:93:d3:26:0b:5e:b5:3b:3b:83:5d:95:ad:b4:4b:
         d8:89:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:52 2026 by rpki-client