Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
File:                     253cdd3a-36e0-3298-9d6b-13208042593e.roa (raw, json)
Hash identifier:          m5fPFcHh9duifilp4pcxlEE0Sk+2TbpUMJUqjxrgcZQ=
Subject key identifier:   90:A0:29:EF:46:A8:12:07:67:77:EE:93:5C:65:87:04:85:7A:2D:75
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584DCAFAFCB49C80CA9F7C9ED880
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     55163
IP address blocks:        2620:109:c006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fc:b4:9c:80:ca:9f:7c:9e:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=fa3cec70-47da-48a2-9a6f-3bc6d28acdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:9c:b0:e8:96:5e:15:13:25:30:20:17:d5:
                    7b:e7:19:da:b5:c0:2f:90:f2:4b:4f:60:29:8b:01:
                    43:7d:48:c0:7a:dd:86:83:11:0e:f9:44:dc:16:e2:
                    ed:71:c0:61:f3:9a:45:1c:2e:20:29:b2:25:1a:68:
                    23:81:4b:84:f8:32:a8:8d:6e:3d:ac:21:e2:dc:af:
                    63:1b:e2:ff:a1:90:4b:ce:43:96:6c:68:94:1b:1b:
                    71:7a:b4:93:87:08:f6:72:01:bc:c2:a4:99:ef:49:
                    ec:44:a7:0b:6c:38:08:67:9b:93:22:92:51:1e:40:
                    54:c9:e1:68:97:7e:f8:bd:7b:e6:6a:84:69:8d:f2:
                    12:3e:4c:81:cc:a5:b7:ff:f9:a2:2d:e2:f8:3d:7e:
                    c4:38:09:b6:02:91:c5:ff:a4:9f:8d:e1:a7:30:7f:
                    9b:6e:fe:8f:93:0e:b3:b3:91:33:92:b5:63:3c:cb:
                    71:3e:cd:41:80:fd:e8:57:0d:80:4b:48:83:8d:34:
                    0c:07:9a:e0:12:76:ca:c5:f2:4b:56:7c:a5:3f:01:
                    6a:26:0c:c7:b0:ab:dc:7e:da:4f:2c:36:74:47:d1:
                    8f:99:af:0d:17:4b:ed:7f:61:d0:12:57:cc:e6:95:
                    26:86:6e:46:15:39:07:58:29:72:c1:1c:21:31:9e:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A0:29:EF:46:A8:12:07:67:77:EE:93:5C:65:87:04:85:7A:2D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:de:76:6c:5b:51:e4:4d:a1:3f:b3:b2:55:28:d5:db:c0:d1:
         66:49:65:ff:6f:0f:bf:f7:5e:06:50:9d:cd:41:19:6c:46:54:
         92:e7:42:0e:7c:76:85:36:94:49:fa:e9:0e:a7:b1:97:6c:0a:
         82:e4:77:43:1a:7f:e6:cb:df:33:0b:a9:a9:56:19:46:98:7c:
         7f:62:07:2a:2e:3f:aa:b5:e8:6c:87:56:b7:f3:2c:47:18:1f:
         af:e0:28:9f:1c:75:62:09:c0:23:b5:cf:bc:e9:02:1a:71:b8:
         d4:a7:73:ff:bf:50:5e:fb:3d:d5:0b:97:be:68:ec:85:f7:2f:
         d8:de:11:8a:95:ad:51:4d:05:37:e1:da:db:c3:d1:91:dc:57:
         e3:2a:c2:66:4d:0f:9c:0b:ba:72:35:e3:b5:a5:a7:26:48:9d:
         7d:82:92:65:35:fb:b2:0f:0d:fe:00:f4:eb:0d:bf:7b:93:46:
         2a:46:08:6c:23:92:32:46:36:05:11:18:a2:b9:3c:09:1a:0c:
         75:15:ec:9b:cf:0f:b4:12:ef:25:aa:62:ef:f6:e9:bb:b6:33:
         1e:f7:4b:a5:c1:37:d2:74:6b:8b:ab:19:54:f6:a5:c7:d4:e0:
         3e:0e:9e:4e:f2:c8:5a:06:58:6d:c5:1b:67:4a:f4:51:ae:da:
         d8:a8:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:11:10 2026 by rpki-client