Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/51734180-314d-3073-9c76-0b6e0413ab3b.roa
File:                     51734180-314d-3073-9c76-0b6e0413ab3b.roa (raw, json)
Hash identifier:          KlTrQbDPXp63nTqv1xH6ZL/9FbaqV198mvj1b9Y7/2M=
Subject key identifier:   8C:8A:B6:37:96:B2:1A:17:D4:87:03:E5:99:15:72:8C:90:BA:07:1F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF926B406192E166BC138
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/51734180-314d-3073-9c76-0b6e0413ab3b.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8159::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f9:26:b4:06:19:2e:16:6b:c1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=13a2c72c-3b9f-4987-a581-3cf234534b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:01:23:f4:3e:8d:83:6a:5a:c5:29:dd:a2:
                    78:0f:59:b0:d5:fa:16:0f:fe:41:af:03:86:0d:6d:
                    53:a6:e1:af:a5:e2:cd:1c:0b:ef:57:00:3a:7d:d4:
                    0b:82:1e:d7:13:fe:71:7a:c1:ef:8b:72:16:2c:a9:
                    e5:ba:10:48:1b:08:00:92:1a:db:ba:d4:83:b2:93:
                    bf:f0:42:46:ba:48:13:48:7c:22:ee:4b:14:c4:ea:
                    c0:0b:04:ec:db:03:73:9e:0a:e8:c9:6f:5e:7c:67:
                    6f:06:e2:b2:fb:6f:a5:b5:f2:0e:0f:62:ed:fb:f2:
                    41:5b:c5:e5:6e:a7:5a:b6:e2:06:b8:b7:f3:86:0c:
                    f7:13:52:cb:c4:f0:f0:bb:93:19:8a:10:3e:4a:ad:
                    39:35:fb:5c:37:a7:32:03:67:31:4e:6a:27:d1:ec:
                    3e:30:fb:54:df:ff:ef:84:5e:9d:32:13:87:cb:b6:
                    d2:0c:23:d2:11:06:86:d9:e2:8a:35:de:ec:11:15:
                    84:1d:a8:f5:40:ba:cc:69:4e:58:c0:0e:03:ce:b2:
                    4b:87:4d:d4:10:2a:65:c8:f4:16:d0:77:b7:ba:42:
                    ac:2a:10:4a:5a:a3:06:70:d7:0a:cd:cc:53:81:cb:
                    43:88:8a:50:9b:90:57:88:30:2f:18:f9:b9:31:78:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8A:B6:37:96:B2:1A:17:D4:87:03:E5:99:15:72:8C:90:BA:07:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/51734180-314d-3073-9c76-0b6e0413ab3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8159::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:0b:28:5f:d7:0c:3a:a6:e4:c6:79:65:d7:ca:a0:86:0b:
         70:0b:88:7b:c4:09:dc:a3:ee:ca:73:9f:dc:e2:8b:b2:3d:9e:
         3c:1f:9d:10:28:86:5c:1a:2b:71:f7:6d:95:8b:b5:4e:89:73:
         78:07:f6:0c:40:f1:84:16:cd:d7:07:e9:a7:dc:32:93:52:87:
         68:80:c3:74:df:21:34:d2:22:12:85:5a:cb:45:29:b7:86:50:
         63:ef:4f:05:9f:7c:34:7d:e8:c2:fd:ae:79:9c:ca:e4:ea:98:
         20:12:28:96:e6:5c:65:f1:a1:84:6b:1c:48:92:53:03:57:ad:
         3c:7d:45:d7:76:16:8f:95:3d:b2:ba:96:ba:7e:93:f2:7f:ee:
         9f:a0:a9:72:bc:31:60:60:60:95:53:b1:6a:54:bb:0a:bc:e9:
         60:78:b0:bc:e5:ef:41:c2:6d:3a:e4:d4:36:e6:73:59:37:6f:
         ea:97:6d:78:77:a5:03:e1:11:6a:89:37:a3:f1:45:de:37:10:
         ff:47:f4:99:18:a9:31:c8:cd:7e:5d:b1:65:74:91:91:00:28:
         46:c5:f8:25:33:12:c1:98:a7:e3:16:b4:c0:61:06:35:44:8b:
         ce:fc:49:f0:8c:3b:9e:a0:67:b5:70:a6:52:21:f8:a8:b8:bb:
         a9:20:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:24 2026 by rpki-client