Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/66e675aa-eb27-3078-94db-9ad43cb2659c.roa
File:                     66e675aa-eb27-3078-94db-9ad43cb2659c.roa (raw, json)
Hash identifier:          OmTs9oe00XIhsYJGXlH4TPfaXBGGa3dfooFqVcZD3Hs=
Subject key identifier:   8A:B6:58:38:3E:BA:E7:88:13:C7:78:D4:D8:64:7A:A2:76:1F:22:9A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFC0C4EBFF36487387200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/66e675aa-eb27-3078-94db-9ad43cb2659c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:fc:0c:4e:bf:f3:64:87:38:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=711598ba-918c-45c9-a359-361a83a7eddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:5b:1a:4e:01:2a:b7:7d:a6:38:82:a8:d5:
                    5e:8c:25:0b:5a:67:b8:c2:cd:cd:1b:98:68:76:7b:
                    a1:a5:b1:16:93:17:df:22:08:16:ec:ac:45:bf:f1:
                    25:a2:e9:0f:1a:5c:56:b4:a0:2a:35:e5:b5:60:a1:
                    b5:fd:25:f3:33:26:0b:b0:9d:d1:25:d4:61:83:6d:
                    ea:96:46:82:aa:51:fc:62:b7:95:07:15:5c:3e:fb:
                    14:31:09:e4:af:9c:51:1f:98:b7:52:9d:b2:e2:30:
                    3e:96:74:37:2e:47:4d:ac:68:cb:05:72:45:14:ab:
                    87:af:eb:62:4e:95:73:72:d8:ed:5c:d5:ff:a1:65:
                    3d:4a:8c:50:35:c3:5d:09:10:aa:fa:04:7c:7d:84:
                    c0:06:b5:3b:8b:ea:19:c9:00:89:e7:f9:87:f6:b2:
                    ee:27:b0:91:c0:3c:00:6c:2c:9d:3d:eb:eb:8c:2d:
                    67:ff:4f:61:66:11:6d:28:7e:76:55:04:58:f9:5e:
                    f7:db:c9:12:46:33:8b:c6:ef:78:71:b2:b8:2f:35:
                    c6:c4:26:a3:29:a5:14:da:fb:31:4e:54:31:90:8c:
                    23:32:83:17:a9:8f:c5:7b:87:bf:8b:ea:e8:df:73:
                    0c:3a:3a:eb:9e:dc:9c:6e:21:d7:46:f0:5f:cc:87:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B6:58:38:3E:BA:E7:88:13:C7:78:D4:D8:64:7A:A2:76:1F:22:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/66e675aa-eb27-3078-94db-9ad43cb2659c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:10:45:3a:a3:17:15:e8:ab:01:87:10:ab:e2:9e:ea:8e:9b:
         06:b3:53:b2:a9:b8:d3:29:5f:ab:fb:fd:ff:db:75:a1:21:0e:
         38:d3:f8:90:83:89:c1:94:d2:49:25:e1:f0:07:2a:61:65:cf:
         de:08:de:7a:7e:03:85:49:9e:38:18:d8:cb:24:d7:9b:61:2f:
         4d:3a:65:04:cd:b3:59:e0:3d:06:b3:fa:41:cf:1d:38:ac:ae:
         75:37:c5:83:e3:6b:49:0a:d3:a4:98:de:ea:23:ab:68:4a:58:
         9c:84:29:f4:6f:cd:0f:0e:7c:10:bf:cd:e5:46:6f:e2:b8:9f:
         f3:90:7f:15:0a:92:f7:57:8a:4e:af:3d:1f:15:32:b7:56:ba:
         a2:02:21:76:a3:82:9d:d6:c5:80:8c:fe:fd:46:b8:a0:63:e1:
         5c:34:48:70:d7:fa:4c:71:31:58:c4:e8:39:a9:3e:25:7e:95:
         b5:1f:b1:53:6a:a6:51:c2:b8:22:5c:2c:e3:67:29:a6:de:1d:
         6f:88:be:f3:4d:af:b7:51:2c:4e:56:c0:17:3e:52:85:b6:24:
         8f:40:56:43:0f:d9:44:7d:1f:50:ed:56:d2:a0:d2:03:cb:b4:
         ff:c4:3b:3e:48:44:93:15:d7:3d:9f:28:dc:2c:f3:4b:f2:03:
         fe:e0:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:26 2026 by rpki-client