Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa
File:                     7a86ba22-c035-3bfb-a1df-7032c02b18de.roa (raw, json)
Hash identifier:          52M5lG3CadJR06sLxqt/widSPQYbgpC4o49usQ87oWU=
Subject key identifier:   12:AF:8E:79:B4:18:CA:01:D0:E3:F3:C8:F1:D2:CE:98:EE:D1:24:B2
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584D143D7F555D1C789A197987C0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     30823
IP address blocks:        2605:7980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:7f:55:5d:1c:78:9a:19:79:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=64838502-0496-43c1-9252-97a1be2caab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:9c:82:a9:f4:69:65:ce:86:ff:48:02:58:
                    eb:04:ca:08:58:5d:3e:96:58:d3:a3:3e:1a:10:aa:
                    b9:40:de:82:d1:3e:52:1b:c1:f5:45:59:dc:be:d2:
                    c7:7c:f3:bf:21:30:a5:42:93:1b:b5:d2:94:79:7c:
                    87:74:c2:91:b9:cb:59:3d:22:75:0b:03:f1:35:3b:
                    d2:8a:35:8f:59:54:4f:5f:01:df:3c:23:86:89:de:
                    2a:b6:77:4c:7f:9f:d3:83:a9:b3:6a:b7:d6:b2:15:
                    36:75:44:d8:82:64:2b:98:2c:02:a7:b6:b8:dd:59:
                    74:9b:7a:4d:2c:48:e0:b1:2c:b4:17:18:36:87:d6:
                    f5:cd:70:fe:11:1f:e9:ff:d0:0d:ff:e6:94:34:0f:
                    af:65:fc:10:c0:b8:a5:c6:ff:e7:ce:a2:92:1b:8e:
                    9a:b7:d0:30:51:c5:bf:f3:a9:46:c2:4c:c1:a2:b6:
                    da:e8:d2:33:b7:78:c9:09:ff:89:9e:27:56:7f:ca:
                    83:c3:f0:97:ce:7e:9e:54:8d:98:71:53:2e:4c:b7:
                    cc:28:a5:d2:38:8d:22:62:e1:79:fc:60:5e:89:e6:
                    8f:75:42:c5:b8:2b:97:56:98:15:38:f3:9a:d8:5e:
                    98:97:8d:68:d5:47:cb:e8:d8:5e:40:98:9a:7d:75:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:8E:79:B4:18:CA:01:D0:E3:F3:C8:F1:D2:CE:98:EE:D1:24:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:c4:da:af:ab:49:9f:57:6d:3a:b1:8a:71:7a:37:e1:4f:
         0f:3c:bd:ce:63:8a:3d:05:46:bd:9d:dd:c3:17:e3:0b:2c:23:
         cb:e1:c7:bc:0a:21:f9:ba:04:50:34:87:f3:37:08:03:e8:65:
         d4:1b:2a:b7:a0:92:9c:9d:82:fb:44:41:f8:9f:c6:13:61:b7:
         f3:83:76:c0:ae:ad:08:3e:ad:27:cb:82:82:79:4f:7c:17:26:
         bb:47:a1:a6:22:d7:ad:58:8c:3f:29:ff:ba:74:46:b4:48:7f:
         04:38:7e:c7:94:f9:6a:89:07:2a:d1:60:20:f1:3a:8b:3b:9a:
         98:56:aa:91:e8:2d:5e:6d:48:c0:ae:8d:5a:fa:de:db:f3:ff:
         4a:0a:d3:79:29:bc:72:3b:53:ac:64:27:66:4e:6e:93:f5:b3:
         93:08:b6:b4:84:c0:a4:11:31:34:86:06:f9:71:f4:30:62:fb:
         a8:28:8c:de:41:58:20:84:49:52:cc:eb:16:7b:4b:1b:4c:9d:
         55:fc:2a:bd:be:94:cd:52:b1:fe:cc:5f:88:59:4e:ba:e0:b4:
         fd:75:45:b1:f5:eb:48:aa:67:61:9e:2a:b4:9b:37:68:bf:11:
         9f:61:f2:d1:3c:46:5b:15:f1:98:a7:93:7f:1a:45:80:b8:6f:
         82:52:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:12 2026 by rpki-client