Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa
File:                     d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa (raw, json)
Hash identifier:          oBcyOX6AqLUyHYU8G1tFbxq/Gr0/6ZPOEMU+gIrn4Yk=
Subject key identifier:   AF:6A:E0:2E:86:EE:30:22:E4:DA:17:64:FA:6D:D9:26:6A:E0:6B:5F
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F4328584D44FA4624C07B0894C7166960
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     46632
IP address blocks:        2604:3800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:46:24:c0:7b:08:94:c7:16:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=90c152bc-aac7-4825-8cc0-9761a306d4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:00:a5:35:31:40:a4:00:5d:5e:12:33:6e:
                    56:fe:6f:d0:12:24:02:6b:d8:b6:14:1a:eb:97:3c:
                    6a:27:a2:46:9c:10:a5:46:44:d7:57:f8:04:78:71:
                    83:58:a2:0d:cb:6e:42:1c:b8:38:50:ac:a1:2e:e2:
                    18:32:22:cb:98:fc:f7:6f:81:d0:ea:1f:e9:e9:c9:
                    98:17:ce:2b:24:75:7c:3f:37:6e:8d:e9:40:41:dd:
                    08:e4:f4:32:ee:9f:ac:ac:c4:40:15:b4:0f:79:ae:
                    cd:e8:83:57:97:07:d6:fc:b6:7d:aa:dc:89:93:ae:
                    9a:48:10:5f:a1:bb:e2:97:bd:4a:60:15:5a:2f:11:
                    99:ff:10:86:39:a8:4a:e4:dd:fd:37:da:9f:6e:c4:
                    d2:b1:1e:cd:b3:07:55:2b:b3:bd:76:85:4a:76:bb:
                    12:44:3d:f1:4f:a4:e8:a1:62:c3:ba:6b:bd:c5:1d:
                    08:02:75:81:6c:e8:3e:38:b0:57:63:42:83:3b:a4:
                    07:cb:a2:33:5b:04:30:58:b8:58:a9:7e:89:f6:28:
                    84:fa:fc:3e:3a:c7:53:40:70:66:74:2c:be:ae:4e:
                    3c:7e:29:d0:fb:d1:25:44:ff:13:79:8d:7f:52:95:
                    d0:b4:23:2f:87:70:68:4c:83:b6:7f:9d:fd:ac:f4:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:E0:2E:86:EE:30:22:E4:DA:17:64:FA:6D:D9:26:6A:E0:6B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:26:4a:f3:34:cf:ac:4a:ed:a2:85:e5:50:9e:64:9f:a1:6d:
         86:28:5d:63:63:39:22:73:2a:7d:a9:22:ea:cb:dd:81:16:a1:
         96:a9:10:46:1c:d9:4c:51:df:b9:e2:c5:83:73:c5:8e:6b:61:
         a7:7f:5f:c5:f8:a8:7f:68:50:3a:1e:54:b7:fc:12:92:41:4e:
         11:d8:a9:5e:f0:63:a3:ef:aa:c0:90:fd:8a:7c:91:94:88:e2:
         38:44:47:9b:62:f8:b4:4a:07:46:4e:fa:18:1b:3b:54:87:20:
         75:1b:7a:e7:26:6c:5a:57:15:96:14:52:7d:8a:1f:7c:7d:62:
         f8:d5:71:43:c6:51:d6:81:0d:6f:4b:f4:f2:da:7d:7b:25:ae:
         e8:50:57:37:3c:54:3a:b7:2f:0f:7e:92:47:5f:4a:11:0a:e8:
         eb:3e:7c:fc:cc:6f:de:50:e2:5b:87:5d:88:19:c3:5b:72:d0:
         3f:f3:cc:10:38:0b:0a:24:61:c1:a2:42:6d:03:e6:b1:14:ba:
         19:4c:9b:c8:57:11:5d:01:af:33:61:60:53:94:f5:5e:26:8e:
         0b:4e:ee:f8:84:02:30:a3:d1:a5:33:b6:0a:58:4a:98:f9:c7:
         a7:97:97:ce:ad:23:40:e9:fa:d1:ca:a2:d0:62:8e:c4:35:8d:
         c7:ef:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:29 2026 by rpki-client