Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e6e14818-b9ab-306f-9960-99d31c1ada78.roa
File:                     e6e14818-b9ab-306f-9960-99d31c1ada78.roa (raw, json)
Hash identifier:          ipsIoQN6OndoCZTcM6UZR2hIx24/4gaIxt068EHZqYA=
Subject key identifier:   6F:39:E9:B1:EA:6A:09:79:D3:F2:42:44:0E:53:99:EA:1B:36:EB:50
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584D40CA53B568A0B3FE95796680
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e6e14818-b9ab-306f-9960-99d31c1ada78.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        2001:504:13::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:53:b5:68:a0:b3:fe:95:79:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a3509327-a9cb-4638-96ae-f34d1e43c9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:94:2d:c5:6f:d2:89:c0:8a:31:65:c4:ab:cc:
                    ee:2e:a9:df:d0:54:38:9d:b9:87:1a:e1:89:0c:14:
                    98:55:e9:38:bb:cd:80:d9:aa:9a:51:9a:ed:63:d3:
                    69:b2:bb:eb:d2:a7:43:32:68:10:ca:4e:c0:f3:17:
                    f4:a2:dd:03:7a:75:8a:e0:05:57:da:0d:92:68:ab:
                    f4:ed:3b:37:65:8f:ac:44:11:2a:46:57:00:8d:7d:
                    29:b5:9a:8e:67:81:f4:95:c7:ef:0d:7b:bf:2e:11:
                    70:2c:06:d6:ef:2f:fb:de:93:04:86:31:45:82:f4:
                    19:eb:9f:0a:86:dc:1a:2b:33:18:e7:60:a7:e9:e2:
                    5f:92:f3:3f:be:a8:bb:f0:af:47:52:15:54:29:e1:
                    b5:18:85:16:73:5b:11:25:11:ed:97:39:f5:49:6e:
                    1d:9c:2d:fe:10:e3:77:c7:86:19:4d:ff:ad:13:7a:
                    0a:d8:7c:3d:a2:70:a0:4e:07:d1:5a:37:bf:9d:cf:
                    d5:10:15:52:2d:63:61:60:2c:12:f6:8e:c5:88:20:
                    05:57:40:b3:77:e2:10:67:d2:38:ec:87:f9:ca:5e:
                    a2:ec:7a:47:67:2d:cc:38:aa:84:8b:81:0c:ab:33:
                    c5:5c:57:35:5f:74:df:ce:9d:4b:33:80:c3:14:5d:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:E9:B1:EA:6A:09:79:D3:F2:42:44:0E:53:99:EA:1B:36:EB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e6e14818-b9ab-306f-9960-99d31c1ada78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:45:90:e6:05:61:43:3c:44:54:d0:1d:0e:03:e8:a2:ef:9e:
         d6:ed:4a:67:eb:d4:cd:de:21:8e:66:1e:74:1c:45:90:af:84:
         e8:a4:fc:e5:b3:e3:1e:94:c2:ab:9f:38:00:e7:f3:ce:0a:17:
         14:46:61:e6:0c:94:d5:f9:dc:01:51:41:01:5c:a0:b1:0c:df:
         71:3a:28:17:a7:46:df:5d:31:82:67:3e:fc:fe:94:b9:0b:8b:
         d6:9f:58:9d:ca:a5:fd:4e:ba:7c:67:36:33:91:60:fd:49:bd:
         7e:da:5a:06:9c:2d:26:ec:ad:73:9f:7c:cd:1f:97:09:54:47:
         b1:37:c8:b6:be:42:09:57:cf:bc:d1:54:86:7c:d1:31:e2:42:
         96:cc:c0:c1:b3:0f:79:b7:df:d4:e8:a2:57:60:68:b8:2e:7d:
         02:49:d7:6b:1d:72:66:f2:18:7f:32:21:ea:07:58:90:3f:89:
         13:61:41:8c:1b:2f:04:9f:3a:32:fc:0c:6c:14:57:c7:e4:b1:
         dc:4d:59:7b:b0:91:cc:2c:6a:86:be:6c:73:95:ae:2a:a7:70:
         71:e9:e0:04:34:e5:58:56:b0:23:64:a6:44:84:f3:d5:de:e9:
         b7:24:28:01:eb:ed:0c:b8:2e:76:81:2d:14:cc:5a:1a:ae:35:
         35:52:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:17 2026 by rpki-client