Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/f280a13a-65f8-3149-ac67-d2e1a6735aaf.roa
File:                     f280a13a-65f8-3149-ac67-d2e1a6735aaf.roa (raw, json)
Hash identifier:          c2rpJsXkwi+lHcaYVyA/yFhTR9pLoEdVnJrdV8gBVzE=
Subject key identifier:   9D:34:BF:F0:0F:35:BF:15:C6:BA:38:A9:DF:D8:1C:1E:58:46:2B:F6
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584DCAFB1ADB9605633946552180
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/f280a13a-65f8-3149-ac67-d2e1a6735aaf.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     22437
IP address blocks:        2604:3fc0:1ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1a:db:96:05:63:39:46:55:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=27f6d5e6-e8bd-40a6-8533-780ae0ca8bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:9a:f8:af:53:12:04:72:53:c1:1c:03:6a:
                    74:ee:97:79:63:34:1a:45:70:14:f1:fe:ce:e0:07:
                    98:f8:44:2a:34:eb:ae:d3:cc:a9:08:64:ed:17:49:
                    14:14:ba:0b:9d:e0:e4:b1:40:b2:69:ec:b0:e3:bb:
                    36:8d:3c:1a:47:c7:52:2e:8a:17:02:5f:55:f0:46:
                    c0:eb:2d:23:44:30:69:e5:da:d9:eb:06:f3:29:87:
                    a2:c8:07:a3:e7:f9:56:98:47:b8:f4:98:9c:a4:23:
                    98:07:70:80:d2:97:13:a6:ad:6d:c1:a8:ae:1a:ed:
                    0d:bc:33:4f:2a:3d:91:dd:90:2d:79:88:71:cb:29:
                    31:74:31:8c:98:3a:f6:8b:c4:4d:fe:b8:38:cc:ae:
                    82:cc:b7:4e:4c:cf:da:a6:a8:e3:54:9e:7f:5f:87:
                    07:85:e4:6c:9b:ca:28:86:be:67:c1:a2:40:b9:82:
                    b4:d7:9e:da:0b:c9:bf:0c:7e:19:d0:52:dc:eb:a9:
                    64:d0:a7:c0:4b:04:89:48:94:64:db:86:3a:3d:0d:
                    c3:45:a0:6a:b2:8c:32:1d:4d:da:17:85:dd:82:71:
                    41:1e:ff:79:54:21:3f:e2:7d:c9:60:eb:70:44:19:
                    7a:c5:0c:e3:2f:8e:3f:da:81:a0:cc:34:bb:e1:d0:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:34:BF:F0:0F:35:BF:15:C6:BA:38:A9:DF:D8:1C:1E:58:46:2B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/f280a13a-65f8-3149-ac67-d2e1a6735aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3fc0:1ab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4d:f6:85:9f:d2:a9:63:34:2d:a5:35:39:a6:83:e3:b9:41:
         db:20:2e:2a:6d:d0:68:66:13:03:14:f4:c3:ae:84:b6:4a:d4:
         bc:a2:7b:27:0b:0c:ad:3a:20:3f:2d:3b:8f:9b:99:e1:9e:0d:
         05:e0:f7:6d:a7:f9:e9:06:42:bd:88:23:f6:88:47:fa:7e:60:
         dc:71:33:b4:6d:ec:b2:bf:14:e4:ec:4d:cf:ff:53:ca:8f:58:
         81:75:7c:49:f0:ab:3a:72:24:83:ad:7e:56:79:b8:07:58:34:
         4c:fc:52:eb:03:11:07:1b:17:00:d9:dc:02:3a:a8:1a:30:41:
         44:31:ac:17:45:14:e2:51:41:43:c3:0b:cc:0f:20:a9:15:74:
         49:da:f9:54:27:97:3a:76:dc:2d:ed:0c:27:a1:39:0b:2e:62:
         fb:62:35:7d:e1:cb:4e:ee:6e:88:bd:6c:af:b1:a4:ef:d1:14:
         7d:99:2f:79:a5:04:07:e1:a1:0f:36:b1:dc:62:7d:35:9f:41:
         e1:d5:b2:1e:a0:de:23:05:0e:d7:de:89:dc:45:f5:74:f7:d0:
         ce:ab:fa:29:c7:66:b6:71:86:9b:cb:e1:62:b1:a0:58:66:02:
         31:d5:b9:be:fc:de:ea:a2:91:b0:68:a5:3c:4c:09:37:99:cc:
         ab:4f:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:32 2026 by rpki-client