Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa
File:                     65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa (raw, json)
Hash identifier:          M0/lUHyMrSYRuCAoWy0/+fMH/ZVog4PrGRd6f8Hb3vE=
Subject key identifier:   E1:EB:6F:F6:0C:C5:52:4D:E6:C2:53:3F:91:09:AB:57:4B:1C:28:2B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D44FA3C730D4033F1F22ED980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     10796
IP address blocks:        2603:90b8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3c:73:0d:40:33:f1:f2:2e:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=3541e927-668b-4753-bc52-21b0074820d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:bb:15:9a:4f:2b:d7:61:8b:cf:5d:dc:82:
                    e0:dd:dd:d8:20:d8:8a:2f:89:6c:f7:b1:10:fb:04:
                    2c:0e:81:81:18:92:68:15:98:55:67:41:11:47:bd:
                    24:4f:ab:c7:91:c8:d2:fc:29:b1:15:e4:e9:57:9a:
                    64:4b:5e:fb:ac:66:17:6a:ab:d7:d3:50:c5:43:5f:
                    1e:36:b4:12:c4:84:b0:ce:8b:4b:b3:43:e4:a1:51:
                    ff:b1:be:da:a1:f7:30:c9:56:ab:bf:ff:5c:12:08:
                    4c:70:59:7b:41:9b:5d:47:ea:aa:22:3e:dd:52:56:
                    7c:f9:70:0a:fc:0e:29:fb:7d:48:05:cc:d6:e6:46:
                    a5:ba:9d:6c:cf:4a:2e:28:0c:0b:f0:95:d0:a6:0c:
                    69:bd:59:2e:d1:84:0c:47:bc:be:05:bf:e1:09:a4:
                    ab:0a:39:41:c2:50:86:4c:6d:b3:2c:65:0c:b7:f8:
                    3d:30:d8:22:3b:95:6c:e7:32:70:c9:93:20:63:44:
                    b2:e8:93:16:8b:fe:25:24:f5:84:db:9f:86:db:40:
                    71:37:e6:2b:8e:d4:9d:88:a4:b1:87:b5:91:af:64:
                    ef:8a:6c:bc:58:09:c8:02:95:85:d2:c2:0d:8a:83:
                    f0:c6:50:f5:c2:de:86:56:62:34:45:92:5c:ac:22:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EB:6F:F6:0C:C5:52:4D:E6:C2:53:3F:91:09:AB:57:4B:1C:28:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90b8::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:5e:b7:13:c6:20:32:4a:f9:28:b7:13:58:87:37:98:c9:
         b6:2a:e6:28:c4:0f:5d:5b:65:2a:01:44:65:5b:7a:43:3d:cf:
         4a:86:91:f3:94:f5:20:96:7c:70:8a:43:99:ce:11:e4:a4:9e:
         c7:41:7d:c5:9f:83:ae:b9:43:70:b6:cd:d8:10:ce:9f:2f:30:
         91:21:29:08:f9:67:61:0e:33:60:cb:dc:fe:33:eb:9e:03:f0:
         f8:28:9d:74:42:df:3b:86:12:cf:b9:65:b3:c2:0f:67:90:96:
         f6:eb:4f:cd:9f:0f:80:15:ed:41:6d:9d:8b:c8:7d:c0:9a:07:
         26:f1:85:13:14:0a:ac:8d:af:bf:6d:49:48:3e:7a:35:a1:35:
         0b:ed:dd:f5:99:0f:12:bf:3e:c0:05:eb:34:7b:7d:8f:25:40:
         90:0d:d2:9d:f2:ca:fe:86:a5:36:e0:84:11:55:ed:55:04:c0:
         de:90:a1:06:f7:a6:cc:96:56:11:6c:a4:f1:b7:4f:6e:f3:76:
         48:55:92:4a:08:22:d8:f1:b0:89:c6:ca:ee:86:3d:09:aa:a6:
         67:79:b8:f7:2b:86:97:e4:b0:3a:e2:21:13:b2:af:2d:f3:77:
         58:72:65:cf:ce:e9:e3:1d:83:42:13:09:99:d6:f7:63:d4:a2:
         1b:47:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:51 2026 by rpki-client