Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa
File:                     ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa (raw, json)
Hash identifier:          f/EFneBDgd2fN8Z4X5r++pMa37NSSZcaIURiwSnhxVk=
Subject key identifier:   1B:5E:0C:73:10:BD:A0:B0:E2:8E:BC:3C:7F:5A:1E:C3:95:18:A5:F1
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584D32D4DE1DA5E2E8478B176680
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     4473
IP address blocks:        2607:9bc0:1020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:de:1d:a5:e2:e8:47:8b:17:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=697e2295-a051-46cf-8e5d-64ea32692167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:64:18:c1:1f:e8:8c:2b:0b:94:18:81:a8:
                    40:4e:53:c5:68:22:0b:d9:dc:31:cf:ad:6c:29:13:
                    cf:6f:49:c6:2f:80:d8:2b:70:03:d2:05:ea:b1:72:
                    fd:ee:04:af:ba:bc:80:46:95:bc:82:8e:88:19:d1:
                    7b:53:59:bb:98:82:50:ba:bf:c5:aa:95:28:9d:69:
                    65:ca:89:1b:dd:39:19:ef:ee:13:f4:40:81:85:eb:
                    c9:f4:71:59:59:02:4b:39:ea:2d:1e:8c:85:0a:92:
                    b6:77:42:7e:e0:4d:de:9a:d3:36:76:c8:53:10:02:
                    42:4e:25:7a:36:78:4c:e1:2f:cd:6f:27:b3:a3:d1:
                    ff:19:cc:26:85:7c:87:35:0c:bb:28:66:b6:7c:c9:
                    78:1e:f9:0b:31:c9:9d:d3:80:d0:b0:e1:cc:4c:36:
                    75:b0:60:19:7a:87:44:d3:91:47:6b:4c:70:ea:59:
                    2a:fd:2a:8c:e2:f7:83:4c:cb:34:54:99:dc:dc:c0:
                    c4:5b:61:6c:0d:ba:59:49:3e:f8:28:68:96:86:68:
                    ac:1d:47:b8:d1:e2:99:d8:96:7b:e1:db:ec:f0:32:
                    ad:e5:f2:b1:19:86:47:64:8d:f8:8d:a5:0a:4a:f8:
                    f8:9a:09:8a:5a:da:42:59:d0:6a:cd:32:06:03:11:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:0C:73:10:BD:A0:B0:E2:8E:BC:3C:7F:5A:1E:C3:95:18:A5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:61:36:eb:25:90:37:47:fb:94:cd:90:8d:f4:81:28:bb:5c:
         ff:a8:db:8c:44:66:3d:00:b2:00:2b:02:7c:f8:be:45:9a:2a:
         14:3a:20:23:69:f1:e5:60:c0:a8:12:ae:a3:94:90:dc:24:5a:
         39:6b:ea:29:a8:e1:54:ef:c3:07:a6:7b:59:03:cb:16:85:68:
         71:80:e5:35:9a:1d:4c:ef:7e:15:91:30:81:0b:3f:44:65:ad:
         27:da:eb:58:c9:9d:98:2a:0c:3a:06:0c:63:74:74:6e:51:95:
         6b:c8:92:94:77:bc:ae:b5:da:00:36:2b:e6:40:07:37:ba:c5:
         87:92:30:f8:3b:a8:97:e1:a2:b3:43:86:aa:da:86:c8:42:e6:
         32:e1:68:8c:c8:ad:0d:2f:8c:29:2a:3b:bf:ac:38:77:c8:9a:
         94:ab:48:13:c6:80:78:2a:59:42:e3:75:56:be:ee:60:f8:eb:
         7b:2c:cb:f1:16:21:95:4c:4f:3f:18:5f:d5:35:94:4b:e2:09:
         76:e3:09:78:33:4e:1c:0a:ec:0e:3e:61:58:32:e5:36:cd:82:
         62:ac:4f:48:41:58:42:99:75:f5:c3:6d:79:83:df:62:52:b7:
         98:37:4c:d4:06:fc:5b:4d:33:18:2c:ec:ff:7c:f0:a0:5c:17:
         64:73:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:25 2026 by rpki-client