Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1a4212a7-95c6-33ff-8064-e8b56cef8b74.roa
File:                     1a4212a7-95c6-33ff-8064-e8b56cef8b74.roa (raw, json)
Hash identifier:          j6/bIKzIqGeocq4IKAyHeWzE60o0ZlEPJWZJETZV0QA=
Subject key identifier:   3C:F2:2F:5D:93:82:01:7C:A8:DA:B1:20:C2:88:4F:AB:3D:46:13:73
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584D905AA1F23068F8800E6DFC40
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1a4212a7-95c6-33ff-8064-e8b56cef8b74.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2607:dbc0:840::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a1:f2:30:68:f8:80:0e:6d:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=baf6ab52-ab49-45ad-8119-6021a82b637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:54:c2:ee:d2:35:aa:41:64:da:ba:fe:b5:
                    c1:18:8a:e7:80:4f:00:80:1d:37:58:64:f7:2f:ba:
                    b8:f9:41:9d:d7:6c:bf:36:a0:8e:47:1b:31:3e:e4:
                    6e:bc:ee:f8:b8:b8:7c:93:fa:51:02:23:a7:74:34:
                    0f:32:dd:a9:89:8b:ad:ff:d9:bc:66:95:3c:e4:25:
                    f8:1c:3a:29:1f:3b:ef:3e:7a:96:c9:e0:40:b3:a5:
                    f0:ed:40:94:db:63:b5:4e:cf:aa:4d:87:40:5c:53:
                    4a:62:c4:8f:47:f5:3c:89:00:b3:e0:67:ac:27:42:
                    06:98:41:2e:ee:ca:af:38:42:30:3b:95:36:50:2e:
                    f1:74:25:ae:36:1c:e9:a2:f8:91:a0:c4:1a:d7:9d:
                    b7:69:3a:c1:72:9b:a6:0d:69:64:6a:c5:7e:25:2f:
                    bd:32:f5:b7:fd:ce:c3:6b:48:85:0c:36:1d:cc:af:
                    9f:87:a8:0a:c1:1e:68:fd:27:de:31:a0:8d:ac:03:
                    4e:7d:b2:e7:24:f3:39:66:99:b2:31:bf:16:75:25:
                    bb:62:3f:2b:71:ae:0f:83:29:04:3f:bc:12:ce:47:
                    fa:f2:55:e2:07:86:0b:19:ea:43:0c:b9:aa:08:c0:
                    b4:28:02:48:80:bc:7e:8a:92:35:1c:60:78:e5:58:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:2F:5D:93:82:01:7C:A8:DA:B1:20:C2:88:4F:AB:3D:46:13:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1a4212a7-95c6-33ff-8064-e8b56cef8b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:840::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:0b:24:db:1b:2c:75:28:49:98:f3:96:65:6e:6e:39:f4:
         2e:c9:95:f2:de:dd:dd:7a:e5:8e:6d:fa:07:ae:be:a6:4c:2a:
         90:bb:8e:a7:b6:37:93:09:70:21:6d:04:ce:11:7b:ec:32:ac:
         90:19:d3:bf:7d:f6:3b:b9:ba:d3:03:61:65:ed:40:5b:7c:88:
         1c:7e:06:ac:97:45:12:95:bc:b2:2a:39:b9:64:9f:ba:43:e3:
         67:d3:03:77:83:64:f5:a1:54:9b:d9:cb:86:3a:33:21:24:75:
         95:88:2f:67:5a:33:7c:21:df:56:a9:2c:62:1b:2f:bc:27:18:
         31:60:93:30:34:46:75:96:c1:d3:0f:7c:0f:65:a5:20:e2:6b:
         5d:c7:c4:9a:22:58:74:64:68:8a:b0:b9:ad:03:8c:aa:84:28:
         a5:92:cd:0a:71:0b:ca:f9:27:3b:19:1b:d4:27:c4:ad:96:74:
         e0:ad:3c:eb:e1:b3:1f:b1:b9:b8:52:10:36:8d:ba:20:4b:0a:
         a1:17:c7:11:be:92:70:c8:0d:67:1b:83:de:c0:5a:ec:f4:f5:
         61:d7:0c:6f:a3:73:ac:11:26:48:fa:83:fa:59:0b:9e:ed:71:
         dd:c2:37:ef:ab:1e:aa:0c:7a:6d:00:29:b3:e4:89:83:51:d6:
         e1:d5:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:34 2026 by rpki-client