Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa
File:                     f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa (raw, json)
Hash identifier:          HPit2a3iUqx7D/Wmy8Yh0Dm2U+YVO46OIONKxbdai0U=
Subject key identifier:   90:82:04:07:FD:8B:E2:5F:C1:CA:1B:9B:99:E3:C5:4B:CF:B2:72:B9
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584D352658A2FB10363364D0B9F0
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa
Signing time:             Wed 18 Mar 2026 08:56:41 +0000
ROA not before:           Wed 18 Mar 2026 08:56:41 +0000
ROA not after:            Tue 16 Jun 2026 08:56:41 +0000
asID:                     16766
IP address blocks:        2604:e700:40::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:26:58:a2:fb:10:36:33:64:d0:b9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Mar 18 08:56:41 2026 GMT
            Not After : Jun 16 08:56:41 2026 GMT
        Subject: CN=7d3f8b13-5f71-4149-8845-59172c50f97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:44:92:d7:bd:2f:de:fa:3d:25:31:83:b0:
                    0f:35:28:85:95:ea:a9:69:f2:72:41:4a:be:d0:71:
                    37:e2:de:41:94:3b:86:ab:06:0f:08:4d:f9:24:e9:
                    2f:d0:a4:88:2e:40:fa:22:2c:32:06:13:e9:63:76:
                    e1:c5:90:09:3a:30:ec:33:8d:cd:85:1f:01:b6:be:
                    44:53:3b:8a:84:aa:1a:49:24:c6:39:f8:47:77:e4:
                    bc:ed:fe:8f:58:7a:bd:bd:1b:a0:02:24:49:c3:8a:
                    28:bc:25:df:79:23:78:c9:c6:1f:51:7a:9c:b7:fb:
                    39:c9:81:11:ce:b1:e6:b0:7c:90:d8:82:6b:ff:9c:
                    33:af:23:97:30:5a:91:db:5d:51:67:81:03:9b:5f:
                    eb:c2:cf:75:9a:fa:ce:7f:48:d2:a5:23:a4:ea:62:
                    ac:25:51:74:d3:56:71:51:2d:78:1f:23:c4:41:9d:
                    f7:31:a8:dd:f4:6d:9e:32:e5:d2:37:db:8f:cf:f7:
                    76:f3:16:98:6d:fc:59:fa:a8:a8:3d:ff:76:d6:67:
                    18:a4:27:0c:3d:8d:73:72:63:d6:56:d5:bb:6b:3d:
                    46:cf:24:ce:e0:ae:dd:21:e0:7f:e8:e0:9b:99:4e:
                    2c:bc:3b:ca:4a:e8:dd:c9:5e:e7:bf:54:79:8e:70:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:04:07:FD:8B:E2:5F:C1:CA:1B:9B:99:E3:C5:4B:CF:B2:72:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/f31b9b30-0c81-3376-8af9-4573a8d16f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e700:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:cd:b2:da:05:0a:d1:e6:08:6b:d3:10:5b:49:79:ca:6a:
         a4:02:b2:2d:79:c6:2b:76:87:f5:7b:11:d0:3f:42:b4:00:9d:
         60:08:5f:7b:49:9d:49:d3:22:17:03:55:45:23:9e:fb:04:cd:
         81:70:8c:02:7d:c8:23:53:53:96:04:ba:df:75:f1:ed:06:04:
         71:ec:13:bc:05:07:b9:b0:05:0c:d4:6d:56:6e:17:9f:65:d7:
         34:a2:08:54:a3:fd:22:f0:9c:ec:c1:87:a0:41:55:45:3b:ff:
         8a:1e:15:02:aa:59:61:10:c2:97:23:8a:13:06:9f:0f:d6:cc:
         87:40:7c:5c:29:72:cd:fc:84:26:6b:ff:3f:8c:04:d9:fe:8c:
         aa:02:2b:d5:77:2a:f0:95:0c:1b:93:05:f6:39:49:a7:7e:05:
         15:2d:d2:56:34:af:e0:10:1e:aa:4a:dd:7a:39:e0:ef:66:32:
         d6:0a:13:87:49:76:88:c7:a6:77:e4:0d:79:a6:b4:9c:b5:12:
         fe:e3:c3:4f:4d:8a:19:9f:97:6d:d7:8a:7f:50:c3:38:98:de:
         c6:48:4c:9d:b8:cf:22:8c:76:09:74:1e:81:fe:4c:b6:e5:46:
         62:90:13:69:c4:97:7e:8b:6e:41:35:2f:6f:f6:c6:eb:e4:df:
         f8:ac:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:14 2026 by rpki-client