Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa
File:                     ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa (raw, json)
Hash identifier:          WYWWV8CODQCYhgM6fKwZOLS7wx7Zp+sqXQPCysV3qAk=
Subject key identifier:   38:88:5A:4B:FE:46:80:AA:CE:23:37:29:DD:69:22:46:1B:9E:DD:8F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFD47418E2781A979BDEA
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:fd:47:41:8e:27:81:a9:79:bd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=34516f26-e56e-4d52-95b3-1a9cbb483e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:17:e9:d8:49:2e:61:22:e3:99:38:db:7a:
                    c3:28:ce:9b:84:7b:ee:cd:8a:0d:d2:51:bf:a4:2c:
                    82:12:31:20:28:ab:3e:2a:5b:e1:f5:bd:ca:9b:69:
                    ab:cc:55:d8:1f:1c:e5:a5:f9:93:c2:71:24:51:3c:
                    fe:53:a8:b8:ae:03:a7:e1:73:ca:04:e6:72:26:46:
                    ea:76:cc:53:ba:2c:a2:bc:86:07:66:d7:e9:0c:15:
                    05:e1:6d:50:b7:23:4b:b2:8c:c6:1f:27:ed:d6:58:
                    b5:86:f6:34:9d:38:08:f6:17:65:8c:80:5f:1f:36:
                    77:8c:cf:d3:f7:a7:26:03:4f:7a:b0:9e:ae:7b:c6:
                    6d:c1:52:bb:9a:e9:0c:29:47:d8:0a:e5:a3:6b:9f:
                    74:dc:c7:9b:09:7d:94:1b:52:55:0f:76:80:a0:7f:
                    0b:66:66:90:0d:33:d9:6f:ff:de:31:55:20:79:3d:
                    49:46:f1:00:a6:3a:fe:51:63:f5:0b:d6:dd:86:b0:
                    c9:7b:71:58:40:d9:42:a3:7a:76:89:d1:fe:aa:af:
                    b1:a8:a3:d7:30:d4:e6:c6:9d:f2:39:1c:b3:2d:f5:
                    13:96:ad:16:67:84:90:34:49:70:81:e4:bd:f1:6f:
                    d1:b0:b4:af:3a:58:a0:74:a1:6e:f5:c7:76:63:33:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:88:5A:4B:FE:46:80:AA:CE:23:37:29:DD:69:22:46:1B:9E:DD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:55:39:2c:97:0d:26:72:c9:22:94:42:73:2f:00:85:f0:3a:
         df:a9:60:aa:8a:81:d2:f5:f0:b4:38:f2:e3:90:69:08:e6:7f:
         c4:a2:d9:85:1c:02:fd:78:d7:ef:cb:cb:88:72:dc:e0:36:c0:
         25:c6:34:5f:e0:49:6a:13:35:5a:e0:8b:3e:8a:43:8c:fd:3e:
         a8:5b:29:d3:d2:52:a8:73:29:36:cd:04:26:11:ed:fb:d8:7f:
         00:35:e7:08:fc:3a:e7:cb:90:d1:a3:98:6b:35:a2:3d:39:66:
         f5:58:84:f8:91:5d:c9:03:73:3e:be:33:df:60:c3:20:91:34:
         05:ee:af:b5:6d:82:03:08:ef:08:c8:a4:e2:68:68:f7:43:3b:
         6a:45:2f:37:65:fc:04:82:12:75:66:d0:09:26:3a:ed:b1:31:
         f9:88:f1:c9:9b:dc:df:ac:73:79:03:e8:51:fe:9f:eb:36:0b:
         d9:bf:8d:a0:c9:ae:bd:24:d7:bb:c4:8b:61:10:04:48:28:74:
         34:54:2e:78:81:a8:93:c8:64:39:9a:31:96:93:c3:f7:d9:4e:
         a0:d5:f0:d3:6d:55:49:7b:09:58:2d:38:14:64:0b:b1:a1:f7:
         09:bc:6d:7d:49:4b:01:6c:91:5d:74:6b:75:3a:34:bf:55:04:
         b2:7b:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:39 2026 by rpki-client