Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa
File:                     898fc129-a8c3-3759-8a3b-c6b6c109c074.roa (raw, json)
Hash identifier:          WS7N40dLhxFPvHxE7MKqWQMahVFx9kHxPqUh+g1aULo=
Subject key identifier:   F4:6C:74:6C:B8:E9:3E:32:21:08:1D:8F:D6:19:17:75:88:C9:9C:1E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF5F28A6DFF1A20989980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f5:f2:8a:6d:ff:1a:20:98:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=fccadfff-c620-4f1d-a8eb-102e49e2cd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:71:91:05:42:dd:64:28:23:bb:2c:a3:1a:
                    16:9e:1f:46:f8:20:cf:04:db:21:88:92:76:49:cb:
                    8a:27:f6:0c:1b:93:0d:30:75:97:6e:eb:35:74:a8:
                    f6:fb:66:76:90:dd:84:f1:8a:d9:fb:c7:6f:97:2f:
                    e8:9a:65:cf:34:8c:e5:b3:89:c1:43:42:74:94:87:
                    8e:9f:66:e3:1b:c8:65:5b:9d:d3:a3:aa:57:33:c7:
                    fb:67:90:27:45:df:b5:a4:a9:09:c7:0d:55:79:98:
                    4d:2d:a9:e9:ed:5b:4e:f4:90:27:ec:71:25:a5:ef:
                    50:97:8a:21:bf:d4:c7:05:f5:be:ad:84:e2:8e:3d:
                    9d:18:94:93:7b:7e:27:41:ea:5c:5f:0b:f7:95:93:
                    fa:34:8a:b7:88:7e:4f:ef:3e:f0:e2:06:ca:f8:62:
                    12:6d:91:11:e6:c4:7d:60:26:6e:36:79:89:c3:1f:
                    35:e5:8a:4b:6c:51:2b:e6:69:35:c2:aa:f8:e9:d1:
                    c2:3d:15:df:77:b2:e5:93:d2:ed:57:70:46:83:6b:
                    52:80:3c:14:71:5c:31:5c:f1:d9:32:c5:ad:9f:1d:
                    6d:2a:fd:4f:65:78:f9:f3:db:a4:f1:e5:93:ab:0d:
                    ca:13:b8:ad:11:46:94:d9:55:cb:75:b0:07:2a:fa:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6C:74:6C:B8:E9:3E:32:21:08:1D:8F:D6:19:17:75:88:C9:9C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:24:5d:07:0a:dd:eb:7a:13:80:9c:97:a1:bd:2a:f1:38:2c:
         3b:0f:ba:6e:e5:e5:f8:24:32:05:35:ee:12:64:3a:1a:58:de:
         17:69:87:19:4a:8c:ea:84:75:8f:9c:fd:48:5f:b9:b6:9b:da:
         38:2a:7e:e9:ba:09:5e:45:da:5d:62:64:24:97:9d:8c:6a:ea:
         21:94:9b:04:1a:b8:d0:6a:e6:6a:96:6b:83:2b:9d:03:bd:8c:
         76:a8:28:29:bd:f2:42:ef:92:09:48:32:24:11:c3:ca:63:d4:
         05:47:1f:c3:3a:0d:1c:54:85:85:c6:4e:d9:93:ef:f3:2e:63:
         e8:97:70:58:22:f2:96:cd:09:ba:ec:b8:5d:79:32:4a:2a:a5:
         3a:c2:43:dd:77:b6:4a:96:5b:cd:f6:a5:3d:f7:56:89:99:47:
         5b:df:a0:31:19:79:65:f2:85:6b:aa:04:51:6f:77:b5:cb:d9:
         63:ff:85:97:ab:1f:bf:29:e9:dd:ee:1b:e9:d8:33:ae:da:f4:
         a4:a0:31:46:4c:a9:02:1a:04:9d:45:0e:d9:07:3a:31:13:54:
         21:db:6b:8b:de:3a:42:c5:e1:a0:c2:9a:f0:5a:fc:f8:a4:e6:
         ca:8a:7e:00:54:11:46:f6:74:ce:5d:0f:cc:0a:19:b3:fe:19:
         48:62:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:07 2026 by rpki-client