Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b0824310-a856-351b-ab1d-87c2950407ae.roa
File:                     b0824310-a856-351b-ab1d-87c2950407ae.roa (raw, json)
Hash identifier:          jeRltOfDh/G2vuV6WMhodb1rsOYMvKrOJN4Hrl4d/2A=
Subject key identifier:   EB:D8:09:EA:57:F4:EC:D5:E7:DF:3D:FB:64:8F:1C:3D:1B:2D:5E:40
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFCA874F4FC49A093C7500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b0824310-a856-351b-ab1d-87c2950407ae.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8244::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ca:87:4f:4f:c4:9a:09:3c:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=99125167-2cf6-4844-bd82-57eed6334cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:93:d1:23:75:2c:36:73:d0:2d:87:11:ed:
                    e7:07:e0:03:6f:9e:27:a9:ca:be:8c:26:8c:ef:f0:
                    f0:15:13:fc:79:bf:4d:65:85:b5:e0:0f:52:80:ca:
                    b6:69:1b:56:00:73:2d:17:87:5b:55:e4:c7:6f:db:
                    a6:58:9d:77:f1:54:95:bc:44:5c:f1:c8:b0:43:75:
                    50:5a:39:32:6b:e3:2b:83:19:75:f4:58:dd:1c:eb:
                    b5:c5:93:e6:8a:65:3f:00:b6:56:2a:86:04:d9:e2:
                    ab:78:f7:0a:4c:8c:7b:e1:5c:8c:b7:a3:86:85:3a:
                    0e:66:3d:16:68:d6:fc:75:89:ec:f9:f6:57:b7:83:
                    af:34:23:34:33:cf:fa:ef:2e:2b:d5:66:53:55:52:
                    f0:d5:3e:39:17:f1:f3:f0:fa:a1:27:81:7d:6a:1d:
                    62:01:d3:60:07:b1:6b:9a:2d:d8:ad:55:5a:d8:fd:
                    71:a8:00:01:0a:20:c7:b1:93:be:8c:b5:e1:12:d6:
                    dc:14:8a:86:82:64:e2:06:0a:5a:df:77:db:09:ef:
                    ad:00:0b:7a:99:35:d3:ff:fb:73:94:83:6c:2a:6e:
                    88:0d:95:70:00:3b:15:26:e7:ff:51:f5:fb:e3:b9:
                    af:7c:b4:79:da:4c:5b:89:18:c8:1a:8e:78:9b:35:
                    81:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D8:09:EA:57:F4:EC:D5:E7:DF:3D:FB:64:8F:1C:3D:1B:2D:5E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b0824310-a856-351b-ab1d-87c2950407ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8244::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:c2:71:25:dc:63:5e:05:4b:04:3b:9e:91:ad:75:06:36:
         38:88:cc:74:d7:35:2e:3d:40:4c:4f:b4:64:15:07:0d:37:e9:
         34:9e:19:64:c0:d1:f0:bb:f8:38:12:3d:0c:5c:0a:22:2d:31:
         8e:96:2f:5c:67:be:32:27:9d:76:41:da:e2:85:2f:5e:c7:43:
         71:db:62:4b:fe:e3:08:90:4a:c9:49:c2:a6:85:de:49:97:7b:
         ee:1b:84:70:ee:e4:1b:d6:23:59:37:4e:0e:8a:2f:da:d0:23:
         54:f8:e7:b9:56:39:b2:1b:61:e9:de:9f:04:f2:3d:cf:1f:9c:
         03:e2:9a:f1:23:22:17:6f:ce:8d:6d:5a:d6:cd:b0:13:74:63:
         c6:29:ff:2f:bd:ca:35:f0:5d:8c:02:cf:7e:1c:75:bb:31:bd:
         02:3c:a7:89:59:43:db:f1:b9:f9:15:c1:18:8d:54:75:fc:2b:
         d3:b8:92:74:93:a8:1b:c3:a0:0e:99:4f:3f:91:cb:09:05:d5:
         47:43:9e:62:63:40:3b:74:d0:9e:0d:29:1c:44:0d:14:e2:fc:
         5f:62:e1:66:76:f6:cb:5d:5f:e3:bd:f0:66:ec:ac:39:6f:7f:
         a4:ab:27:7d:0e:43:83:97:67:ec:69:a6:24:7c:a9:f4:6f:5a:
         72:48:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:00 2026 by rpki-client