Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa
File:                     eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json)
Hash identifier:          AKqHAtFnjajp4ZfQUutg/nCJuUkvvWRWoGPpw1JeohQ=
Subject key identifier:   E3:00:87:4B:6F:F0:B2:17:F5:73:71:A2:C0:E8:C2:87:9B:30:82:76
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DAC458F9D1036D234263BDB40
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     54858
IP address blocks:        2001:1868::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:8f:9d:10:36:d2:34:26:3b:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=8a68b5cf-aeac-44e9-9d42-7945b72c4ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:4a:be:99:39:54:83:6f:51:cd:e5:b2:ef:
                    72:94:bb:9d:fd:6a:fa:f7:bc:69:e1:1c:f5:64:c2:
                    65:3a:23:9a:16:db:83:3d:c3:72:2c:ad:a2:23:0d:
                    7f:96:7a:8a:72:7a:42:89:ff:1f:d5:d0:2f:95:08:
                    1e:04:6e:f4:41:5b:4b:28:1f:37:51:39:6c:26:6d:
                    ae:9e:87:9d:e2:fa:b4:9f:18:d3:3c:8b:af:80:d7:
                    da:4c:d1:ed:7b:60:6d:cd:24:cc:c2:26:79:40:ac:
                    5c:47:4b:c2:2a:f5:4f:27:bf:e7:16:f1:8f:a7:70:
                    8e:f8:65:7c:76:d6:a4:9d:35:80:c2:d5:46:48:19:
                    82:cc:ec:14:eb:fc:be:77:5c:cb:7f:47:15:2d:b4:
                    43:9c:14:ee:dd:dc:d2:9f:97:e3:1d:32:29:84:c8:
                    81:d4:e2:d8:fa:7a:e9:dd:2d:a5:d4:e7:0e:8d:1e:
                    2b:63:41:0e:2d:da:10:81:10:6e:c6:e6:b7:89:c2:
                    03:75:db:49:e9:48:c2:70:39:af:f7:15:6f:35:a1:
                    be:59:85:2e:bb:95:ee:60:6e:77:7d:2f:52:0e:88:
                    53:93:e6:7c:86:b7:9c:e2:b2:35:07:cd:33:ce:c9:
                    41:cc:26:42:dc:5e:b0:15:03:33:aa:75:e0:4c:5d:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:87:4B:6F:F0:B2:17:F5:73:71:A2:C0:E8:C2:87:9B:30:82:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1868::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:8e:38:b5:96:75:e1:f3:22:3d:8e:75:08:30:37:eb:c4:
         f6:b4:8d:9d:9b:00:cb:98:b0:b6:f6:88:36:76:f1:50:3e:67:
         ed:eb:d0:c8:34:8b:4d:f1:95:3d:08:98:b4:8c:64:54:a8:2b:
         7a:4d:99:c5:99:e1:22:78:66:df:8b:0c:da:c8:dc:50:11:da:
         66:5d:0b:63:55:d9:21:be:4d:0a:2f:60:b9:cb:ad:d2:34:d2:
         5a:29:98:86:60:ec:5b:e5:db:7c:8e:70:4e:54:72:85:f8:5b:
         b3:50:40:4d:57:d1:35:0f:16:8a:70:d1:f1:98:e8:f1:97:ee:
         ea:1f:42:9b:28:45:bd:d7:4c:d7:7b:79:6f:23:42:b4:28:e5:
         80:6e:2b:8b:62:89:b1:7f:11:8e:d1:2c:2d:8e:75:8a:25:1c:
         79:9e:89:52:71:93:58:e8:3f:c6:0c:27:ce:04:e0:fb:63:43:
         9b:91:91:60:24:37:27:a5:1b:54:ba:c6:28:2f:f8:e0:70:53:
         3c:06:0a:ef:d2:c2:95:43:c1:49:86:8b:5e:a5:0e:c1:ce:d6:
         af:cc:16:bf:25:78:87:24:6e:59:1c:0d:d0:fb:6c:64:a3:1b:
         d4:7e:05:87:78:2c:f8:df:e1:dd:41:af:d7:4a:0a:27:f3:12:
         87:9b:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:10 2026 by rpki-client