Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/f5555b4d-a956-333f-b992-e8607559231f.roa
File:                     f5555b4d-a956-333f-b992-e8607559231f.roa (raw, json)
Hash identifier:          oKDSB4sb2uoC288WYWiBAOP2SLgR1HKLvTlOToSz+3I=
Subject key identifier:   BA:D7:76:71:8A:54:2A:1F:FC:96:E3:A9:EE:27:D1:96:EB:AB:41:C0
Certificate issuer:       /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Certificate serial:       010D0C9F4328584D0EA7B47E69AA17787400B180
Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/f5555b4d-a956-333f-b992-e8607559231f.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     63141
IP address blocks:        2620:11b:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:b4:7e:69:aa:17:78:74:00:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=4de9bfde-40c6-45c8-81bd-510c3f6eeb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:a9:1b:7c:c3:97:42:4e:3b:e5:d1:fa:7c:
                    22:9b:88:38:44:b9:fd:7f:3d:f4:72:20:a3:9e:58:
                    45:e7:61:fe:40:d6:00:a3:e0:eb:48:bf:16:98:ce:
                    79:d8:a4:ad:6d:94:4b:a8:4e:9a:8b:20:c2:9e:85:
                    82:14:42:97:ba:b3:ec:e9:03:a1:ff:d0:47:f5:75:
                    5a:9b:62:73:80:82:4c:f6:3d:e3:6e:34:30:39:09:
                    95:1c:cb:b2:da:8e:73:f7:da:2c:9c:f5:46:4e:df:
                    f2:f4:82:69:56:7d:b1:39:7c:ea:e2:a6:9e:6f:e9:
                    88:83:26:d7:b0:36:32:30:1d:d3:1b:08:f3:ed:aa:
                    86:83:73:87:9b:e5:2e:18:bd:41:6b:96:c4:66:c2:
                    c9:32:0b:8c:06:24:11:c6:2a:65:a1:1e:3f:ea:37:
                    29:1f:f9:cc:b0:dd:2e:53:d1:c8:01:51:4a:17:5d:
                    f8:f1:03:25:be:ad:97:9d:2d:2f:d4:bc:f0:f2:47:
                    dc:93:23:eb:60:4c:68:28:82:8c:73:c1:57:3f:6b:
                    86:45:8b:fe:62:f3:5d:23:38:e7:e0:c7:cf:29:8d:
                    ae:de:d0:97:af:13:66:f3:40:2b:8a:d2:11:9b:f5:
                    53:ac:21:bc:24:68:b8:72:06:f5:f0:c4:47:28:5f:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D7:76:71:8A:54:2A:1F:FC:96:E3:A9:EE:27:D1:96:EB:AB:41:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/f5555b4d-a956-333f-b992-e8607559231f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11b:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:aa:e2:e9:d3:40:e3:54:8a:2c:46:37:cd:2f:2d:f3:de:e8:
         a8:f4:48:4a:90:30:1f:e1:45:77:64:00:41:f7:15:4e:b3:f4:
         9a:0b:83:49:76:73:d1:03:48:9c:3f:be:2f:69:f5:79:01:68:
         40:3a:35:8b:a0:98:68:ba:44:7b:58:3d:40:ae:63:ff:e3:db:
         63:e4:39:18:9c:a0:08:0d:12:b2:f6:ef:ad:77:1b:a3:b9:dd:
         ea:0c:05:3a:cf:aa:3d:e3:b7:2a:50:c5:7b:98:63:8d:38:d9:
         be:cc:95:6a:a7:42:64:0d:32:30:d6:91:7b:7f:0d:fd:5b:56:
         0c:e0:e2:be:ac:d4:8b:eb:76:9e:16:55:b5:8d:4e:dd:e4:49:
         78:07:0f:b9:f9:9a:69:d8:44:0e:29:0c:a9:9f:c0:ba:ca:02:
         29:ac:06:d9:1e:64:72:27:17:fb:87:7a:01:b6:47:c7:04:a1:
         10:b5:21:d3:6a:55:da:e3:1d:0d:45:7f:1a:3f:49:ea:4d:d9:
         9d:1c:31:04:f6:c2:ac:7e:87:6c:e8:e7:26:54:74:82:6c:b6:
         68:bb:19:74:8d:10:78:f6:69:9f:f0:6f:37:ff:ed:28:e1:0f:
         36:29:09:ff:59:79:7e:f0:eb:f8:41:1a:03:8b:36:af:45:df:
         50:05:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:34 2026 by rpki-client