Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
File:                     5aa628fb-c695-354c-b9b2-d19dd3190da8.roa (raw, json)
Hash identifier:          XawNI1uMIQwr9GEJyFRzaRfM1FiDB/MYiYa3FjFRGGk=
Subject key identifier:   A8:1B:51:F5:CD:22:96:6D:E9:95:99:1C:E0:D6:68:F8:95:1C:7C:E7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFB779FE2B5E719BBE6DE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     19115
IP address blocks:        2603:90fb::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b7:79:fe:2b:5e:71:9b:be:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=aacbd344-933d-438f-9a57-003585f0e826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:cf:76:5e:b3:fb:08:f9:48:69:9c:9f:ff:
                    33:63:48:ed:19:99:4d:90:fe:0c:4a:78:cd:4c:85:
                    a7:2c:fe:6e:d1:5f:39:bd:9d:21:ad:6e:7c:66:18:
                    30:76:c2:57:70:b6:b4:71:6b:db:35:3c:52:31:cd:
                    b6:94:48:2a:55:31:d3:9e:fe:ed:40:4d:4a:19:82:
                    16:5a:ad:86:42:20:cf:b2:d6:74:7b:b4:81:1a:30:
                    b7:8b:63:82:86:c1:a6:6c:9a:69:71:80:3c:2f:f4:
                    a7:9e:35:82:90:c8:14:b2:d5:32:dc:0f:19:f4:f9:
                    a5:50:4f:56:67:90:7b:7c:34:ca:fc:dc:00:55:c6:
                    22:8e:9a:fb:29:86:7f:74:0c:28:2c:17:82:4f:4d:
                    0b:c0:13:9c:53:33:7f:50:f7:5d:68:5a:2e:e5:6b:
                    85:2d:ce:48:aa:ce:ad:e1:e9:1e:2d:af:7e:71:04:
                    18:a0:49:c7:fc:19:71:7d:ea:14:fd:96:05:6d:68:
                    9d:7c:d0:4d:0c:56:15:1e:4c:c4:7d:4b:1e:de:74:
                    09:cc:37:33:29:d4:50:d7:be:99:f0:72:b2:d9:50:
                    2a:46:f5:12:c4:bc:9b:a5:cc:c3:6a:95:64:5d:b0:
                    7f:b1:1f:67:eb:48:fc:53:b4:4c:2d:4e:cb:1c:e9:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1B:51:F5:CD:22:96:6D:E9:95:99:1C:E0:D6:68:F8:95:1C:7C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7d:13:ed:da:30:8e:7c:8c:d2:8f:6d:91:dc:43:53:b6:d9:
         5f:ce:e0:47:1e:ab:81:2f:e9:15:18:17:69:28:eb:f1:ee:82:
         4a:85:e3:10:04:ac:67:0a:b3:e0:1f:c9:51:5d:68:3c:0b:a3:
         44:16:bf:15:a5:9f:e6:23:9b:73:1c:18:c0:2a:9e:b9:a1:66:
         a5:a1:c7:47:8f:3d:db:76:d5:0b:ab:bc:67:72:b3:7e:a6:16:
         c6:d9:b3:d2:97:63:13:4d:3e:ff:7b:6e:d6:93:83:44:9a:fe:
         e7:2e:fb:2c:df:20:74:c6:98:9c:71:4c:f3:e7:22:86:ee:b5:
         af:c8:34:5e:ed:1c:f5:2c:87:6b:cd:1e:98:4a:94:18:ab:d5:
         00:80:a5:3d:d1:60:17:f6:18:58:ed:1a:0f:c7:c2:6d:4b:ce:
         44:1b:dc:7a:4d:84:a3:13:04:af:37:2a:ac:d8:07:5e:42:57:
         0b:0d:d0:3e:77:75:d2:43:81:b9:0d:23:89:4e:4d:a7:ea:c0:
         c7:cf:57:4e:33:0c:bb:18:5d:bb:29:76:df:eb:41:b3:50:db:
         1c:64:ab:79:61:3c:77:a4:be:3b:c3:b4:29:04:f3:14:9b:07:
         82:c2:09:cc:12:09:0e:b3:49:7e:e8:de:e3:fe:bb:cb:74:48:
         9d:dd:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:25 2026 by rpki-client