Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3e3a419-181a-3d5c-958f-1ec9950b485a.roa
File:                     b3e3a419-181a-3d5c-958f-1ec9950b485a.roa (raw, json)
Hash identifier:          b10DPfX7Qh63uErVtNFQYXbe2hv3A9U2v8zCvR+ew50=
Subject key identifier:   09:13:A0:ED:AA:14:44:FF:03:AD:D7:3E:3A:30:5D:CC:9B:03:01:1D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3E00006F93D4A0563B269200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3e3a419-181a-3d5c-958f-1ec9950b485a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33588
IP address blocks:        2603:90f5:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:00:6f:93:d4:a0:56:3b:26:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=50783ec3-5fcb-4d0b-bca1-bec5620b0399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:e9:c8:6e:1d:f4:60:db:15:b2:20:7d:c2:
                    41:48:6d:06:93:32:fd:5f:5f:d0:cb:f8:0d:32:58:
                    46:46:44:6b:4f:be:46:06:87:b6:b5:68:a4:5a:a5:
                    39:ad:78:2f:30:f3:fb:9f:00:1b:aa:0e:37:84:d4:
                    a9:c9:7b:4d:10:1c:77:55:9b:82:3d:6a:f3:4c:d4:
                    2c:5c:bc:a5:ca:cd:06:bf:ae:1c:d2:8d:09:63:ec:
                    11:e2:78:ed:0f:23:13:a5:60:14:fe:6a:01:93:e2:
                    b1:70:39:ca:cf:71:bc:a3:2d:ac:74:1f:e6:a3:b8:
                    f3:0d:f8:c1:55:8f:12:00:0e:51:27:ef:96:f3:8c:
                    86:38:a6:e2:d7:c6:bf:4d:14:17:b5:5b:6e:de:0c:
                    67:f2:e1:9b:e2:c4:df:7e:fd:a2:25:ef:65:40:87:
                    cc:17:9b:f2:d5:8c:15:02:68:c0:b8:40:32:73:d5:
                    bf:ac:ff:2b:a8:1f:26:33:ae:69:02:4c:8e:81:9c:
                    10:e5:26:cf:82:38:82:b1:fb:0e:78:f5:04:cc:c3:
                    2c:08:67:08:1d:8b:b5:23:50:98:20:e6:74:b9:aa:
                    89:4c:62:ee:1e:e0:4d:8a:a2:48:1c:12:16:f7:8c:
                    a6:71:77:b0:c9:dd:9d:ad:92:c8:1b:ab:65:bb:3a:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:13:A0:ED:AA:14:44:FF:03:AD:D7:3E:3A:30:5D:CC:9B:03:01:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3e3a419-181a-3d5c-958f-1ec9950b485a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:98:a3:d3:cf:96:8e:2f:ae:48:63:a5:7f:b3:cf:95:07:07:
         92:74:eb:6f:12:c0:1f:cd:07:45:47:49:62:c1:8f:2e:20:c0:
         12:89:69:74:6b:5b:61:87:c3:15:1e:10:85:27:e6:a3:f7:24:
         6b:1c:f5:8c:aa:b6:98:3d:55:78:fa:2a:82:e4:65:6c:f2:1c:
         27:fb:a5:1c:b2:8c:51:38:1c:a6:3b:8e:d3:e8:32:9d:21:d4:
         f4:9e:43:44:03:59:27:69:41:6d:e7:2d:be:61:b3:22:56:3b:
         03:8e:f9:be:d6:31:21:ce:9d:6f:26:40:ab:ab:a0:6a:ce:6e:
         7f:81:62:1d:1c:d5:07:b4:2b:c9:db:38:ec:27:2d:06:c8:01:
         4d:d7:08:e3:9f:d9:e8:fd:f7:7e:96:49:9a:5c:30:da:1f:f9:
         f9:fd:dc:ec:0d:89:93:6d:83:2d:3c:9d:f6:91:60:c1:37:db:
         4d:02:df:55:2d:15:59:d8:c1:29:80:bf:ae:9f:96:2b:64:3c:
         e4:fa:88:ea:a2:39:77:a1:78:e0:2c:d6:da:5f:1e:42:32:6a:
         c2:15:8d:c9:ba:c9:da:01:09:c3:bc:26:40:54:33:ff:c3:0f:
         5c:6d:6d:a5:7d:40:39:1c:03:fc:a4:e6:97:49:47:1d:52:ca:
         12:62:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:13 2026 by rpki-client