Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/41eef9e7-05dd-3353-85e0-443a2845f0ea.roa
File:                     41eef9e7-05dd-3353-85e0-443a2845f0ea.roa (raw, json)
Hash identifier:          UtL5fDqAfWHpntqZWnZJiNjZx3vaXDWbg7En4rdhRkg=
Subject key identifier:   A6:28:C4:68:07:C6:2C:FD:6E:AE:C0:3D:43:F6:B5:19:B7:64:3E:6B
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584D3B34EBB9E385A2C40C0F4F00
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/41eef9e7-05dd-3353-85e0-443a2845f0ea.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     18934
IP address blocks:        2605:9a40:68::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:eb:b9:e3:85:a2:c4:0c:0f:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=3144dadd-d1c8-4bc3-be55-09c81d724844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:bd:3b:7d:70:10:37:92:5d:06:76:10:b6:
                    ab:62:3b:86:86:12:43:08:4f:04:ee:70:44:b7:cc:
                    29:f7:54:72:9a:ac:c3:f2:27:68:36:35:3a:ce:ec:
                    f9:b7:45:bb:15:1b:e8:c8:b3:2b:5a:a0:66:74:c3:
                    70:cb:af:19:a7:01:95:9e:2d:35:03:52:12:52:fc:
                    1e:cf:55:4c:d4:19:c1:1e:43:90:f0:29:7b:04:ad:
                    90:2f:8a:fe:c4:19:58:70:25:32:e8:5c:85:b7:e0:
                    b0:b1:38:e3:3f:61:14:d2:41:3f:d6:72:f0:aa:78:
                    7f:02:3e:28:2c:0e:e1:e4:e0:64:39:fa:03:59:c7:
                    e5:f8:b8:5f:b8:00:da:7a:eb:2f:49:41:d6:d5:19:
                    4a:7e:81:11:bc:ca:1a:21:38:09:c2:72:42:13:5d:
                    a0:b9:29:95:f3:14:3b:44:2c:10:7a:b2:c3:17:cb:
                    10:76:0f:d0:ac:ac:c3:c5:17:ad:ae:81:9d:33:b3:
                    2b:07:52:30:47:62:9e:dc:c5:b5:2c:4f:41:04:d6:
                    5f:f4:9f:24:fd:ba:4c:08:bf:ce:8c:32:e1:01:b1:
                    cb:e2:7e:b3:4c:54:bb:33:bb:ad:ec:d8:27:70:dd:
                    70:f6:0b:db:66:a8:83:9c:52:ae:c9:9e:4f:bd:a2:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:28:C4:68:07:C6:2C:FD:6E:AE:C0:3D:43:F6:B5:19:B7:64:3E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/41eef9e7-05dd-3353-85e0-443a2845f0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a40:68::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:05:27:61:f4:82:ba:32:a7:c6:ca:54:4a:ad:30:9e:d9:be:
         72:53:17:cb:28:3b:01:fd:1e:b6:eb:97:d5:fe:a8:5a:8c:2f:
         f8:03:5b:49:da:4a:81:2b:5a:8a:a8:27:e5:95:bb:2b:d8:74:
         fb:bf:cd:27:11:c6:68:1b:f4:80:82:77:bd:be:87:bb:7a:dd:
         92:c8:a8:99:c8:5d:63:20:26:e6:1c:24:c5:c0:5b:b0:59:5f:
         7f:23:e9:4d:8c:7a:c6:0d:61:a3:c2:22:3c:ac:64:01:ff:6f:
         58:43:40:c1:f7:4f:36:20:b4:4c:10:7c:d9:5a:4c:8c:6c:47:
         04:a4:73:c0:4c:73:09:99:c0:c1:e1:98:a5:15:41:c5:36:d4:
         3c:30:09:99:a4:d8:0a:13:72:67:3e:fd:a1:48:5e:b6:5d:2d:
         08:69:14:3d:a9:10:e5:ec:5e:e5:40:1d:30:af:dd:84:4e:fd:
         87:0a:3c:3f:f0:c3:ea:8d:98:00:ab:82:cb:43:59:e6:f1:44:
         f9:ea:7b:95:01:f2:10:9a:98:da:77:2d:05:14:82:3d:1f:25:
         06:61:c4:fe:d4:3a:b7:f3:af:9a:b0:44:36:be:c2:df:fa:16:
         98:91:45:3f:d6:e6:14:50:2e:33:54:70:fe:4e:bb:af:9f:58:
         cf:a3:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:04 2026 by rpki-client