Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/fa414485-139d-389b-9463-e7927e00b8bc.roa
File:                     fa414485-139d-389b-9463-e7927e00b8bc.roa (raw, json)
Hash identifier:          53xB17IADaQN4HKaIwmt0Mytn0As5+e1wFkhTWrV7vI=
Subject key identifier:   74:C2:D5:8A:F9:EB:2C:FA:03:73:31:F1:3A:64:AE:37:80:38:0A:BA
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584D359FD08C57B5F0FB4A413500
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/fa414485-139d-389b-9463-e7927e00b8bc.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     212238
IP address blocks:        2607:6b80:44::/48 maxlen: 48
                          2607:6b80:45::/48 maxlen: 48
                          2607:6b80:47::/48 maxlen: 48
                          2607:6b80:48::/48 maxlen: 48
                          2607:6b80:50::/48 maxlen: 48
                          2607:6b80:6f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:d0:8c:57:b5:f0:fb:4a:41:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=c29625d1-e7a6-4571-9726-69838d9f57ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:d3:9d:f7:c6:27:2d:00:83:61:d5:a7:af:
                    d9:32:b8:84:a7:a0:70:c5:29:f7:5c:65:4e:13:20:
                    e9:11:49:77:67:49:4a:60:c3:e3:51:0a:e1:c8:f2:
                    69:2d:9e:89:84:91:c3:5b:e2:09:00:2e:f5:5d:78:
                    4d:f9:74:9c:f1:f8:1b:36:ba:2d:c6:17:67:b6:d1:
                    4d:99:fc:b5:99:86:d3:df:49:c4:b0:71:08:77:af:
                    c6:4d:13:a5:aa:82:d5:6f:b2:21:42:10:f6:73:f5:
                    cc:73:c2:4d:3e:07:33:87:bd:9c:a8:45:40:f5:d2:
                    bd:24:62:6c:43:18:cd:8f:78:ca:00:97:91:10:3c:
                    e8:b9:4e:18:b0:79:f0:2a:0e:91:f4:4f:eb:c0:99:
                    0a:e9:0f:79:d4:cb:14:76:e6:ec:be:36:0a:1f:69:
                    a5:8d:97:f9:1b:fc:92:7c:9b:12:fc:ea:be:64:a6:
                    cc:30:98:50:a0:00:55:f4:7d:8c:63:e6:2b:fe:a4:
                    52:47:ed:08:64:12:c4:50:51:55:cf:b5:ae:17:7e:
                    4a:a1:75:e1:ca:8b:59:d0:25:76:ff:f6:21:f0:df:
                    93:11:7c:4e:c6:26:56:bf:74:76:6e:40:48:d8:5d:
                    88:b3:60:d4:95:50:d4:fd:7b:f6:35:5b:30:1f:c1:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C2:D5:8A:F9:EB:2C:FA:03:73:31:F1:3A:64:AE:37:80:38:0A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/fa414485-139d-389b-9463-e7927e00b8bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:44::/47
                  2607:6b80:47::-2607:6b80:48:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:50::/48
                  2607:6b80:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:7e:e9:60:18:d6:df:ca:58:e1:9c:81:7d:dd:a6:4f:79:
         2c:26:9d:a7:b6:5f:05:88:68:75:45:6e:fc:44:10:42:b8:02:
         be:2c:c9:1e:1a:b9:61:2f:6d:25:fc:c8:e8:98:af:88:60:93:
         7c:5a:5a:2d:26:21:cf:84:6c:dc:fb:20:25:de:82:af:df:ee:
         b6:82:9c:99:3b:1e:1c:d1:9d:e2:78:1d:ec:9e:98:5c:5b:8a:
         12:c2:cd:21:c6:09:2a:ec:7a:4f:c1:18:ff:d2:55:7a:4e:9c:
         48:1d:63:71:21:9b:86:ff:7d:5e:8f:8c:b9:61:99:37:3f:47:
         5f:cd:18:30:67:43:ea:c2:fa:9e:10:54:da:21:37:10:d0:d9:
         a7:40:65:6a:ab:1c:d2:d0:67:d6:ba:32:68:58:c5:b9:c5:54:
         07:d3:fd:09:54:89:07:7a:ea:a2:65:53:ff:9d:0d:c2:db:a2:
         41:08:f8:13:c8:53:db:66:76:2b:1f:df:6d:19:ac:22:26:bf:
         8b:e0:ff:26:98:b8:a0:21:64:da:55:19:be:f1:da:a6:f7:2c:
         04:a8:99:9e:41:52:be:42:d0:94:26:8d:b5:90:bf:b9:9f:88:
         a6:e0:a0:a8:3f:93:42:3f:40:19:32:61:e3:b3:9c:30:6a:a6:
         b2:95:e5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:02 2026 by rpki-client