Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa
File:                     87fd3f04-d60b-368d-b9a6-05d1924127f0.roa (raw, json)
Hash identifier:          GVaBV2H/BlS1yyitXtotCj95ikQMWIaccwiv+jk4gi0=
Subject key identifier:   8F:38:CC:F5:8F:53:8E:F1:5A:DD:D7:E2:86:25:C9:8A:0B:A7:78:65
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584D4A8F989EB9AFC9F5B550A640
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     4809
IP address blocks:        2605:9d80:9000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:98:9e:b9:af:c9:f5:b5:50:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=a6c66671-047f-4b72-8a70-485215cf349b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:20:2e:2c:9b:47:0a:66:24:d2:cc:09:cb:
                    a9:27:25:77:b3:a4:3d:85:2d:26:33:33:60:0c:9c:
                    fb:54:80:9e:17:d3:0c:f3:2b:10:17:c6:27:fb:8e:
                    49:25:a2:98:1e:b9:27:d0:10:28:5c:ad:d2:b2:05:
                    ae:de:e4:b6:de:33:24:d7:71:bf:fe:4b:82:d9:c4:
                    31:7f:62:be:8f:fb:d8:46:e8:ed:0c:83:4d:52:09:
                    aa:13:3b:83:33:8a:90:19:1c:fe:55:d5:99:69:89:
                    50:ab:9d:af:71:1d:7e:cc:8f:75:36:88:3d:dc:7d:
                    1a:b6:63:d7:44:73:a1:e3:8d:39:d1:3c:40:1c:c1:
                    cb:fd:74:33:64:4a:ee:ed:e0:41:5a:89:ef:2f:52:
                    23:78:94:7c:30:27:dc:36:fd:16:c9:ac:ef:fe:73:
                    3b:b5:24:a0:87:35:9e:d7:79:ad:bb:3a:3b:a9:a4:
                    1e:2a:d7:46:69:0b:c3:a2:ce:aa:8c:0d:64:db:1c:
                    41:e2:a5:a4:83:cd:5f:d9:2e:e7:1f:14:71:14:38:
                    99:d0:75:6b:49:9b:3d:8f:f9:69:df:41:8d:5b:4c:
                    5f:36:22:8f:ca:c8:d1:f3:e9:6b:ee:2e:28:4f:6e:
                    e7:3e:f0:82:64:ad:ff:0b:fe:46:9b:94:06:ee:c2:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:38:CC:F5:8F:53:8E:F1:5A:DD:D7:E2:86:25:C9:8A:0B:A7:78:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:13:f0:96:36:e2:23:cc:28:15:2a:a2:a6:46:79:a4:68:
         8c:0b:0a:59:93:8f:fe:10:9f:80:f2:5b:11:97:6c:da:42:2a:
         e5:48:78:93:41:01:59:ba:38:0f:f7:ac:10:71:2e:47:88:32:
         35:53:f3:3b:a7:87:dc:12:b0:67:0f:ae:40:0d:54:b5:b2:04:
         6e:4e:c3:8f:19:5d:48:54:7b:9a:77:9f:b2:5c:34:23:96:3b:
         fb:0f:64:ef:bd:be:44:be:54:f9:f4:f4:43:38:e6:d3:a7:f4:
         93:14:9e:a3:62:a5:20:39:76:4b:3e:37:c3:3b:46:0b:c8:e6:
         43:5e:80:2c:95:c7:52:36:ea:77:06:bb:37:f3:7d:2a:36:90:
         05:7a:97:b9:b0:34:a7:e5:cb:ff:3e:f1:c1:3c:56:dd:68:27:
         d0:df:d3:61:02:8e:ea:21:49:77:87:c8:cd:fe:1d:9c:2e:48:
         f2:00:67:62:a9:ad:f2:70:44:94:7f:e9:72:5d:86:ba:0f:19:
         11:51:fc:e9:4f:ff:95:77:7b:29:05:79:1a:51:f3:24:0b:e1:
         c3:86:7b:d0:88:67:40:5a:27:ac:cc:ac:e0:59:82:ce:92:e8:
         a2:d3:f0:1f:5d:6b:d4:02:1d:e5:79:ed:32:66:47:c7:90:ed:
         95:f7:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:25 2026 by rpki-client