Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
File:                     7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa (raw, json)
Hash identifier:          BaABWaoVTIW0MXbFVErBb+ZYXiD/uV57hup/nqQGYYQ=
Subject key identifier:   5E:9A:0F:5B:81:AB:FC:46:A1:60:5F:6F:DB:E3:12:1B:17:81:B6:6C
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584D4A8F9ECFD5F0808E1248C080
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     62728
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:9e:cf:d5:f0:80:8e:12:48:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=a4ae905f-26c0-41ae-9c48-48cdd05868e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:3b:fe:d6:f6:a3:c3:d4:b6:01:d0:a3:36:
                    b1:5a:4f:22:c0:e7:f7:d3:68:d3:c7:27:1b:c9:6d:
                    04:dc:1b:98:10:e1:e0:a7:53:da:7a:cb:a9:21:ef:
                    26:4b:95:ef:c2:3f:a2:59:69:85:aa:ad:9e:29:0d:
                    6d:c2:58:06:a1:54:c2:51:c2:c8:f5:08:8a:3c:ea:
                    09:b4:51:53:b3:ee:e4:9d:96:3a:e8:6f:5c:9c:89:
                    5e:e0:71:35:45:70:02:59:cf:f5:dd:d9:76:4e:24:
                    a4:5e:13:0b:d8:b1:4d:99:01:3e:95:0a:d9:bc:99:
                    82:6a:9f:c1:eb:3a:34:a3:30:95:12:af:83:c0:b4:
                    33:72:dd:52:2a:56:d3:c8:97:be:a8:b0:87:29:00:
                    84:44:9d:ae:18:5b:72:ec:fd:4c:3f:00:84:86:b9:
                    66:05:45:a1:94:3e:e5:cc:12:40:ba:80:dc:f4:e6:
                    5c:ec:c7:50:33:59:a9:7c:7b:31:da:84:6f:69:f7:
                    28:cf:91:cd:1d:ea:2d:e2:50:e2:78:a7:62:a9:3f:
                    de:94:29:b5:c2:98:cd:78:de:47:5d:10:85:fc:b1:
                    30:eb:a6:64:0a:5b:3f:6c:01:3f:fa:f0:db:da:d8:
                    3d:14:c8:fa:db:ad:6c:8b:72:2a:7e:19:52:10:d4:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9A:0F:5B:81:AB:FC:46:A1:60:5F:6F:DB:E3:12:1B:17:81:B6:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:88:5a:84:1f:a7:cc:bf:e5:6d:f3:6e:ce:9b:d2:ca:fe:
         1d:4c:84:5b:37:ae:7e:b4:86:de:57:f7:3a:9c:00:24:52:73:
         74:7d:bb:c2:e8:07:8a:d5:38:98:12:75:b9:6b:b1:5f:09:90:
         75:5e:aa:6d:e6:35:2c:32:c1:a5:43:83:dd:f5:71:6f:fc:93:
         99:c0:b5:69:e8:a2:87:07:5b:a0:24:a1:9f:c9:0e:49:0c:69:
         cc:c6:c0:78:9c:92:db:6b:e9:d3:69:52:58:13:91:0c:f9:a7:
         1a:fc:22:c3:b7:11:be:11:c1:67:c7:af:64:4b:e7:c6:60:fe:
         c0:ed:fc:52:3e:fa:e2:c8:6a:82:9d:68:de:cc:b1:e4:a5:70:
         81:a0:ff:e9:b9:c5:f5:73:d3:28:11:5b:e8:df:0b:74:25:9e:
         f2:56:bc:33:55:21:a6:78:59:7f:d3:a5:5f:94:6c:c6:ed:2f:
         c8:35:a9:3a:1e:47:8c:e1:43:29:a8:af:cc:95:62:61:e9:21:
         29:75:15:07:ad:91:38:2d:cc:f8:64:08:cd:cd:87:10:57:a0:
         ee:84:30:95:1d:b6:b8:c0:ae:51:11:cc:66:0f:f6:73:75:e8:
         9d:b6:4a:51:56:3d:b5:70:e0:0b:fd:92:43:43:b4:99:a1:ee:
         42:4b:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:46 2026 by rpki-client