Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5144707a-8c87-37ae-9b14-452ff20c78c2.roa
File:                     5144707a-8c87-37ae-9b14-452ff20c78c2.roa (raw, json)
Hash identifier:          UV+LFSW4NyShVN9fitC/kXn+ReAEDIS/aP3n3lguNwQ=
Subject key identifier:   2F:5E:6E:BB:40:D2:F3:8B:5C:76:90:F4:33:46:AD:6D:24:73:C3:47
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC8A818D4826C24446A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5144707a-8c87-37ae-9b14-452ff20c78c2.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c8:a8:18:d4:82:6c:24:44:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=cdd6d7f7-62d7-449f-9565-6954c9ce34f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:cb:73:48:ae:3b:e9:81:2f:cc:bf:be:ed:
                    d3:26:a8:eb:09:f6:f0:ab:d0:fb:41:31:9c:8f:47:
                    d5:42:d6:87:cd:08:23:af:87:2e:d9:94:24:58:4c:
                    4a:7a:f3:28:b3:66:9b:2d:f9:ee:ee:c5:5f:c2:c6:
                    5d:fb:ff:43:ba:be:58:68:06:62:da:c5:5f:19:04:
                    ea:54:ec:9a:20:75:81:b6:3b:96:c8:58:4d:0e:76:
                    75:84:50:1d:12:1e:c3:7b:d0:54:e5:99:61:23:82:
                    f0:19:2d:03:4e:2c:d1:f6:fb:06:26:7b:fe:82:c5:
                    d6:74:07:8d:20:57:d6:8b:c4:60:53:24:b4:2d:48:
                    e4:cf:7e:32:0c:56:e3:bc:90:02:ff:b7:f7:9e:b2:
                    45:8a:99:d1:b2:96:35:13:b8:e2:fc:a1:c2:f8:93:
                    f3:84:07:db:1e:12:16:3a:ec:87:ec:74:7b:51:e6:
                    c7:e7:0e:48:55:56:f7:d7:fe:59:4b:ca:22:f5:55:
                    92:da:fa:10:93:ad:2d:97:bd:a6:7d:86:9b:d6:86:
                    03:18:e0:d8:31:83:84:ce:ce:e9:62:7c:24:f7:fa:
                    3c:26:19:28:3a:3c:0f:d0:80:4e:d0:fa:12:0c:53:
                    88:47:03:ce:fe:26:82:dd:7d:01:a3:9f:8d:9f:55:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:6E:BB:40:D2:F3:8B:5C:76:90:F4:33:46:AD:6D:24:73:C3:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5144707a-8c87-37ae-9b14-452ff20c78c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:52:aa:b8:e4:63:e4:62:ae:b0:4e:0e:e5:b6:ec:2d:bd:
         74:b5:d7:28:dc:40:cd:57:ce:af:b0:a9:79:c1:45:e4:e8:d2:
         64:61:2b:7c:7d:f5:41:e5:6b:3d:35:21:fa:d5:ea:83:df:37:
         22:b3:9d:2e:26:06:5f:26:ca:e5:55:48:3a:47:ae:b3:70:05:
         35:89:ef:b5:10:2d:64:c2:07:5b:a3:f8:06:c4:1a:e1:59:98:
         f9:11:44:59:26:a6:ae:38:5f:e7:2e:1b:92:9e:86:ba:72:31:
         3e:ed:36:9e:e6:71:57:d7:6a:af:1b:f8:68:7e:64:fd:f9:cb:
         de:3f:20:64:4b:f9:8e:3a:75:cb:6b:3d:4c:c6:c6:21:4f:33:
         ed:4c:d3:0f:73:18:e7:f4:b6:4c:42:ef:b0:01:cc:1a:ef:e4:
         00:1b:fb:6e:b7:a8:21:5f:e6:d7:2a:7c:c4:38:4d:6f:19:cb:
         c0:f1:b1:cf:69:dc:e2:18:8e:80:64:26:97:e3:b1:5f:dd:ca:
         81:1d:34:61:49:13:88:6e:25:d2:60:02:7b:33:73:92:51:d5:
         fc:58:13:b7:d3:ff:20:ec:e4:25:85:58:16:48:fa:12:de:48:
         fe:19:6f:6d:0f:c7:11:ee:c7:9d:bd:60:64:af:eb:6e:34:7d:
         aa:ef:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:46 2026 by rpki-client