Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa
File:                     e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa (raw, json)
Hash identifier:          GuYG3dI2iSIv3p5ihcyb2TilgpNCiFvGF7yiUmfD6cw=
Subject key identifier:   4A:D0:4E:46:8E:B5:EE:3C:30:54:08:91:BC:48:2F:9F:ED:71:0A:96
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC3D27221896F9D325E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8218::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c3:d2:72:21:89:6f:9d:32:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1916a6dc-bc40-46bf-b36f-7d59887811d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:50:5e:72:ca:a5:2c:c9:a0:6b:2f:9e:1c:
                    b1:a7:15:a8:db:ec:2a:e1:27:86:d5:0f:0a:6a:f8:
                    94:a1:b2:5a:27:b4:ba:af:30:da:fb:19:6a:c1:88:
                    b1:d3:4b:01:67:9e:ba:a5:7e:f1:86:97:10:99:3d:
                    50:14:b5:80:d6:96:8e:66:5b:ec:66:7f:30:a2:f0:
                    61:61:dc:0e:7b:bf:b9:54:36:ed:2c:5d:2f:37:56:
                    fd:8b:27:1c:aa:26:f4:9a:ae:57:2f:1f:02:48:68:
                    ae:8c:21:1b:be:43:ba:b0:96:ac:d8:00:e9:81:73:
                    4e:3a:a6:72:e1:31:74:0f:08:22:64:72:da:77:02:
                    99:57:d6:33:1e:ea:be:34:54:1d:bb:2f:dc:fd:ea:
                    98:b6:1c:b9:8a:59:c1:8f:ee:6e:91:7d:20:43:b9:
                    43:e7:a0:30:3f:a6:37:c7:0c:b4:e4:99:15:fd:a9:
                    ca:fd:47:e8:df:62:97:57:8f:47:18:cf:1a:80:03:
                    32:2d:9e:39:9b:a5:12:f0:e3:e1:8d:ec:c6:fb:a0:
                    7b:a7:be:f6:6f:e4:40:26:67:23:d8:a2:fc:ca:44:
                    f3:cb:98:05:d2:12:77:50:3e:b9:25:9e:cb:db:d5:
                    22:d0:e4:45:89:8a:3f:12:0c:3b:a7:fa:a0:86:07:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D0:4E:46:8E:B5:EE:3C:30:54:08:91:BC:48:2F:9F:ED:71:0A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8218::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:ab:19:1c:ec:36:e3:38:ec:d4:8b:0a:f5:39:d7:55:73:
         4f:f3:3b:59:ec:8e:7f:8b:bf:ec:c5:7d:86:34:fb:bf:95:d4:
         db:c9:0e:c6:9b:a7:53:e8:16:82:13:50:aa:7c:37:c9:d1:de:
         15:2e:b3:15:42:b6:d4:7c:8a:95:52:eb:5b:3d:52:65:95:a7:
         6b:5c:1b:2d:05:7a:e7:06:05:4b:58:af:47:e6:51:57:e4:b0:
         b3:36:02:a3:f8:c2:a5:04:a8:74:e8:91:38:83:a9:64:28:9b:
         ec:dc:87:17:40:a2:f2:04:8f:47:9e:60:aa:08:66:d5:e0:5e:
         ec:76:de:17:7c:10:67:4e:5c:65:21:31:6a:ab:4b:83:87:6f:
         67:a2:96:69:31:a2:9f:04:c5:bb:88:94:8f:03:0e:39:49:cc:
         7b:a9:6f:42:34:aa:ec:6d:ab:48:7e:e3:6d:38:80:7b:3d:c5:
         f9:7a:86:93:74:ee:34:6a:8a:d3:5b:b6:5d:18:ee:2f:55:f4:
         3b:2e:4d:9b:f4:03:b1:08:90:e9:84:2e:70:16:cf:e0:af:56:
         5d:46:64:40:a6:83:8a:76:11:a2:dc:d1:63:a2:a9:dd:9f:ec:
         f4:f9:d5:81:1e:eb:24:90:10:af:89:15:6a:f8:75:39:74:88:
         34:57:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:23 2026 by rpki-client