Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa
File:                     c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa (raw, json)
Hash identifier:          EpFa+cQiNalAlcyX5Q4d2yQBrPX6IxcFn7tOpAEHuHI=
Subject key identifier:   15:62:29:9B:D6:1B:BF:F1:22:A9:76:A7:6B:BC:58:E3:36:1B:10:22
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFCC75AB72BB158F9CEE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8b12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:cc:75:ab:72:bb:15:8f:9c:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=cbf800b1-f6be-4220-9c30-2bd718988feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:33:97:79:0a:fb:a5:78:55:c7:13:a6:8c:3a:
                    ef:3c:b3:34:f5:6c:62:c2:86:3a:12:b0:e0:ba:f8:
                    6e:3d:ba:56:61:13:3c:c7:e4:be:19:af:91:95:1a:
                    11:87:6d:5d:2c:12:3e:fa:be:5b:aa:4d:c4:06:62:
                    65:f1:44:f3:00:ba:49:47:00:29:be:9d:b3:c3:55:
                    71:bc:5c:2c:43:1f:99:9e:e5:37:98:94:49:16:26:
                    e8:d2:48:82:52:ea:69:ad:66:e1:6b:4b:0d:b0:b6:
                    fa:25:d9:b2:4a:18:90:84:ff:91:2d:f8:e3:28:7c:
                    a1:31:2b:0b:e1:a4:68:61:ce:a0:9d:06:dc:0e:33:
                    ef:a1:43:63:e5:7d:07:bc:4b:33:d2:81:f5:fd:c3:
                    66:f3:71:24:82:18:be:71:ee:7d:ba:d7:57:04:7f:
                    e6:e2:0c:99:18:73:47:ba:ed:cb:89:be:33:c4:02:
                    c7:1b:45:c0:92:83:1f:5d:5f:32:d4:bc:db:3b:9f:
                    0c:f4:f2:9d:ee:91:52:89:ac:ed:6d:65:10:ed:1f:
                    af:34:17:72:cb:e9:e9:42:78:cb:07:cc:3e:d1:d8:
                    23:86:43:ca:3b:0c:12:9f:a5:42:a0:cf:f8:57:e3:
                    a5:3e:78:f4:d1:52:3f:f3:32:3a:5d:62:f8:f7:e6:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:29:9B:D6:1B:BF:F1:22:A9:76:A7:6B:BC:58:E3:36:1B:10:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:87:e5:2a:7e:5d:d6:56:4f:ba:1f:37:cc:f4:38:a5:13:22:
         d8:3f:44:61:f6:d8:43:e7:f2:77:8d:5f:19:ff:b2:9a:a2:2f:
         73:e5:81:8c:c7:af:5d:80:da:a6:ad:3f:9f:9a:ae:a1:bc:11:
         ee:a6:b5:12:08:d9:3a:80:be:9b:4e:99:c2:3d:c5:27:22:2f:
         f3:ec:c9:25:3c:86:58:a8:10:d0:9a:23:4e:bd:51:93:9a:8f:
         ae:11:f3:79:79:03:21:f2:e5:4d:c2:fe:a7:f2:0b:ad:06:15:
         b4:26:ed:e4:95:6c:1b:56:c9:49:2a:ca:c6:09:c4:05:59:4c:
         db:10:f1:db:b7:e2:ec:2b:85:db:71:ae:9b:21:e2:d5:3b:90:
         6b:28:4f:70:02:dd:a7:b7:b3:f0:d5:61:e2:fb:e6:bf:d6:57:
         52:14:ec:3d:3a:9c:d0:a5:6e:44:98:88:d5:6e:17:56:ef:81:
         0c:17:63:b8:04:08:73:50:fb:08:21:a6:de:76:0b:61:f0:c4:
         e8:3c:06:f5:f9:59:4b:07:20:1f:ad:a0:48:98:f4:f9:95:50:
         de:a9:91:de:f7:00:73:fd:8f:1f:70:4f:ff:77:03:e8:4d:57:
         80:34:c6:d7:8b:e5:94:c4:34:0c:c2:e5:5f:1e:35:64:b4:09:
         c0:eb:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:44 2026 by rpki-client