Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/72ddf868-6503-3586-9e8a-7983ce18f54e.roa
File:                     72ddf868-6503-3586-9e8a-7983ce18f54e.roa (raw, json)
Hash identifier:          N0Rx2mcL39w0R/g/GRDCR3VUK+RHEXyeCu5Q4R2w4RY=
Subject key identifier:   A9:39:A4:43:9F:DB:52:D9:76:3C:A8:45:D8:19:C8:10:74:0C:0C:7D
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584D386A398B97C18D903B536B40
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/72ddf868-6503-3586-9e8a-7983ce18f54e.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     5744
IP address blocks:        2610:20:5012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:39:8b:97:c1:8d:90:3b:53:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=a10caa67-442a-4ee3-ae9a-937313e9c4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:7c:d2:74:e5:17:29:44:fb:01:88:6e:f1:
                    9e:b6:d7:52:12:ac:37:4c:6f:ca:29:cb:bc:26:ab:
                    f8:83:5a:d6:f1:8c:5a:b3:0a:88:70:dc:2c:1c:b8:
                    69:3d:94:24:a4:cd:2b:68:68:fc:77:54:01:48:d5:
                    27:a8:34:7d:06:d6:9a:dc:ca:4f:fb:ab:ef:8f:09:
                    96:f4:1f:f8:c7:cf:43:b9:c3:95:63:77:c1:e4:81:
                    cf:16:ce:03:19:38:54:d5:c4:e8:d6:bb:75:2b:6d:
                    5e:87:4a:b7:39:26:29:8e:ed:71:62:2c:4b:df:f2:
                    ba:97:d1:ce:2a:02:21:20:bc:8e:73:c8:62:47:02:
                    e0:c0:eb:49:b2:d6:df:83:ce:1e:5d:17:49:bf:fc:
                    b1:0e:f2:1a:5a:88:4d:12:50:25:a7:b0:e4:2a:5b:
                    b0:ba:8e:69:8e:dd:4a:2c:cb:1b:cd:07:92:12:21:
                    2f:07:33:55:80:e2:9a:e2:27:e9:24:00:f3:53:c4:
                    38:44:0f:ae:b7:6a:c8:d7:0d:0f:be:76:bc:83:51:
                    40:13:cc:2c:92:eb:d1:0b:38:3c:f3:04:9b:6b:d5:
                    78:75:c0:e5:b1:7b:21:92:3f:4d:7a:dc:a0:7b:97:
                    f3:d9:32:51:41:97:a6:14:50:fa:67:5d:48:90:c2:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:A4:43:9F:DB:52:D9:76:3C:A8:45:D8:19:C8:10:74:0C:0C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/72ddf868-6503-3586-9e8a-7983ce18f54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b1:ec:4b:dc:12:40:3e:ba:4f:c6:14:4f:ec:6d:c1:3b:bf:
         98:50:11:85:7d:3d:d4:6e:35:30:2a:f5:a4:ec:9a:c9:2d:11:
         9c:52:4f:f2:33:94:01:a6:9d:45:79:f3:48:d6:cb:19:0d:b7:
         58:7d:95:89:33:e2:ce:26:d1:2a:0e:e6:18:b3:d0:f3:1e:f9:
         b1:1f:3f:3d:32:4e:e0:2a:38:44:33:16:f4:62:1d:0b:85:10:
         dc:dc:ce:e7:80:b3:9b:d1:e0:bd:c3:31:96:c8:dd:83:37:9a:
         b7:e7:48:85:6b:3b:77:05:2c:b4:0f:77:ee:d3:d8:74:64:ae:
         de:7b:ae:f2:18:53:ba:a2:79:97:06:88:71:35:fb:9e:4e:50:
         18:8f:f8:bb:f4:f2:75:63:6f:35:e6:92:18:4f:eb:0e:4a:25:
         c9:6d:ab:f3:f6:ab:21:8c:6b:a4:da:b8:45:1c:2d:4c:9b:ec:
         70:10:c0:96:3f:25:40:5d:e7:9c:b3:2c:21:51:36:c3:34:cd:
         29:19:f5:86:e0:1f:f3:b7:22:dc:f7:6d:5a:83:aa:27:df:d4:
         f6:eb:da:40:e6:5c:80:13:24:4d:ed:27:3b:5b:81:6a:5d:17:
         5b:3c:0f:e4:99:a4:63:52:c8:8f:15:f2:52:ba:93:45:f4:4f:
         f0:70:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:08 2026 by rpki-client