Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa
File:                     434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa (raw, json)
Hash identifier:          72tTx5mRpGPl6Ciw5bF9HHl2E18DFnZ2iJ49aZlBylI=
Subject key identifier:   B1:03:F6:79:C7:DE:AF:5F:E9:52:BA:7C:A7:FB:AE:26:A4:9E:2F:90
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584D359FBE330C0AC97626977980
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     18934
IP address blocks:        2605:9a40:6b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:be:33:0c:0a:c9:76:26:97:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=6c43ab42-0e95-4172-a587-a09667a57a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:f9:03:69:9d:1f:7b:7d:a9:ee:af:ba:34:
                    ca:ea:96:a6:91:d9:05:a0:78:0a:77:db:a9:c2:3e:
                    de:01:1a:6f:ad:e4:e9:98:74:1e:ff:0d:95:24:44:
                    11:6d:0d:f5:91:2f:ab:6b:e9:f2:01:d0:53:0e:a7:
                    c9:ba:5f:da:12:60:0e:56:91:fc:9b:ad:a1:61:22:
                    b2:ca:7f:10:50:ee:62:3a:9e:ef:14:6b:38:1d:e7:
                    c2:4e:ee:22:34:71:25:e8:c8:e1:0f:12:1a:72:9c:
                    6b:0b:17:3e:51:97:0c:40:b0:58:aa:81:8d:54:69:
                    47:51:4a:d7:59:08:de:03:ce:1d:fe:2d:7d:ae:3f:
                    61:f6:8f:c6:dd:87:7e:e1:50:8f:3b:66:4f:a8:f4:
                    c0:82:45:5c:ac:d1:38:f4:a1:3e:44:e0:d3:89:53:
                    cc:55:37:c5:66:43:70:1d:fc:ab:66:90:db:82:b7:
                    50:f8:9a:9b:93:1c:e6:3d:c0:3c:84:2d:90:23:15:
                    24:c5:60:d7:79:ba:ba:e6:fa:1c:d9:ad:47:0b:f9:
                    9f:25:9c:8f:45:65:cf:db:58:4b:23:8a:9d:14:e3:
                    da:f8:17:db:63:da:04:ed:e2:33:c5:02:fd:dc:a5:
                    78:43:f8:2d:97:4b:fe:61:2b:c2:f4:b7:b3:66:9a:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:03:F6:79:C7:DE:AF:5F:E9:52:BA:7C:A7:FB:AE:26:A4:9E:2F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a40:6b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:47:fb:c3:5b:d0:90:dc:8d:9c:55:26:52:d9:09:d5:48:85:
         a9:13:45:7c:82:ea:9e:61:7e:b5:2f:bc:a6:01:37:6d:d7:47:
         a0:2f:1d:06:ca:a4:73:2e:4c:d4:7e:62:ee:05:0d:6c:a4:ce:
         92:35:f6:57:c5:27:89:9a:0b:65:12:0d:b5:00:ce:01:6d:57:
         0c:de:77:b4:8d:4d:a3:06:26:59:a9:05:f9:38:44:b2:38:2e:
         8e:6f:98:10:5f:67:d3:ae:45:d1:49:cb:03:0b:6e:11:ad:71:
         43:3f:12:4d:37:d2:24:5b:c7:69:20:49:2f:7c:17:69:b6:c4:
         16:83:c4:c2:63:aa:12:bf:47:8d:ea:c0:eb:33:5c:c8:57:40:
         8c:a4:c3:47:36:4c:8e:76:eb:5d:5a:56:b5:2d:29:c4:c6:81:
         28:1e:15:6c:e5:7f:5c:c0:e9:3a:6f:3f:37:24:48:8e:a6:40:
         9a:e3:9d:a5:ee:e1:06:28:21:c1:84:4a:1b:34:52:73:08:c8:
         69:ee:ff:bb:b5:53:45:9d:df:0d:ec:1d:6f:10:cd:09:a3:81:
         be:68:6a:64:02:38:04:79:7d:dc:ea:30:27:b0:77:8d:20:02:
         47:55:8d:43:19:e4:ba:3c:38:0c:6a:84:39:de:41:14:81:51:
         b2:34:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:17 2026 by rpki-client