Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/cf50e423-4354-3eb5-adb5-3070656ad9b7.roa
File:                     cf50e423-4354-3eb5-adb5-3070656ad9b7.roa (raw, json)
Hash identifier:          433/C3lDCwV8UJjybfpkc9+5KlhldeaXNqxHppiNTHk=
Subject key identifier:   6C:79:69:74:3F:AF:D4:DD:C6:A5:2D:17:23:FC:31:9B:9D:26:0B:E9
Certificate issuer:       /CN=9e180184-106e-41ea-a049-5451e20c2840
Certificate serial:       010D0C9F4328584D8EF97D94F02B12116E4CDA80
Authority key identifier: AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/cf50e423-4354-3eb5-adb5-3070656ad9b7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     401511
IP address blocks:        2607:e2c0::/32 maxlen: 32
                          2607:e2c0::/48 maxlen: 64
                          2607:e2c0:1::/48 maxlen: 64
                          2607:e2c0:2::/48 maxlen: 64
                          2607:e2c0:3::/48 maxlen: 64
                          2607:e2c0:4::/48 maxlen: 64
                          2607:e2c0:5::/48 maxlen: 64
                          2607:e2c0:6::/48 maxlen: 64
                          2607:e2c0:7::/48 maxlen: 64
                          2607:e2c0:8::/48 maxlen: 64
                          2607:e2c0:9::/48 maxlen: 64
                          2607:e2c0:10::/48 maxlen: 64
                          2607:e2c0:11::/48 maxlen: 64
                          2607:e2c0:12::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:7d:94:f0:2b:12:11:6e:4c:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e180184-106e-41ea-a049-5451e20c2840
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ae2c8db5-9408-4c66-86a5-aa51c73cd56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:6d:21:19:d6:36:84:f6:a1:6e:da:e5:18:
                    e3:16:6c:f4:df:30:11:e0:3f:83:9e:32:6e:19:c1:
                    53:e5:bc:17:6d:40:0f:21:d3:90:70:18:95:ad:68:
                    7a:c9:4d:be:f0:08:0d:4e:84:d0:61:c6:fb:90:50:
                    b6:65:35:a5:2d:f6:a3:7a:54:f8:ef:ca:c1:c4:e9:
                    6d:f8:1c:d6:63:b6:19:c9:cf:49:9f:23:c4:57:93:
                    0d:48:35:64:5d:ba:6f:da:92:55:54:31:ea:33:41:
                    ba:45:c0:e1:7a:8f:56:7e:39:68:6e:3f:23:60:b3:
                    18:21:7f:c4:7d:c1:7b:01:27:b8:ea:2c:97:97:9b:
                    99:78:2a:0a:12:70:f8:7f:00:32:5f:0e:66:8f:26:
                    31:87:06:54:24:91:83:9e:19:3d:a8:4d:0a:6a:c5:
                    cb:a3:29:04:ab:26:ca:47:2d:21:7d:7f:6e:bb:17:
                    e4:2e:0d:54:ed:e2:72:8a:a3:84:27:04:04:98:76:
                    ab:ad:5e:64:72:b7:e1:75:27:5a:f3:36:24:94:d3:
                    df:67:ec:30:de:8f:93:9f:08:f2:61:f6:06:14:bb:
                    76:85:67:f0:8d:c4:e6:26:8a:40:94:a5:3a:10:14:
                    3e:26:23:da:55:a3:c2:32:de:8f:d6:a3:35:38:32:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:69:74:3F:AF:D4:DD:C6:A5:2D:17:23:FC:31:9B:9D:26:0B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/cf50e423-4354-3eb5-adb5-3070656ad9b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:68:2a:2f:a2:30:ba:61:63:c8:d1:9b:2e:7a:df:fa:85:7d:
         1f:eb:e6:30:74:ec:ab:c2:57:54:83:33:bf:04:4e:d6:30:6f:
         8b:c0:dc:53:ad:7f:98:26:ec:44:a1:f1:a3:ba:a1:a5:be:e7:
         64:6a:93:42:b9:8c:f1:fb:82:11:a8:85:71:70:60:4c:7a:f6:
         e9:6d:c8:e0:6b:8d:45:f4:95:c8:4a:7f:67:40:1c:61:e4:43:
         81:e6:b5:bf:e9:75:33:e0:15:9f:09:66:e6:17:19:77:fd:a2:
         73:07:09:28:35:71:e1:8f:e4:b4:af:24:ae:39:78:3d:0c:83:
         1c:6d:14:52:07:68:2c:e8:f6:13:5c:ec:47:5b:34:61:09:00:
         7c:39:0b:0a:8e:29:d9:99:6c:d4:a8:e7:7c:a7:db:85:e2:d9:
         ec:65:51:1f:7c:9e:40:8d:cf:cc:bd:a1:56:94:f1:82:b0:92:
         75:4a:89:c7:72:e3:c1:37:d1:09:18:56:4d:5b:a1:84:61:a8:
         33:4b:6a:81:69:a5:e2:ee:ef:33:6b:8c:bc:35:66:bb:c0:6c:
         68:73:1b:d3:c6:80:41:ec:c6:3c:93:06:98:68:75:74:68:70:
         98:4b:9a:d1:ae:d4:58:f4:1c:62:71:eb:93:43:4c:3f:0c:92:
         f9:f4:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:25 2026 by rpki-client