Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/86853f99-3b2f-341a-a57d-b7589e8884d9.roa
File:                     86853f99-3b2f-341a-a57d-b7589e8884d9.roa (raw, json)
Hash identifier:          +IEsq5qw9A2hb8mMKAr6CFy9CNqtVs5PPRnjGkDYeSc=
Subject key identifier:   41:98:13:6A:19:F7:FD:AB:1D:04:68:0A:CE:FD:E3:AE:6B:65:69:F4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC044410A39A691F68C20
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/86853f99-3b2f-341a-a57d-b7589e8884d9.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8044::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c0:44:41:0a:39:a6:91:f6:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=75e5b99c-7893-4bd6-8a28-6a71aa5795e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:7b:9c:bf:e2:bd:69:bb:e9:15:e9:24:eb:
                    a7:0c:18:0c:14:dd:4d:e0:2c:b4:2d:4e:9f:ac:3e:
                    f0:46:4d:7c:8f:3d:0f:a6:a4:ba:52:31:71:41:b0:
                    f6:80:94:17:4a:71:06:b3:65:81:a9:55:21:c1:8c:
                    c8:e9:e2:85:72:f4:05:a5:38:e8:63:0c:48:b4:0a:
                    88:21:38:b1:14:62:d8:f9:f6:13:27:54:9d:d3:73:
                    11:ef:96:0d:97:4c:31:2d:9f:ad:d5:d6:ad:ef:83:
                    c4:7f:cd:e9:4b:0f:6a:64:74:a6:2e:93:fd:73:02:
                    ec:09:42:0f:11:a3:16:81:00:b5:11:99:4b:c7:3b:
                    88:57:b6:78:b5:00:97:95:e2:b4:57:03:8c:ab:21:
                    b6:21:4d:a7:89:c1:78:83:20:8f:37:52:88:a3:4c:
                    94:54:8b:ff:13:c7:51:11:fc:27:f2:ed:4b:14:6a:
                    c5:b1:75:36:3c:62:ca:d6:d6:86:96:65:b3:c2:90:
                    92:fa:ee:f7:2f:16:f2:41:bc:fb:fa:fd:6e:fb:07:
                    e7:9b:f2:9d:37:8a:59:80:b9:f5:12:d0:7d:bb:45:
                    fb:85:37:7e:5e:4f:30:11:c7:cc:20:1d:82:11:12:
                    ad:ee:1d:1c:e2:fa:66:8b:60:97:57:5a:9c:44:c2:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:98:13:6A:19:F7:FD:AB:1D:04:68:0A:CE:FD:E3:AE:6B:65:69:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/86853f99-3b2f-341a-a57d-b7589e8884d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8044::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:ce:80:0c:e9:d8:6b:24:4c:fc:ef:05:90:4a:83:18:14:
         5c:af:43:98:95:e1:2b:45:aa:56:39:ad:b1:2d:52:92:14:29:
         ee:92:52:01:c1:e2:4c:aa:61:e0:6a:ee:37:15:35:b5:44:b9:
         87:6b:30:27:d2:91:9e:01:aa:76:f2:3f:e2:00:8b:84:a0:93:
         c3:52:2c:01:a2:28:40:c7:23:62:04:3d:8f:fe:e3:e5:1e:30:
         52:6a:92:73:40:a8:13:3c:d3:cd:1f:05:e0:fe:df:99:87:9c:
         91:79:0d:e5:48:f7:af:33:3d:3d:67:09:73:15:78:2b:34:af:
         77:6f:26:55:87:da:ac:0c:3a:73:e4:81:69:70:64:85:cd:d9:
         98:9c:95:47:6d:f4:08:ad:0d:5c:19:b1:1d:fe:a9:44:d9:18:
         24:9e:5b:ab:d8:85:5c:a2:3d:1e:b5:f1:07:ac:70:f1:85:2e:
         2c:09:41:76:75:57:d0:6f:ac:d3:d2:f6:bd:22:51:55:f8:ec:
         73:b0:b2:53:6c:5e:a2:41:d8:1c:1a:7e:29:c5:9b:fb:8a:cf:
         63:78:82:32:dc:aa:b6:49:be:98:4e:bd:a5:43:5a:e4:f7:8b:
         66:25:e3:4d:50:8a:4b:1b:90:13:c8:dc:25:12:56:96:ba:d4:
         73:70:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:48 2026 by rpki-client