Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa
File:                     a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa (raw, json)
Hash identifier:          LE2aNlFUntV+C/tzr3FT5bKqjZOXlINb/ChbRP/Ou+w=
Subject key identifier:   AE:8C:0B:2D:02:3A:0C:C7:9A:E5:BA:15:7A:AA:F1:F0:47:3E:48:12
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584DADAACED1486A9123D8710660
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     21947
IP address blocks:        2604:300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ce:d1:48:6a:91:23:d8:71:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=386b2f67-f342-4c5f-be79-cde185f6cbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:22:e8:ec:02:61:bf:05:7f:aa:58:57:6e:
                    21:1f:6d:1f:42:eb:5b:a2:9f:f7:86:e3:80:4b:64:
                    ca:62:c4:de:2e:5e:6d:70:dd:d2:dd:bc:a2:c6:38:
                    67:5c:f4:a8:64:81:d0:2c:10:86:41:a9:5b:d1:b6:
                    b0:61:71:f4:6c:56:f9:4c:57:b3:48:d1:81:42:bd:
                    92:06:d8:5f:a8:62:18:6e:9c:04:f6:00:06:58:0d:
                    08:54:23:a7:bb:bf:3f:7a:32:39:1f:4f:40:7d:24:
                    2e:0c:e8:e3:cc:82:bc:17:b2:c1:f6:b5:d7:5f:d4:
                    ea:63:ad:5d:2f:7d:4e:2e:51:19:86:23:b2:5e:e6:
                    03:56:ec:1a:12:24:2e:e9:86:bc:47:3e:37:a1:6f:
                    8f:2a:d4:62:92:00:79:a8:60:1a:00:57:27:91:83:
                    45:5f:de:48:49:c7:1b:dd:f9:21:97:08:3d:76:0a:
                    49:96:64:76:21:8c:44:72:ac:35:fc:ee:e5:a8:70:
                    01:df:2a:e8:ef:f1:ff:af:6f:a5:16:7d:74:e2:72:
                    9c:00:54:26:2c:1f:3d:d0:b2:31:98:b1:6b:4e:6a:
                    65:86:b6:bf:36:a3:78:f0:73:98:8e:db:25:cd:83:
                    d2:00:0f:e5:39:e0:a9:cb:74:ac:ae:4a:1c:4d:18:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:0B:2D:02:3A:0C:C7:9A:E5:BA:15:7A:AA:F1:F0:47:3E:48:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8c:8e:ad:6d:63:5d:09:c9:ce:c9:9f:00:56:4e:5b:a2:82:
         d3:fb:21:9e:78:6e:b9:11:06:c6:f8:e2:a5:56:f2:5b:2e:3b:
         3e:cd:9b:8b:d6:05:a2:54:7c:48:2e:cc:ac:bf:ad:a4:1e:4d:
         d0:06:ec:8e:4c:ca:06:8a:de:50:93:94:2d:dc:93:c8:d8:4f:
         22:ef:49:7f:5a:50:fd:43:1c:02:b3:a2:06:a8:e5:ab:84:b6:
         c9:15:90:ff:ed:03:82:5a:18:b1:91:13:30:ff:4e:6a:91:e2:
         e2:46:d8:9b:73:15:89:a8:ef:64:14:14:dc:d9:20:25:e1:59:
         14:c7:9b:2d:0e:3c:93:77:d8:31:e3:6f:12:3a:f7:7d:6e:cc:
         7f:60:9c:90:ec:6d:06:57:73:ef:b8:ba:56:b9:26:78:74:86:
         b9:9a:0d:67:6e:0b:7a:23:05:69:d7:c6:ef:fb:a8:42:49:0f:
         37:64:6d:42:07:6d:ef:c1:0a:b3:a1:73:fd:95:05:77:f4:58:
         bb:0e:05:37:e8:2d:66:33:a1:80:94:50:f1:e3:e4:fb:74:a6:
         a0:fe:03:09:5d:7a:61:0d:44:ca:9b:b5:3d:79:ff:62:1c:8f:
         6f:06:3c:34:84:ef:ee:6a:fd:3a:ad:bb:39:0a:d8:75:bc:1f:
         30:09:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:38 2026 by rpki-client