Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc6187d8-7112-3e4c-95c8-3b1a89ec8752.roa
File:                     dc6187d8-7112-3e4c-95c8-3b1a89ec8752.roa (raw, json)
Hash identifier:          SwmKpzapZg2aAy2LptK/KUGJUNw9Ca36PfqhQzD/Tds=
Subject key identifier:   68:3A:D7:82:9C:EB:CF:86:99:AA:8A:B8:F4:52:F3:41:A4:62:84:E9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC37B2AF8E4848EB3E700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc6187d8-7112-3e4c-95c8-3b1a89ec8752.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:81bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c3:7b:2a:f8:e4:84:8e:b3:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=ab65074b-8a83-4d2f-92be-a5f5eee5dc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1a:fc:ef:07:37:13:26:c1:f8:22:62:81:50:
                    ad:a0:a0:40:0f:fd:47:2d:7c:de:c4:53:e9:c5:ef:
                    56:13:72:00:45:fe:75:07:8d:a2:e9:ed:e4:78:0a:
                    46:95:77:fa:e8:76:50:2d:66:53:2f:f0:e2:b4:3a:
                    af:0f:cb:40:21:c6:5c:fb:af:ff:ec:95:48:5f:99:
                    5e:ba:e2:e4:10:25:70:ff:ee:a2:d8:0e:96:98:e0:
                    f1:ab:bb:3e:47:f3:b6:db:12:f7:2b:a1:f0:c3:e9:
                    52:a7:eb:ac:e3:04:05:5a:87:fc:86:f1:15:3e:97:
                    e9:5c:09:f3:d0:d9:3d:0a:8c:c4:c7:d3:a5:c4:5c:
                    36:80:34:4d:bd:4b:fb:a2:51:c7:18:75:7e:44:fa:
                    b1:1b:6f:f5:e2:16:9e:11:df:cd:db:0e:d5:0b:10:
                    ec:c5:aa:f0:70:be:05:b1:0c:2b:5b:52:73:b0:04:
                    6b:4c:91:db:7e:d2:e9:64:62:e0:1f:3d:c4:ac:8b:
                    dc:8f:22:a0:aa:1d:08:c5:f5:ff:47:e7:cf:d7:3c:
                    8b:81:3e:83:70:ed:a5:7a:78:aa:1c:1d:d2:5b:e0:
                    86:b6:9c:9f:82:0b:93:f1:59:20:54:ae:df:14:6e:
                    de:ab:3c:19:40:dc:4d:bf:ed:48:47:6d:d0:0e:e4:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3A:D7:82:9C:EB:CF:86:99:AA:8A:B8:F4:52:F3:41:A4:62:84:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc6187d8-7112-3e4c-95c8-3b1a89ec8752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:66:15:fe:5f:1a:92:64:a0:00:7d:07:3f:e0:88:3d:ee:a4:
         71:21:7c:e2:73:f4:b6:5a:f2:42:68:11:55:8b:85:79:73:1a:
         70:e8:ef:db:e6:a7:31:fb:17:3c:ae:b9:23:bb:cf:a2:34:7e:
         f2:81:04:04:06:dd:8e:60:89:8b:eb:44:3f:f9:ad:19:f5:38:
         84:af:94:2b:98:00:ae:39:6c:2d:5f:e9:20:09:9a:36:28:39:
         f6:73:40:56:ab:01:4a:d5:d6:63:91:9a:4c:4f:6b:5d:8c:69:
         8b:ae:af:f8:66:a9:04:6d:d7:79:bd:ab:49:9a:8c:dd:15:d5:
         79:78:90:24:58:02:30:70:28:3f:68:87:3c:c1:40:ff:93:a2:
         51:91:62:bf:dd:90:85:42:9c:eb:05:6a:48:9f:00:ca:66:e7:
         0b:cc:d3:aa:dc:28:5a:83:ee:cb:e7:db:a1:42:77:05:52:21:
         62:ad:af:d4:f4:3b:7c:b1:eb:38:91:ee:5e:84:f7:de:ee:ca:
         4b:78:f4:e5:23:78:09:60:e6:32:93:17:df:5d:04:3a:ac:57:
         df:41:74:e5:1f:1b:f2:bc:ea:b0:56:89:1d:b9:51:e9:6a:1f:
         9b:f8:1b:cb:d2:c0:48:61:f3:93:84:2a:b7:f3:93:de:ec:35:
         2f:82:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:25:39 2026 by rpki-client