Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/affb0be7-65c3-3733-9dde-8b105a3b1526.roa
File:                     affb0be7-65c3-3733-9dde-8b105a3b1526.roa (raw, json)
Hash identifier:          lgIoElLyXhEJxqHN7yS4p+4oiXmJHJRSNgZ9NUHVdP0=
Subject key identifier:   C6:62:F0:C3:86:01:26:94:81:70:D5:4F:1D:DC:C9:BA:8B:30:BB:4E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFCD1FE7B5815B5749E980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/affb0be7-65c3-3733-9dde-8b105a3b1526.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2603:903e:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:cd:1f:e7:b5:81:5b:57:49:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=133863e6-ef0d-4e20-a4c4-086b931d262c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:94:2b:a6:75:e5:ba:20:fc:20:80:fb:51:
                    02:55:a8:70:cb:7e:34:b7:ed:f9:5e:78:99:cb:a7:
                    a2:76:e4:49:bf:08:20:b2:44:ee:5a:19:39:9a:34:
                    63:e2:f2:50:3c:f3:01:c9:2c:e4:ff:8a:7d:19:58:
                    fc:76:4a:32:5b:c4:eb:7f:18:da:00:77:86:8f:c3:
                    16:e5:6f:ed:f2:e7:8e:a4:cf:46:62:bc:e0:55:46:
                    f9:57:39:65:e8:46:54:8b:49:18:6b:f2:56:06:ec:
                    dc:0d:f9:be:bc:a3:8f:12:b5:9e:d6:ce:ec:31:60:
                    8c:89:df:e1:21:d6:f0:0e:c7:83:98:fc:51:2c:48:
                    f5:ae:bb:93:74:80:d6:2b:50:eb:25:b1:7d:6a:90:
                    19:12:6c:b7:f8:ad:2e:b0:e6:54:67:af:d8:fd:25:
                    a2:99:f7:0a:c8:c8:d1:b4:24:52:54:30:4d:82:2f:
                    a9:5e:ca:6d:df:d6:aa:69:0e:a5:26:90:b3:bb:69:
                    cb:6f:3f:21:10:1f:b0:7c:2c:5f:13:6e:cf:a9:c2:
                    7d:93:1d:75:79:3c:53:f2:0b:e8:ed:e6:e1:85:6d:
                    75:69:a1:25:f1:67:a3:e0:34:29:03:93:0f:25:50:
                    28:d3:6c:94:f3:79:89:b8:9c:da:9f:3c:05:e8:9a:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:F0:C3:86:01:26:94:81:70:D5:4F:1D:DC:C9:BA:8B:30:BB:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/affb0be7-65c3-3733-9dde-8b105a3b1526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:dd:c4:f0:84:75:3f:81:e2:9e:1a:1e:f0:0f:69:18:1a:0a:
         c7:2b:2c:16:a0:a4:78:4e:be:cc:09:59:29:d8:14:bf:2b:4b:
         3b:6d:30:2e:7a:70:8f:f8:23:f1:b7:43:9b:57:f1:bb:3a:c0:
         63:9a:90:7d:83:46:b7:3d:ba:3a:6d:35:6d:4e:5d:e3:8d:41:
         f0:6e:7f:1a:eb:e8:03:00:8d:04:f0:1a:5a:53:22:37:81:ef:
         e4:dc:e8:71:fb:35:63:46:db:45:a3:06:62:8a:8b:f5:4d:5e:
         15:49:ee:3e:6f:e6:94:e9:8b:92:53:4d:9e:84:a1:ab:a9:21:
         1d:8d:c5:33:d4:d1:d7:2c:48:90:1a:ba:02:34:63:52:55:8d:
         12:d3:7b:78:b4:61:2b:c1:a2:af:02:86:ed:54:7a:bc:76:9b:
         5b:ae:5a:2f:ea:bb:9b:ed:83:ac:af:c9:be:64:51:52:4c:5a:
         36:fb:5b:bd:14:8a:0b:41:3f:c1:27:2e:30:21:4b:66:2e:f8:
         4b:06:1b:e7:15:1b:18:28:cf:f0:0a:39:d7:5d:a8:bb:a9:b4:
         d9:15:87:4b:78:8f:34:46:ce:bc:34:bf:e7:37:d9:34:2d:d0:
         e4:5a:ec:f3:a9:65:b5:17:5c:98:75:b6:fd:04:8b:4d:e4:66:
         2c:57:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:26 2026 by rpki-client