Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/403b9562-fc79-3b73-8762-918781c0f8dd.roa
File:                     403b9562-fc79-3b73-8762-918781c0f8dd.roa (raw, json)
Hash identifier:          sXixkvQerfN5pSwJfQPG7As+duhFToddy4YKv98wy+o=
Subject key identifier:   31:C1:43:0A:2B:0A:C3:AE:1F:E5:87:29:89:3D:13:93:34:DF:DF:F2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF53C676846353B702680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/403b9562-fc79-3b73-8762-918781c0f8dd.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8033::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f5:3c:67:68:46:35:3b:70:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=c63f42bb-7a3d-4e9c-b5e0-ad7e41da81c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:6f:ac:c4:41:bd:0c:f8:f4:a4:89:66:38:
                    60:1d:21:9e:0b:02:37:9d:32:4d:24:85:c9:6f:47:
                    b3:3f:ea:03:82:11:04:93:9f:4b:4c:b5:5d:a9:a1:
                    a1:03:c1:f0:c6:10:5c:d5:33:86:39:0b:7d:1c:ec:
                    71:1a:4c:e4:df:53:cf:52:a4:c9:d3:b9:43:de:72:
                    06:4b:82:44:9e:46:f6:88:fe:0a:5a:f2:f7:46:fb:
                    19:a7:84:2b:73:92:3e:4e:1d:84:01:09:2d:3a:6e:
                    a8:75:ef:dd:d8:26:8f:5c:67:2b:cf:df:31:4d:c2:
                    2b:ef:99:f8:d6:f2:a8:6f:27:0d:f9:df:2d:d5:93:
                    5d:9e:d5:3b:e0:d9:35:98:61:fc:e8:e2:a0:26:9b:
                    84:c1:64:29:6c:dc:03:50:46:00:41:92:d8:aa:88:
                    83:36:06:86:d8:5f:e5:13:53:58:33:21:79:30:74:
                    b3:f7:f3:cd:50:d9:93:2c:9f:29:35:12:85:6f:d9:
                    66:c0:40:23:20:f8:bd:8d:bd:c4:3d:70:c0:7b:f6:
                    45:dc:04:95:37:57:8d:b7:1f:97:0b:df:b6:2f:5a:
                    8b:82:97:31:9b:38:4e:d7:82:fb:2f:b3:0b:50:b4:
                    56:e0:8b:5f:65:e3:0d:2b:d9:e1:6f:7f:77:3a:33:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:43:0A:2B:0A:C3:AE:1F:E5:87:29:89:3D:13:93:34:DF:DF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/403b9562-fc79-3b73-8762-918781c0f8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8033::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:6d:b0:cf:ab:e3:3f:90:df:5e:b6:cb:77:72:91:37:d4:
         5d:75:81:8a:7f:09:53:64:8c:28:18:8b:50:9c:38:ac:6f:df:
         a4:17:e3:ed:6e:08:91:d6:48:94:b6:57:b6:ba:7b:67:a7:85:
         3a:5e:52:b6:ff:e9:36:32:83:43:7a:28:a9:80:ea:2a:ad:b3:
         d1:39:2c:6c:fd:9f:a7:23:45:62:b2:69:59:ba:29:75:1d:ff:
         81:d0:99:90:d6:c2:fe:db:4d:bd:ee:c4:7a:3a:bc:16:1f:a2:
         7a:ad:93:9b:10:bb:09:a9:88:6c:b0:83:0e:29:5b:1e:03:30:
         94:cb:0d:01:75:88:0c:22:d9:1f:d7:49:68:ad:56:88:ba:42:
         87:d3:4c:cb:3d:27:78:ad:11:aa:be:1e:1c:ac:d0:92:2c:e6:
         f4:2c:54:e6:19:f9:9b:3e:53:52:ba:a6:01:e8:9d:6e:3f:5e:
         a9:c4:90:50:12:c5:7e:ad:ee:74:2d:4d:5d:52:90:82:5f:49:
         a6:65:71:80:ad:86:5a:1f:0e:a0:d6:80:c3:ed:c9:4a:c1:02:
         7e:09:e7:50:8c:fe:eb:23:17:30:ad:97:e5:95:e2:84:da:eb:
         ca:36:47:26:27:2a:1c:99:2e:5a:8d:0b:ab:7d:a1:04:b2:7d:
         ac:75:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:54 2026 by rpki-client