Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f472fb35-0540-3ebc-ab17-926ca90c1609.roa
File:                     f472fb35-0540-3ebc-ab17-926ca90c1609.roa (raw, json)
Hash identifier:          OfJBmOT/uxJJJRgbPP8fTKgqgQpuUR2ukTrJhEdSA5U=
Subject key identifier:   E4:27:D6:68:A2:4E:06:D3:E5:31:75:47:F7:2A:8E:A3:B0:25:97:62
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584D3C9A176F812377B058880700
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f472fb35-0540-3ebc-ab17-926ca90c1609.roa
Signing time:             Sat 21 Mar 2026 01:00:30 +0000
ROA not before:           Sat 21 Mar 2026 01:00:30 +0000
ROA not after:            Fri 19 Jun 2026 01:00:30 +0000
asID:                     212238
IP address blocks:        2607:6b80:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3c:9a:17:6f:81:23:77:b0:58:88:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar 21 01:00:30 2026 GMT
            Not After : Jun 19 01:00:30 2026 GMT
        Subject: CN=b995b90f-d954-4edb-8a77-542c04ab6e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:75:09:5f:14:10:9c:d8:ca:0d:65:f8:26:
                    b4:98:f4:e4:a6:fc:f9:bf:a3:19:60:69:20:10:b3:
                    90:68:78:db:36:5e:11:83:7b:57:2a:c1:0e:c4:39:
                    42:61:52:6e:34:d9:4b:ef:15:fb:f5:56:d4:9d:50:
                    9a:f2:63:aa:4c:45:e3:22:0a:a5:54:d8:5a:cc:06:
                    8a:0d:70:fd:7f:49:16:4f:c5:e8:5c:24:83:eb:56:
                    ac:d4:76:21:36:ce:48:2d:5e:96:6f:ed:a5:0c:6d:
                    b8:89:e8:11:01:8d:6f:3d:e0:e9:20:a8:7b:dd:e2:
                    39:b6:48:aa:c3:52:65:d0:cd:00:3a:8f:47:6a:33:
                    f5:9d:03:1e:e6:e6:a3:7e:dd:76:ab:cc:94:18:69:
                    0a:12:7c:f2:62:4a:85:be:3f:ed:9e:c2:d6:f6:1b:
                    e2:e1:c4:77:8c:a1:4e:dd:6b:e1:89:0d:f3:cc:51:
                    2c:53:9a:ba:69:4f:6f:42:02:f8:3b:bc:ba:ce:d4:
                    99:4f:26:ba:70:fa:55:f7:7a:52:93:49:4d:6f:50:
                    9a:8b:0a:0b:ca:f2:88:aa:f6:a4:14:8e:a1:18:df:
                    ca:bf:80:2c:22:b6:2e:66:c0:cc:a9:f7:97:33:c5:
                    68:a3:59:0a:7d:58:cd:ef:07:8e:a5:48:ea:be:9b:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:27:D6:68:A2:4E:06:D3:E5:31:75:47:F7:2A:8E:A3:B0:25:97:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f472fb35-0540-3ebc-ab17-926ca90c1609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:88:1e:bf:b0:27:83:ec:4b:2e:b3:da:61:2e:fa:8c:7f:00:
         6d:72:ba:2e:36:1d:77:39:32:dc:fe:a2:57:24:9b:88:b4:0e:
         ae:4d:7d:10:27:e0:cc:83:87:3c:af:c3:e9:f2:9e:71:d1:60:
         d5:d9:a3:63:07:52:dd:4b:99:5a:f7:16:74:c4:de:8d:2f:ab:
         c2:b1:25:ac:ae:64:cc:19:72:5e:27:6e:69:17:c6:ed:c0:c6:
         ff:6e:e3:23:f7:a0:9d:8d:72:e8:a4:91:ff:bb:8f:bb:4a:e4:
         d8:b9:00:d1:c3:7f:95:b1:4c:0e:b5:bc:1d:56:65:de:aa:b1:
         34:b7:d9:bd:04:40:6e:c3:37:48:8c:b0:8c:ff:02:08:bd:0e:
         c6:26:2a:91:8c:13:e8:c4:4e:fd:d0:ca:6a:ef:d1:74:36:75:
         05:d9:c6:19:85:ee:4d:9c:45:35:7e:ed:f9:ca:1f:bc:c2:e8:
         c8:fc:85:d2:7b:f7:08:27:64:bc:21:3f:82:88:8b:21:de:bb:
         73:7f:52:62:c4:c1:a5:fb:9c:e0:75:6d:29:f6:ee:ab:e8:04:
         5a:0a:77:43:47:a2:99:0f:f1:3b:c6:61:c5:2a:49:3d:85:ed:
         a3:6f:c6:1b:07:08:e2:a6:d5:3d:3e:e8:3e:1d:73:14:75:ad:
         c7:31:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:17 2026 by rpki-client