Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
File:                     6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa (raw, json)
Hash identifier:          PsvLb/2OjEwp6a3gKgUBYGVf06P5Y7F18H9ZkZyOfCQ=
Subject key identifier:   96:AC:37:6E:26:3F:28:52:B2:E3:09:03:B9:12:31:DB:CB:3F:03:6C
Certificate issuer:       /CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Certificate serial:       010D0C9F4328584D27AA2BB64BE1141B9518BB00
Authority key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     198949
IP address blocks:        167.32.0.0/16 maxlen: 24
                          2605:d840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:2b:b6:4b:e1:14:1b:95:18:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=79a69fca-0ee2-4713-9f7f-1db2c1cd3246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:15:d7:55:35:9f:38:c9:ef:13:43:4e:b4:
                    5a:46:a9:de:f7:e6:f0:c4:8e:5b:61:8a:0e:5c:49:
                    51:5e:92:4e:0a:df:dd:92:63:f7:e6:e0:77:a8:46:
                    f2:5e:34:cd:db:0e:de:8b:a6:8f:48:ef:e1:69:26:
                    05:e9:56:b1:d3:74:b5:fb:c8:0e:da:a8:94:55:96:
                    33:83:f9:f7:2a:14:18:29:48:cf:3a:9f:1f:84:84:
                    c6:73:89:66:3c:b6:18:7a:11:e6:dd:2e:b8:45:d7:
                    22:e3:be:ef:c9:79:61:bc:18:73:2d:6a:a3:86:18:
                    98:15:96:5b:61:d9:a0:72:88:bd:fe:56:04:ea:50:
                    72:23:ee:ae:71:09:46:28:96:e6:55:0f:9a:6e:45:
                    bd:d5:7c:b8:d8:87:28:07:08:0c:36:d8:09:b6:5d:
                    a4:fc:aa:22:b1:04:12:d3:27:31:47:a4:c1:7b:85:
                    87:e1:4a:c6:73:0d:01:95:5f:fc:71:aa:4f:8c:5e:
                    e9:ac:6f:8d:37:64:ef:db:d1:af:ef:b4:5d:14:5f:
                    56:4d:72:d3:01:37:0f:8f:45:75:cf:2b:84:63:ec:
                    3e:6d:a4:9e:f6:4d:f9:2f:bf:97:fd:66:a5:ec:3d:
                    f8:58:7f:6f:9c:4d:6d:e9:4d:06:90:67:00:28:f6:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:37:6E:26:3F:28:52:B2:E3:09:03:B9:12:31:DB:CB:3F:03:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.32.0.0/16
                IPv6:
                  2605:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:c3:38:fb:2a:6d:84:3d:40:96:07:18:00:82:e0:32:34:
         37:22:0a:27:76:e9:d3:0f:3b:c2:58:ac:fc:3c:e4:cf:c0:02:
         d9:91:10:8c:af:a0:69:bb:c4:74:30:c2:c9:b3:80:b5:c0:6f:
         fb:01:ca:64:98:e8:f6:01:64:28:ee:34:0c:09:58:7b:5f:de:
         92:dc:ee:60:b4:9e:c7:b1:f2:af:42:15:eb:34:ff:c4:dd:c1:
         08:02:eb:15:c5:15:9b:a5:cc:93:d1:e4:42:ba:41:89:9b:bd:
         0e:32:35:60:3d:c6:27:fe:45:59:6c:0a:cb:63:8e:9e:b6:52:
         dd:b5:7f:98:aa:dc:06:be:26:58:56:76:39:11:6e:87:1a:21:
         75:82:9d:7c:25:a2:3c:d1:60:9f:76:1c:a1:1d:ad:0f:c7:63:
         35:c9:03:9c:2c:7f:74:11:e5:0b:b6:d6:f9:50:40:4e:14:63:
         7e:7b:af:b8:b8:14:3b:b3:af:38:30:18:56:aa:ce:a7:34:37:
         0e:87:a6:68:d4:76:48:e7:0b:0b:47:28:50:cf:b2:11:b3:23:
         42:8d:19:d0:43:32:49:b1:82:ac:20:1e:03:d1:c8:12:9c:2a:
         02:1a:ed:97:7a:9f:ee:6d:81:d1:48:dc:1a:c3:40:dc:72:62:
         07:a3:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:55 2026 by rpki-client