Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fe73f0fc-fb9d-3677-977d-b155876310eb.roa
File:                     fe73f0fc-fb9d-3677-977d-b155876310eb.roa (raw, json)
Hash identifier:          2V2VC3HabQ8ZVEtwp8VJeaYxEr2IRnITUpnhPHeqQMs=
Subject key identifier:   5A:7D:33:25:DF:B5:43:B3:CA:4A:6A:30:16:E3:21:F0:C5:84:91:CF
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584D91C02241D70AE73F0D136A20
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fe73f0fc-fb9d-3677-977d-b155876310eb.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     14618
IP address blocks:        2607:dbc0:c00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:22:41:d7:0a:e7:3f:0d:13:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=b0f14e26-886e-48f8-9872-9e59da3503d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:71:2d:fb:b8:4f:33:a6:22:82:31:e1:4f:08:
                    8c:2d:0e:92:05:37:9d:36:36:b4:3d:a8:93:72:ec:
                    db:a5:72:8e:17:20:15:d7:c3:12:60:96:25:11:4d:
                    e7:fc:c2:73:b0:9a:ca:3d:3f:4e:25:4a:72:a5:50:
                    31:9b:8e:9f:76:2f:61:54:77:6f:c4:1a:ef:9d:2f:
                    5a:eb:30:fe:77:21:7e:3b:0f:8e:61:19:ae:c1:5b:
                    62:2d:e4:e8:0c:64:5e:82:23:ed:45:06:a3:74:22:
                    80:4a:0b:a6:1e:17:88:79:99:db:bc:07:07:6e:fe:
                    99:ca:65:cf:25:b2:05:64:82:15:86:7e:da:ff:d6:
                    50:ce:6d:7b:e1:54:ac:a8:66:59:94:1f:94:01:91:
                    b2:dd:c5:50:3c:19:98:51:ab:ee:2c:14:57:33:93:
                    2d:ad:9e:43:cc:fb:07:0e:29:eb:d5:b6:34:92:22:
                    5b:22:17:12:d6:cb:1d:5b:56:5f:ba:41:f4:d1:7f:
                    34:49:aa:d3:b9:c2:cd:9f:b1:df:98:76:57:49:be:
                    19:27:4c:19:4a:45:25:1f:a2:01:e9:1e:71:72:13:
                    8c:07:ce:70:c8:6b:81:38:48:49:06:94:b7:43:3a:
                    e5:2c:56:9f:16:c8:4e:58:8e:ba:e1:27:a3:f4:54:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:33:25:DF:B5:43:B3:CA:4A:6A:30:16:E3:21:F0:C5:84:91:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/fe73f0fc-fb9d-3677-977d-b155876310eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:c00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:bf:fc:f5:cf:fa:71:dd:0f:06:c6:bf:c7:26:bb:7d:14:cb:
         70:ec:6a:44:58:e6:41:a3:c8:b6:23:0e:a3:57:9e:1d:b6:c1:
         fb:56:02:2b:aa:b7:bc:75:d0:e6:d5:34:da:c9:6a:d9:70:21:
         7b:f7:59:11:60:a8:bf:cf:ec:ae:00:38:af:77:52:77:2d:7a:
         92:a4:74:f2:a6:fd:18:27:cd:93:fb:a6:f2:17:62:0d:cd:66:
         f3:e8:02:e8:07:3a:86:20:d3:46:30:c7:00:65:3e:9c:ee:3f:
         03:91:39:b4:6a:3e:d3:49:64:7e:87:f4:b0:7e:68:1e:77:03:
         fe:6b:06:72:33:9e:10:98:60:a5:1f:79:d4:b1:c4:04:73:df:
         8a:f2:f2:76:df:ad:b5:c1:5a:17:ad:7b:88:cd:3b:dd:3f:ec:
         29:45:4a:9b:59:19:4d:e2:98:67:c1:0e:c0:2b:0f:01:b8:e3:
         91:e9:7d:cf:52:13:a0:a0:44:ba:0c:e9:2f:4c:0c:6a:e4:75:
         c2:5c:9f:04:75:ec:e0:5f:5d:f4:34:81:9a:4f:7e:b8:19:d0:
         de:0c:5d:b8:28:1c:39:fe:14:30:cd:a1:b2:ca:ac:53:49:33:
         0b:a0:7d:9e:fb:6e:f3:06:01:13:6f:42:a3:44:fb:f4:fc:cc:
         d6:1a:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:04:10 2026 by rpki-client