Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1e83fb-d6ae-3ad8-a137-b93d53338604.roa
File:                     3a1e83fb-d6ae-3ad8-a137-b93d53338604.roa (raw, json)
Hash identifier:          HcIfsJZluJodACvvyHXNb6qkYzTdrjuGtEn9u87qimQ=
Subject key identifier:   1F:9D:7E:7F:3F:AD:9A:38:33:F3:86:9C:13:0C:43:90:50:C8:64:E5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC7ED9004F5BF0240A720
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1e83fb-d6ae-3ad8-a137-b93d53338604.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c7:ed:90:04:f5:bf:02:40:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2061f8fd-ab92-4fdf-83e3-a3802f82fa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:9f:4b:7c:e5:34:5a:10:44:10:e3:50:27:
                    e8:75:ab:dc:20:55:3c:8c:02:90:30:7d:bb:d8:34:
                    ec:72:93:ce:f3:13:fa:e8:03:b7:c4:fc:ab:3e:85:
                    5f:2f:8e:33:7f:13:29:08:a1:ec:0d:97:98:4e:33:
                    92:15:b1:31:ef:5d:81:5c:2e:c3:3c:5c:07:99:51:
                    70:28:00:28:6f:85:10:27:c4:27:6d:fc:29:01:38:
                    c1:b6:fb:df:19:8f:28:90:35:98:00:20:46:c2:17:
                    c6:7f:a8:9d:b4:01:3d:51:52:e3:a9:a8:92:bf:8c:
                    d5:e3:cf:3c:a9:d7:ed:df:61:aa:bf:a1:7e:cc:10:
                    c6:69:0c:66:3b:14:e6:1a:68:11:3c:65:2a:c3:a2:
                    8e:09:92:c8:c8:9f:f0:08:bb:b6:34:88:ce:f6:09:
                    bb:99:1a:08:41:f5:10:ec:3d:6e:26:b2:4d:e9:97:
                    89:14:25:7e:72:5f:a4:14:97:88:0d:ac:05:26:32:
                    f9:53:fd:d4:d2:ba:2a:21:97:d5:0f:31:da:04:2a:
                    f2:56:c7:f3:3b:0a:e1:a9:31:9d:13:5c:be:f1:69:
                    8b:26:74:73:50:79:b8:0a:24:66:c7:ad:fa:e2:32:
                    ec:54:20:d5:c8:23:db:f1:ba:d1:ba:f2:8c:8b:e8:
                    7a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9D:7E:7F:3F:AD:9A:38:33:F3:86:9C:13:0C:43:90:50:C8:64:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1e83fb-d6ae-3ad8-a137-b93d53338604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:92:15:ec:6c:65:5a:29:ca:0e:bf:97:5c:56:ca:e8:4a:
         22:14:42:c2:a2:4b:ba:69:e4:21:d4:d8:16:39:bd:c8:1c:b1:
         dd:4c:78:34:99:36:33:f8:ac:1b:0f:59:6a:ed:be:65:46:e5:
         e4:3a:f3:32:a0:cf:f3:28:7a:86:c4:12:c8:99:20:0c:3b:99:
         f2:f5:cc:32:3d:83:00:ae:56:e2:c2:f8:22:52:12:aa:a1:8a:
         15:4e:9d:9b:85:72:1e:82:08:62:99:1f:12:94:c3:23:5b:c2:
         42:e7:9c:c5:c0:0b:76:b5:a0:91:42:ab:aa:8d:30:fa:47:bc:
         4f:32:6b:7c:25:b8:fa:a8:c6:76:24:07:a5:d1:bb:28:61:4f:
         e9:1d:22:a4:f4:cb:63:db:49:b5:e8:8e:48:c0:70:23:74:d8:
         5c:bc:ea:84:7e:2e:4b:7b:7e:62:b3:30:10:bc:7c:26:3a:a0:
         1e:d9:f7:d9:7f:05:56:7b:ff:99:96:f9:bf:f4:ef:2e:a1:d6:
         cd:4c:2e:6a:ac:88:a7:22:b1:e3:c0:06:f0:ab:5a:bc:7a:d1:
         1a:88:12:69:75:9d:06:16:4b:5e:bd:b8:11:5a:b4:07:3d:f3:
         e4:6f:99:7f:05:d7:06:fd:7a:9d:14:be:eb:4b:0d:44:77:cc:
         58:05:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:49 2026 by rpki-client