Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/c7caf0d3-91d7-34ef-bb65-290b537c7f9a.roa
File:                     c7caf0d3-91d7-34ef-bb65-290b537c7f9a.roa (raw, json)
Hash identifier:          IE3UP5VQT2ow6EIyJ+i7jJ2XZzxecUdYgcUZdO9y+Wo=
Subject key identifier:   DF:75:4C:51:B3:B1:07:EC:DF:8E:DA:77:B3:9A:D1:44:4A:22:5F:28
Certificate issuer:       /CN=8715c48f-238b-4492-ab94-609edd679287
Certificate serial:       010D0C9F4328584DA8157CCD7D61FE779DAEE9A7
Authority key identifier: 15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/c7caf0d3-91d7-34ef-bb65-290b537c7f9a.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     1829
IP address blocks:        2620:126:4005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:7c:cd:7d:61:fe:77:9d:ae:e9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8715c48f-238b-4492-ab94-609edd679287
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=83e3a214-167a-43fd-9d53-afa7cbf64f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:f6:24:bd:83:39:37:66:fb:4a:6f:48:6c:
                    69:5c:9c:bd:73:ce:c5:d9:b9:83:95:40:25:c0:53:
                    ba:21:0f:e4:05:66:90:52:89:7b:22:38:7e:7b:0f:
                    da:1a:48:13:92:5c:cb:00:20:ac:01:d1:a7:64:ab:
                    e3:80:3a:1e:82:7e:42:27:60:05:41:7f:9f:ef:b4:
                    1f:ea:2e:28:2a:0f:e7:3f:4b:09:79:32:1f:84:49:
                    0f:c8:a0:ff:64:32:5b:28:ed:4a:53:49:58:d9:b1:
                    0c:62:b6:91:bd:5f:a3:2b:29:34:25:a6:bc:1d:41:
                    ec:a5:7b:bc:7b:1c:10:40:99:d9:25:a6:b4:26:8a:
                    de:2b:b6:68:d1:07:69:e5:29:9c:1c:25:a9:36:20:
                    21:6d:70:73:b3:11:ff:45:78:b3:70:59:1a:b8:42:
                    f2:ff:dc:8f:c1:8b:fc:f3:3d:99:a7:6c:ac:0e:ee:
                    7f:b5:1e:4d:60:16:b6:fc:77:a7:be:e8:b5:23:65:
                    aa:ec:61:a5:a6:73:67:07:3e:fd:28:f7:f7:58:0f:
                    91:a9:ef:90:8b:0f:8d:fd:99:39:2c:e2:e5:cc:58:
                    f7:ff:f1:98:ab:3a:7e:ac:a6:a3:e6:fd:10:f8:a6:
                    02:f0:e1:05:d5:bf:e0:0e:e2:26:93:64:07:0e:87:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:4C:51:B3:B1:07:EC:DF:8E:DA:77:B3:9A:D1:44:4A:22:5F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/c7caf0d3-91d7-34ef-bb65-290b537c7f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl

            X509v3 Authority Key Identifier:
                keyid:15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:126:4005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4e:8c:19:c4:82:a0:1e:30:5b:f8:70:eb:96:c4:2d:34:6b:
         82:29:06:8b:72:ba:1d:e2:43:6f:ca:78:62:9f:24:df:4d:9e:
         76:7e:6b:32:64:a7:bc:36:cf:59:22:0d:3a:54:99:5e:83:94:
         28:d4:1e:88:ab:a1:1a:98:7c:c0:e8:d8:99:e2:b0:a7:74:9c:
         ba:c4:f9:8a:a0:87:de:ae:af:4b:2a:ac:28:fc:45:e0:49:7e:
         ac:72:87:8d:5c:90:05:d4:99:55:ba:de:66:c4:fc:f2:54:63:
         8b:cc:ce:de:b4:c8:53:ae:05:6f:23:f4:e5:51:a8:4a:e8:18:
         11:f3:51:9f:3e:11:21:0b:bb:36:81:9f:51:eb:91:73:84:e7:
         0d:9f:26:4b:5d:1a:d9:ed:16:aa:46:60:ca:fa:28:9e:5c:04:
         f5:6c:0f:f6:2a:47:b0:65:29:71:1a:7b:93:09:7b:de:97:ad:
         06:ad:d4:79:fd:a0:e5:5a:a6:d3:e8:c1:80:12:4a:a9:55:3e:
         6c:db:d9:c6:d4:e2:67:d6:2c:00:3b:79:86:93:ab:22:c9:c6:
         c1:24:fe:3c:a1:b0:5c:5d:ae:9d:36:3d:0e:48:32:2d:cc:f0:
         87:6d:22:5d:60:2e:fa:69:1a:a7:4a:5e:6b:35:b8:bf:71:56:
         a7:71:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:52 2026 by rpki-client