Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57dcb407-8d81-3fdc-b4c5-25e4cb9bc4da.roa
File:                     57dcb407-8d81-3fdc-b4c5-25e4cb9bc4da.roa (raw, json)
Hash identifier:          jzYAWtJhO0lw1qGFTpDivD3OABdDd5aIWoOlBDyr3q8=
Subject key identifier:   1D:D8:31:B1:82:0B:AE:1D:19:A9:7E:D5:41:F2:31:07:A7:74:B1:A9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC2C95907DC1FC6B2F6A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57dcb407-8d81-3fdc-b4c5-25e4cb9bc4da.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c2:c9:59:07:dc:1f:c6:b2:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=5534a3a6-1fe1-4895-b810-3061004d0e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:b1:94:37:c5:d2:d1:f9:c8:55:98:61:3b:
                    40:65:bd:c1:4d:43:19:53:1c:4a:f0:d2:05:f4:cd:
                    ee:26:e0:0f:ba:eb:1c:42:8c:82:0a:9c:cd:7a:76:
                    03:8d:0b:ec:56:a9:25:1b:63:dd:8b:7d:10:c2:36:
                    a2:cc:d4:0a:cd:2c:07:24:bb:61:d5:14:fe:52:41:
                    48:9a:d9:9b:a9:7a:75:5f:ad:1c:27:34:62:27:0b:
                    11:6e:20:42:3d:f0:66:80:28:0c:f3:9c:81:19:88:
                    6e:82:c0:db:d8:84:6e:54:a0:a1:bb:64:e6:6c:e2:
                    f6:46:70:50:41:14:76:5a:b1:4b:d3:b7:95:00:e7:
                    a5:b2:32:f5:4d:1a:e2:0c:22:2d:46:c2:2d:d6:c1:
                    a5:ac:3d:b9:48:a0:c1:27:b4:a8:61:05:a0:25:4b:
                    e1:56:33:7d:3c:63:43:1b:c2:06:1e:fc:1d:a1:52:
                    d8:7b:f5:d2:66:ef:6b:51:92:e5:04:9d:05:83:a1:
                    70:fe:ff:af:72:21:4d:b4:c5:0d:7a:25:2e:cb:05:
                    a3:3f:6c:3a:47:69:e9:8a:37:51:4e:4e:22:9a:09:
                    3b:a3:e7:4d:a5:df:f7:56:8c:c2:ec:80:7c:4d:b6:
                    a4:34:7a:e3:b1:6d:ad:37:49:3a:bf:aa:51:e0:42:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D8:31:B1:82:0B:AE:1D:19:A9:7E:D5:41:F2:31:07:A7:74:B1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57dcb407-8d81-3fdc-b4c5-25e4cb9bc4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:49:36:40:63:4c:d6:db:f5:32:fa:4a:5d:29:a5:4c:6e:9b:
         2f:1a:dd:3c:3e:de:55:f6:9b:71:ed:70:06:f0:ca:53:f4:56:
         35:66:d9:57:c9:24:91:e2:9f:dd:77:63:eb:ed:4c:c2:bd:80:
         77:fb:0a:d8:0b:63:3a:3d:f9:df:13:dc:78:e7:3c:6e:31:d1:
         86:5b:0f:86:29:bd:ae:28:c6:0c:c8:e0:fd:93:c2:87:7f:5a:
         41:cd:29:54:c0:c9:04:8d:44:52:aa:58:a0:4b:93:f5:95:60:
         3c:2e:61:86:dc:15:70:fe:37:2f:86:e5:00:20:45:b6:5f:1a:
         23:e9:20:93:06:bf:de:52:22:96:95:fe:78:c7:33:9b:82:35:
         e4:67:6a:fd:83:29:44:1a:1c:13:21:2e:5a:08:27:c7:9c:dd:
         17:34:60:97:c0:e5:71:44:e7:3d:71:98:1f:0d:1d:60:67:e0:
         87:8f:ad:ec:53:9b:1d:98:a1:6d:da:62:c3:00:34:a9:f7:9f:
         87:cb:be:22:d7:0c:3f:f7:86:3f:40:0a:b9:91:70:8d:6c:18:
         3c:6a:fa:d9:08:75:80:63:8d:3e:df:7c:8f:aa:b6:70:9b:02:
         c8:cc:03:e4:4c:23:2a:ca:a2:6d:f4:d6:66:f1:30:29:59:41:
         9a:df:75:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:21 2026 by rpki-client