Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b05ded1d-3af6-3338-a587-917a9bc58573.roa
File:                     b05ded1d-3af6-3338-a587-917a9bc58573.roa (raw, json)
Hash identifier:          rxikKBW33LjfJDd88YtAa9AS7fnLVHGvlbsDk/0Zq78=
Subject key identifier:   CF:1D:FD:E0:CA:86:FC:E1:4D:0E:32:D2:78:B4:84:11:2C:17:80:47
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF6A67D48C142C42A5E20
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b05ded1d-3af6-3338-a587-917a9bc58573.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8098::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f6:a6:7d:48:c1:42:c4:2a:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=f71f74a9-f005-42f8-9590-9873528a357e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:41:bc:19:2b:65:b5:62:e4:fa:1c:be:4e:
                    4e:14:ea:a8:13:df:07:11:e0:51:6c:40:b4:a5:5b:
                    98:ed:35:0f:cc:23:f7:b4:e5:e2:5b:e9:cb:78:21:
                    18:a3:f5:b8:68:36:64:81:cf:f7:c0:68:42:f6:fa:
                    3b:ea:f6:36:4b:0a:7d:3a:f6:ad:99:ff:8c:f1:08:
                    ef:61:27:ce:a5:80:23:be:24:7b:b1:ec:e0:3b:a9:
                    c4:3a:dc:71:7e:ac:e1:b5:db:86:3a:cd:b9:8d:a6:
                    5b:d6:da:44:75:bd:ed:38:70:e8:de:8e:45:42:f9:
                    df:10:f4:26:5e:c0:b8:3a:11:96:13:d4:ec:56:89:
                    66:3a:c2:0b:f2:41:58:22:b7:53:de:36:2c:c4:46:
                    5a:ed:97:31:66:92:df:2b:a5:d0:9f:19:f7:a3:16:
                    62:cc:76:0f:af:77:9e:fb:7f:28:70:42:2a:e3:76:
                    96:75:2f:64:82:06:d1:e9:4e:6a:2a:84:cb:94:94:
                    89:0d:ba:52:dc:a1:3a:9f:f8:c3:b3:40:87:09:dc:
                    27:09:11:76:dd:95:c1:03:eb:bf:81:23:8c:8e:77:
                    95:13:f2:26:d2:09:59:27:67:0e:fd:4c:70:ac:66:
                    3e:7d:2e:6b:a4:b0:93:cd:f2:4b:52:52:ff:b0:90:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1D:FD:E0:CA:86:FC:E1:4D:0E:32:D2:78:B4:84:11:2C:17:80:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b05ded1d-3af6-3338-a587-917a9bc58573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8098::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:52:fe:db:d8:15:77:c8:d4:15:bf:c1:46:dc:e0:6b:fd:45:
         e1:5f:af:07:19:11:f6:99:52:aa:16:f3:ab:53:7a:01:61:ac:
         02:e9:35:db:b1:cf:22:d1:d8:52:bd:6d:3f:cc:76:17:34:b8:
         41:08:ee:55:f0:c2:31:ef:31:9f:e0:55:a9:52:4c:2c:fc:d4:
         c4:ef:99:6b:1b:ff:1e:c7:68:f5:d7:75:3f:67:a0:2b:80:54:
         ad:45:39:bc:32:dd:b0:65:39:eb:52:f8:99:01:f0:23:20:0e:
         0b:b7:43:ed:43:3d:15:24:98:78:5f:b2:1c:53:2e:fd:a1:b7:
         db:fe:74:f4:c3:ac:e6:6c:24:9f:80:41:e7:68:3c:61:3c:f3:
         67:30:b7:7b:32:2a:12:34:3d:ff:a4:ac:65:80:c5:e3:7d:cb:
         d0:b7:9a:b6:99:4a:de:18:5a:6c:76:b7:1e:6e:01:d3:eb:22:
         6f:46:4a:ef:60:81:67:26:db:f7:e5:f1:f7:33:8b:f5:89:62:
         5b:97:74:f3:7b:27:e0:e3:31:f4:9e:5b:20:7d:83:d3:3f:a1:
         f2:e7:e8:ff:c4:a5:5d:35:7d:98:32:0a:23:ed:3e:73:af:e1:
         a6:a7:a0:38:4a:f8:89:25:cf:e1:b5:c9:66:6f:30:2b:00:bd:
         6e:11:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:32 2026 by rpki-client