Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/73467a9f-fc3c-3166-9d97-015626cd2c94.roa
File:                     73467a9f-fc3c-3166-9d97-015626cd2c94.roa (raw, json)
Hash identifier:          B9v85aWxPPEqg3r+30FUyF4n8yCyQzMhQXSGyDXZeT4=
Subject key identifier:   40:5B:14:A1:89:95:2B:E8:63:12:00:21:E2:BC:4F:64:A0:E2:F9:6D
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584D905AA17B7C2371C0A0BFE280
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/73467a9f-fc3c-3166-9d97-015626cd2c94.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2607:dbc0:400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a1:7b:7c:23:71:c0:a0:bf:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=036f6a80-6c47-40b1-bc6d-38fe19b27b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:c7:fb:c5:4f:5e:b7:db:05:a5:5e:2e:6f:
                    a4:d0:63:5f:7d:f0:5b:3d:69:61:19:35:00:54:f2:
                    b7:5c:e6:00:c4:38:b3:75:42:1f:3d:b9:5d:3f:ae:
                    b6:8e:02:9c:c8:42:c1:3d:14:97:79:ed:c3:fb:f8:
                    95:d4:4c:e1:3e:db:3b:77:db:8c:ac:bc:24:6d:a7:
                    73:01:93:ad:22:89:ae:ed:50:f8:ad:27:9e:5b:22:
                    e4:64:9c:29:84:d9:a0:88:32:5e:86:6f:ca:3d:c4:
                    c3:d0:2f:b3:67:b6:1d:ff:bf:c6:b1:b1:ca:0a:2e:
                    a4:e0:f7:54:8e:e3:c9:96:62:12:3f:96:39:e5:c0:
                    d0:aa:8b:a0:b4:73:b5:6f:3a:f2:15:e2:f1:70:1f:
                    7a:b6:d3:c0:98:96:3f:00:9b:7d:88:33:cc:60:91:
                    a2:78:1e:ce:1a:cc:fd:b3:1f:47:89:a9:2e:e8:a7:
                    2d:39:2c:e8:81:62:e1:0e:a3:ed:3f:fd:b3:ea:f9:
                    3d:00:f4:ab:b1:0f:b5:74:82:7c:85:64:40:7d:a6:
                    18:9a:73:91:58:3d:b4:fc:5c:36:04:fd:0e:fd:79:
                    df:c1:19:d1:45:27:57:f1:a9:e4:6a:c8:f5:10:92:
                    a3:f6:de:40:05:82:87:34:75:68:35:e4:34:77:74:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:14:A1:89:95:2B:E8:63:12:00:21:E2:BC:4F:64:A0:E2:F9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/73467a9f-fc3c-3166-9d97-015626cd2c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:87:ba:09:09:4a:f9:23:7b:ba:33:6e:3e:26:45:96:35:99:
         7c:5d:ba:1c:e3:f3:96:31:2b:c4:0d:6a:69:77:c0:55:cc:69:
         79:65:6d:72:97:58:59:54:bd:9f:4d:2a:53:72:b1:2c:c7:c9:
         67:a3:bd:7f:00:4d:46:3e:3c:c9:65:7e:cd:b6:dc:07:5e:48:
         53:52:39:ce:4d:57:d1:f6:1a:c9:c4:d2:6c:8a:f4:7d:13:b9:
         c6:1b:88:fe:a6:1a:c5:14:58:03:ce:e0:27:3a:3b:27:43:28:
         d9:40:42:1e:57:7f:48:60:39:3d:9a:89:8d:d3:38:11:22:cd:
         42:2e:43:af:6c:37:f0:2a:a9:79:2a:20:4c:e9:32:eb:63:0d:
         8b:5b:46:b9:dd:ba:8c:58:88:91:f8:a9:eb:1f:2d:be:6e:18:
         21:ee:94:07:f7:22:13:a5:5b:6a:51:f7:86:e9:8d:5b:6c:1c:
         f4:4a:e4:58:42:4e:bb:22:f3:1a:fc:de:22:8a:9f:c6:1d:ca:
         e3:4d:6c:a6:35:f3:19:52:a2:0e:b2:64:95:17:1e:0c:4c:7b:
         a2:fa:6c:ce:52:17:a7:b7:1a:6c:c5:a6:5a:70:d9:48:84:a2:
         21:de:7b:87:b8:0e:d4:41:f9:cd:e3:d4:43:a2:c9:cb:a5:0a:
         0b:fd:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:28 2026 by rpki-client