Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7758527a-bd45-3b4f-8103-39f81ccc573b.roa
File:                     7758527a-bd45-3b4f-8103-39f81ccc573b.roa (raw, json)
Hash identifier:          jNRPS8Zk9P4Sol9Qze6eBFlAOGJLq5O8hIbwMbgsmkE=
Subject key identifier:   04:96:78:CB:C1:03:7E:B4:D2:09:E9:5E:C1:8A:3C:D1:76:62:36:16
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFB0B58153A23E5AE4E30
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7758527a-bd45-3b4f-8103-39f81ccc573b.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8413::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:fb:0b:58:15:3a:23:e5:ae:4e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=7c43159b-15a0-409f-b9b9-95f7210788de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:ec:0e:4d:8c:1b:c5:a5:fe:f1:fc:99:47:
                    d5:c9:4f:56:08:d5:8c:93:2a:53:fb:76:b7:66:cf:
                    46:11:77:9b:0e:d4:7a:21:60:37:05:98:58:03:bf:
                    e5:6e:ef:b1:9f:bc:f7:5b:6c:6c:71:0f:1b:a6:8f:
                    ca:97:1f:bf:76:07:db:fe:50:e9:21:d9:b8:8f:75:
                    6d:f0:b2:51:43:8e:ce:c9:9e:6a:99:37:5c:50:5f:
                    73:17:80:4f:80:00:a3:b1:d7:2f:02:50:14:91:41:
                    29:e4:40:0a:b3:02:1b:ff:03:32:0e:ea:37:e8:fb:
                    33:74:b1:40:32:9c:5a:17:1c:31:27:15:76:7b:22:
                    98:b6:a6:dc:07:35:af:55:5e:0d:9c:0f:16:37:79:
                    61:6c:9d:fd:a5:c7:85:86:d9:7e:93:4f:16:8e:0c:
                    24:af:18:53:d0:15:71:55:5d:86:6c:1e:b4:86:65:
                    9f:dd:cf:ed:d3:3c:10:4b:11:34:76:29:2a:9c:ab:
                    c7:03:3b:6c:b3:c8:d2:d3:b8:65:d4:fc:11:e2:7a:
                    2c:6d:b6:71:ac:d3:04:98:cb:39:11:da:b8:2c:55:
                    96:7f:fb:bf:cd:9c:ad:6f:51:b8:64:ba:73:3e:3a:
                    d9:80:13:63:78:99:d1:20:98:11:8d:8e:1d:e3:af:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:78:CB:C1:03:7E:B4:D2:09:E9:5E:C1:8A:3C:D1:76:62:36:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7758527a-bd45-3b4f-8103-39f81ccc573b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8413::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:68:50:b7:b1:40:31:fb:00:89:ea:62:c5:18:5b:65:b6:10:
         ad:3b:e0:2b:96:d4:6c:54:1b:8b:3b:23:43:ff:25:52:0e:13:
         45:c9:b3:00:8e:77:de:26:24:ee:fe:45:6d:a9:98:e1:b4:75:
         32:74:f9:1f:25:db:a5:72:1b:27:7e:ed:53:31:3e:e5:35:0f:
         53:48:de:a5:56:ee:cc:f6:bb:76:26:7b:4f:63:e5:41:d1:61:
         9c:40:3f:82:18:9b:5b:e5:ad:06:6d:87:10:24:59:6d:b6:0d:
         61:c4:31:18:96:8c:ef:de:b8:31:f5:77:62:38:ee:59:60:9a:
         4c:60:5e:9d:d5:3a:9f:cc:7e:9e:99:d1:e5:fc:49:59:3e:34:
         6f:95:60:4d:37:86:20:1e:df:92:0e:96:92:39:38:c4:0b:42:
         be:89:ea:15:83:10:c6:b3:30:78:bb:b2:75:f5:37:b8:c4:60:
         ed:5a:12:20:f6:0d:d7:cb:72:13:c2:cf:35:5e:0d:95:aa:19:
         c1:ca:f5:68:8e:b2:57:1d:44:36:0c:78:b9:af:9e:4c:f9:cd:
         b8:47:a9:74:cb:50:11:87:dd:5a:89:d9:1d:c5:10:2a:10:c0:
         5e:e2:b8:22:0b:54:ea:65:b9:de:c3:a3:e8:7d:3c:93:c0:06:
         7a:9a:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:51 2026 by rpki-client