Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
File:                     878804ae-2c92-32cf-a079-f9b1123410d3.roa (raw, json)
Hash identifier:          yz+AO/RgyUk6E7VIOU/Hta1uTdgTXEf9l2cF6WgmHB8=
Subject key identifier:   1B:3B:F3:34:1E:09:5A:70:8C:53:B2:34:82:E8:B0:4D:EF:A5:C2:6E
Certificate issuer:       /CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
Certificate serial:       010D0C9F4328584DB7702C28DA054562C081FEC0
Authority key identifier: F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     393657
IP address blocks:        2620:13b:a000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2c:28:da:05:45:62:c0:81:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=6f948df7-dbef-4bd2-b137-e8d8122d280a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:00:ab:11:d5:21:dd:9f:57:18:7e:c2:85:6c:
                    36:1b:89:cc:db:86:c7:9b:2b:50:ed:22:5b:fd:b9:
                    d5:e2:9b:6c:29:a9:95:45:44:fd:b7:9c:06:80:9f:
                    cd:15:d0:19:0d:77:5d:b2:6d:86:76:b7:f0:df:1c:
                    95:3d:ae:11:e9:eb:5f:b7:3e:97:18:9d:aa:6a:45:
                    85:93:a1:0e:fd:c9:32:23:ff:42:17:31:3c:53:b7:
                    dd:f6:f6:2a:e4:57:96:4e:f8:06:51:bc:ce:4b:cf:
                    9c:cc:c2:e1:93:48:f1:7e:b8:da:82:8c:a1:bf:93:
                    18:f0:72:6d:e4:e8:ed:9a:ce:75:58:62:ac:08:1e:
                    a2:d3:b6:60:c5:49:ce:80:68:0b:f9:0e:e1:9e:31:
                    69:ec:b3:e3:52:af:be:88:45:53:d7:78:37:08:4e:
                    53:5b:81:48:46:ad:6c:31:6d:2b:6f:96:f2:60:d0:
                    67:08:74:ca:d1:7a:12:4f:59:18:38:d4:ea:49:0d:
                    da:67:09:7f:6e:e7:3d:51:81:46:5f:f3:18:6f:a0:
                    88:30:16:ad:39:ff:25:8f:3c:2d:3c:ef:a7:58:bf:
                    05:35:f1:87:c0:64:98:41:63:43:6e:0e:6d:e9:1c:
                    21:85:6a:06:45:d0:ac:ec:07:16:26:b2:92:f4:47:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:F3:34:1E:09:5A:70:8C:53:B2:34:82:E8:B0:4D:EF:A5:C2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:28:3f:06:a4:bc:b3:5a:ae:6c:85:26:1b:46:58:e5:4a:0f:
         e1:9a:f5:fb:bb:6f:f7:f5:e7:e6:ba:de:9d:b3:3d:51:69:79:
         5b:fc:6d:56:d4:88:59:2b:4f:aa:94:69:e8:d3:dc:2c:b7:d0:
         80:fa:8b:89:01:0c:b8:12:33:b1:e6:8a:08:7a:dd:2f:82:3a:
         22:b4:71:b4:6d:65:23:4e:79:a0:45:bb:1d:5d:00:a3:58:22:
         7b:0a:13:91:c4:3a:04:93:cb:73:4b:0b:e2:a1:2b:c4:41:54:
         55:e4:62:ab:c1:94:30:7d:de:31:e0:7e:38:5b:98:aa:35:20:
         69:9e:78:37:09:6d:81:8d:23:be:54:de:1b:1c:e3:3b:88:4c:
         16:e8:bc:b8:9b:7b:e4:b5:c6:ba:9f:ce:60:05:e7:78:06:26:
         73:37:73:b1:df:3d:5b:60:9f:28:1f:61:19:9d:10:43:19:6f:
         5a:8e:cb:38:80:c2:87:22:6d:40:58:74:8b:7d:be:a0:d3:25:
         e3:63:bf:e7:36:5f:47:eb:e6:28:8e:47:1b:c5:39:f0:7f:c8:
         c7:dd:99:fa:26:12:db:a4:0e:a8:eb:2f:a3:b0:50:aa:d5:49:
         25:7c:2f:f2:4d:d7:48:44:6f:c5:25:a2:b5:a2:51:4b:76:32:
         23:85:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:38 2026 by rpki-client