Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/eb34832d-0f32-31fe-b196-22a1fa986e5e.roa
File:                     eb34832d-0f32-31fe-b196-22a1fa986e5e.roa (raw, json)
Hash identifier:          BPmrjJb4JC+49kH1pOPVJB0b3KX49yx8TFd+kGZ1+1s=
Subject key identifier:   66:BD:4D:F1:8A:F9:3D:44:05:A6:F3:AF:AB:A7:B0:DE:6A:2B:98:6B
Certificate issuer:       /CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
Certificate serial:       010D0C9F4328584D9FB56488E7237E28DA551880
Authority key identifier: 71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/eb34832d-0f32-31fe-b196-22a1fa986e5e.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     398257
IP address blocks:        2620:a5:6000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:64:88:e7:23:7e:28:da:55:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=a3f49c12-7efd-4a15-bf74-43c5f07baab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:e0:40:1a:58:d8:f7:b9:b1:a6:cd:82:75:
                    8a:f7:f2:83:68:60:65:dd:d1:30:bf:83:4c:3a:83:
                    e6:60:f2:95:8f:a6:1a:e7:07:1a:50:bc:64:0c:0f:
                    aa:c0:70:12:07:40:9b:e6:14:d4:37:08:cc:d5:df:
                    2b:43:65:b6:59:1d:96:6d:11:89:f0:29:ce:35:d6:
                    5c:bd:59:b0:72:dd:40:0b:86:70:b0:e6:22:2c:6e:
                    c3:cb:c0:11:1a:17:fe:b7:4c:6e:87:00:54:15:5a:
                    14:ec:f0:a7:50:39:1b:24:cf:eb:16:c6:25:f1:ea:
                    23:1a:22:48:d1:bc:10:a4:ca:bc:78:4e:e4:77:7f:
                    0e:14:5a:db:42:d1:5e:df:73:1e:69:e4:de:c8:7a:
                    49:c0:9c:3a:ee:80:e3:90:20:3a:50:ab:da:6e:38:
                    36:11:7b:26:54:bf:23:a1:fc:22:e7:be:87:2c:62:
                    32:9c:06:a7:ab:ef:bc:7e:5e:d7:cf:2d:77:3c:39:
                    0b:81:25:47:ad:2d:a8:d3:45:38:97:43:f0:37:ad:
                    58:79:41:c7:96:75:01:6b:cc:7a:03:25:51:fb:f5:
                    68:1f:98:a1:6a:90:b4:99:e3:01:02:b1:5c:19:5f:
                    73:6e:70:a4:83:83:69:d6:57:1b:6b:eb:10:16:9a:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BD:4D:F1:8A:F9:3D:44:05:A6:F3:AF:AB:A7:B0:DE:6A:2B:98:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/eb34832d-0f32-31fe-b196-22a1fa986e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl

            X509v3 Authority Key Identifier:
                keyid:71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a5:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:9b:63:9c:a5:17:eb:bb:f1:a7:c3:d7:6f:ee:a7:9c:15:
         80:48:b3:a8:81:38:4f:d5:e0:0b:0d:bd:d8:c0:74:36:15:58:
         11:b1:37:3d:91:4c:0d:db:8d:ac:42:39:06:3b:f6:e6:29:f7:
         f5:66:f3:e3:7c:4c:c5:f0:65:95:00:9c:33:e4:4d:33:0f:49:
         0d:29:60:8c:40:f1:c6:18:0d:99:41:d2:39:8f:41:c0:98:19:
         36:8b:7d:bd:2e:42:e4:4f:bf:94:8a:f4:c5:71:31:ea:d1:93:
         30:5a:28:9c:46:85:8f:b7:ed:a1:67:d7:d2:32:11:b6:22:33:
         05:52:20:7d:7d:7c:2e:2a:60:22:ee:54:1c:d5:b4:17:e7:85:
         86:b9:f6:4e:fb:f2:cc:4b:06:98:64:cf:14:37:af:8d:34:9a:
         21:83:04:dc:5f:ca:b0:ca:1c:98:07:39:5d:3c:99:28:9c:bb:
         3c:da:c0:09:c6:48:32:9d:8c:54:b6:61:a9:4b:04:5d:9c:39:
         b2:3b:b1:67:91:cf:9f:20:7e:4b:e0:a7:e1:c5:af:9a:df:ff:
         39:1a:c1:78:3e:4d:a4:67:ce:e3:53:d7:74:ef:63:33:0b:54:
         fb:0b:ad:a4:c3:ca:14:be:97:d6:ae:94:29:6f:63:cc:e7:1b:
         8d:00:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:05 2026 by rpki-client