Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/680c2850-de57-3718-b240-536fac3764cd.roa
File:                     680c2850-de57-3718-b240-536fac3764cd.roa (raw, json)
Hash identifier:          gGdJVaMU4H1vsedAkSkGy60rZJd9lh6fjvPDczbyKlE=
Subject key identifier:   92:99:06:97:BE:BA:86:72:8A:51:5F:48:78:31:AA:BA:19:1F:9A:F1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF70D81EF322F81B9B9C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/680c2850-de57-3718-b240-536fac3764cd.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f7:0d:81:ef:32:2f:81:b9:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b5869ba6-7e4a-4af9-9fc2-f91e2cbfdf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:23:48:64:a1:3e:40:57:09:cf:36:70:9d:
                    09:9d:b4:7c:e8:9c:4c:b3:fa:0e:bd:a5:91:57:3f:
                    b1:a4:df:ec:c7:68:e8:30:ce:0d:7d:f7:dd:ed:be:
                    c9:47:e9:19:e4:84:bc:f7:ec:03:be:ea:13:f2:88:
                    09:ea:bd:a0:12:1e:d6:3b:fe:60:d2:6e:00:ef:a2:
                    26:5e:3a:94:14:a4:01:f4:d6:88:39:f2:2d:c3:9b:
                    86:54:d2:44:24:4d:6e:4d:fd:44:93:e7:bc:5e:15:
                    ef:dc:d7:be:fc:58:55:e8:31:a1:ee:51:23:ca:a2:
                    40:58:7a:85:dc:92:c8:06:8f:32:c4:38:3c:73:0e:
                    52:2c:6e:76:db:36:97:f4:55:eb:3a:94:14:50:5e:
                    b4:74:7a:44:19:2c:6a:87:c6:54:5e:ad:a6:cc:f3:
                    40:dd:ad:a3:63:fd:8a:89:b6:71:eb:d8:7c:73:2c:
                    d7:49:f7:70:4f:9b:25:58:83:e3:bf:b7:d7:3a:8a:
                    3e:e0:a9:9a:86:d9:1c:dd:54:97:d5:aa:8d:e2:7b:
                    0f:79:12:3f:23:16:ea:19:46:b9:76:bd:20:b4:b3:
                    6e:97:4c:17:12:fa:0c:11:e9:c7:92:fc:b9:d1:f3:
                    05:61:df:09:30:90:d2:81:8f:e2:77:fa:9d:22:b4:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:99:06:97:BE:BA:86:72:8A:51:5F:48:78:31:AA:BA:19:1F:9A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/680c2850-de57-3718-b240-536fac3764cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:6a:38:76:af:43:93:df:63:9b:c1:b0:e2:a6:08:3a:64:
         7a:36:09:93:c8:a7:b1:a0:47:d8:00:73:27:16:1f:57:fc:82:
         81:bc:4c:31:20:fb:20:8b:02:1e:e9:36:0a:9e:48:e7:eb:84:
         ef:ee:95:69:50:28:06:26:46:9f:2a:c1:48:36:42:44:a7:61:
         2e:20:59:e9:e6:3d:ff:62:09:a5:ed:4b:93:9d:82:89:ba:6f:
         b1:7f:8c:14:56:f1:36:a8:02:c0:eb:1f:c3:a5:d9:7e:aa:e6:
         a4:70:6c:53:76:43:c1:90:f6:a5:26:d1:c6:d8:7b:eb:69:90:
         d2:39:15:1e:af:3c:02:fc:43:e1:34:2f:48:4e:71:8f:26:2b:
         88:a1:dd:43:53:39:be:47:53:49:dc:a2:7b:ad:36:66:96:89:
         a0:f7:b8:b8:9c:08:3f:23:4a:b9:63:96:7c:f1:5c:45:27:b4:
         98:5c:fa:ce:4a:36:75:e4:d7:4a:59:35:3a:e1:c8:eb:aa:36:
         9e:a7:b8:ec:68:7a:c2:26:b3:5f:ea:ee:81:5b:3b:16:21:c6:
         c5:40:a5:c2:80:66:ed:b6:d8:fa:47:f4:06:f5:01:e4:9e:e5:
         54:88:43:ba:24:11:61:3a:9c:e8:c6:06:46:be:26:0b:0a:36:
         a5:ed:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:05 2026 by rpki-client