Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa
File:                     855538ac-c152-3b18-a738-92a0aae00088.roa (raw, json)
Hash identifier:          kNzPTpROtbXaYuOEGRrZC5tfnk0x+cxi8CkAJ7I4g9Q=
Subject key identifier:   D7:F9:16:07:81:73:AE:03:7D:F8:4E:E8:C8:0B:F8:1F:84:B1:29:17
Certificate issuer:       /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Certificate serial:       010D0C9F4328584D95EFF2FCA11B5BD545A8DA80
Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        2605:32c0:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f2:fc:a1:1b:5b:d5:45:a8:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=fd041a3b-7cc8-4172-b2a5-1880c018b07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:7f:41:01:ab:e3:26:4d:ae:cb:5b:98:bd:
                    eb:34:d3:18:34:13:c0:00:6b:32:2d:bf:ab:0e:4a:
                    3b:88:d7:dd:ad:51:9f:b6:d9:b8:56:44:e7:0d:09:
                    7c:b5:c1:86:0a:40:8e:4c:b3:65:29:75:e8:c1:5b:
                    bd:19:ea:bf:54:38:15:71:70:0e:3b:d5:f8:0e:89:
                    24:22:a6:9e:59:4a:74:23:3f:cd:68:50:4f:13:55:
                    98:ae:85:a5:f9:d4:bc:b8:6f:27:4b:58:a5:e3:97:
                    26:d0:36:be:f2:8e:f2:d0:5f:c4:16:81:d6:a8:34:
                    bc:6e:e9:b0:24:6d:bd:b7:d8:06:62:13:96:a7:68:
                    4e:bc:87:f7:cf:29:de:df:4d:d4:cf:47:70:b8:7e:
                    3e:3e:0f:65:ef:2a:ac:07:07:37:e0:8e:4e:f6:53:
                    bb:53:5a:fc:3e:0a:ce:5a:32:1f:54:9a:d6:ee:60:
                    dd:bb:78:ea:a1:52:7e:ec:df:18:07:21:97:da:34:
                    3f:ff:7e:43:bc:40:11:f7:f4:b0:48:88:4c:c1:b0:
                    1d:49:1f:4f:c3:e8:64:48:69:15:4f:21:fc:bc:24:
                    c1:a1:d9:9e:cd:87:b3:68:b4:27:43:2a:54:d8:a7:
                    49:51:0a:9b:06:63:54:74:33:f2:0a:4e:c0:1b:9b:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F9:16:07:81:73:AE:03:7D:F8:4E:E8:C8:0B:F8:1F:84:B1:29:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/855538ac-c152-3b18-a738-92a0aae00088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:32c0:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:52:a1:aa:04:05:83:18:49:44:8d:fa:3a:3a:64:fa:d9:1b:
         97:42:66:d2:75:b6:a5:7f:bc:40:cb:b8:18:2c:af:6d:bd:8d:
         cd:68:9c:4d:3f:ef:61:52:c2:08:19:ec:ff:af:63:8f:26:79:
         72:82:71:85:ed:f3:5a:1d:86:55:2f:e5:21:a5:74:79:b0:32:
         97:59:82:99:77:2b:f8:d9:fb:5e:98:26:2f:3e:68:eb:aa:aa:
         a9:b3:26:a4:0f:42:05:19:c4:12:2e:f0:cf:b1:fc:0d:3f:dc:
         a0:76:a4:10:94:53:42:d0:74:47:53:48:80:37:d0:62:d7:b5:
         cf:7d:41:e9:06:69:44:4d:35:e5:70:4d:18:06:6a:2b:92:a6:
         1b:a6:3b:6f:b4:23:17:5b:18:4c:53:10:55:cc:22:e6:4e:2e:
         ae:3d:be:04:d7:47:db:3c:97:f0:d7:28:84:19:a6:d5:fb:eb:
         24:e0:05:16:e3:62:87:1f:0f:3c:31:5a:dc:5c:55:77:d2:f1:
         01:82:cf:69:b2:b6:2d:70:6f:97:c2:99:70:e6:fc:dc:c7:61:
         09:6a:8b:66:b7:03:3e:46:36:4a:69:61:cb:98:2b:50:54:0a:
         4b:b3:44:60:21:cb:9c:54:e4:48:13:7d:7b:85:35:46:4f:8b:
         a0:ca:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:45 2026 by rpki-client