Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/59478457-1ea3-3c39-b1cd-d25864568311.roa
File:                     59478457-1ea3-3c39-b1cd-d25864568311.roa (raw, json)
Hash identifier:          z9BLi+Zp9HTl7CPmE3MaO//bhQo0NQTQzGu4x2p1wo4=
Subject key identifier:   E2:91:20:82:06:D4:A0:A7:7A:2E:60:4D:BD:D8:1F:32:74:BD:69:41
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584D3F64C8EC8242931D9A326980
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/59478457-1ea3-3c39-b1cd-d25864568311.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     62943
IP address blocks:        2607:f4f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:c8:ec:82:42:93:1d:9a:32:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=a4606662-4d95-4ada-abac-ecf254e38ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:a5:f6:5e:98:84:82:45:b5:d1:70:48:6b:
                    82:b1:04:69:5b:d1:15:60:a1:a6:57:93:37:c6:df:
                    37:df:b3:1b:2a:37:8a:c9:92:51:c8:78:27:55:2c:
                    27:3d:ae:4e:6b:9b:ec:cf:61:59:b3:55:8b:17:28:
                    48:5c:71:7b:e8:66:66:99:9c:37:08:7c:17:c9:e7:
                    25:2c:d4:d5:93:cf:16:32:97:29:09:47:91:37:e1:
                    2e:28:3f:73:d0:9d:93:7f:39:a2:74:41:2a:19:87:
                    46:22:7a:70:71:40:41:a1:4f:7d:ab:1f:b7:06:f5:
                    86:49:59:2c:36:3b:0e:d9:83:40:4e:e0:31:65:47:
                    52:55:79:ae:6d:63:8e:60:6d:fb:5a:86:fa:be:75:
                    2b:6a:79:91:d7:5a:b0:6f:75:b5:b7:58:f1:bb:79:
                    36:64:21:9a:ec:6d:ed:01:c9:81:31:33:30:d6:53:
                    47:b1:be:b1:dd:a1:82:29:08:ab:2d:e0:fc:00:41:
                    ad:8f:d2:6c:c1:60:ca:13:f1:cc:68:76:51:31:0d:
                    50:fd:f4:2f:60:88:ec:10:64:54:81:15:28:18:b7:
                    d0:3c:64:98:6c:71:d1:0c:ca:c0:cb:e8:bb:61:b0:
                    f7:6f:23:59:63:94:de:72:9e:14:07:59:ab:1e:93:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:91:20:82:06:D4:A0:A7:7A:2E:60:4D:BD:D8:1F:32:74:BD:69:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/59478457-1ea3-3c39-b1cd-d25864568311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:77:25:53:af:30:b2:18:e5:a2:32:39:54:ad:52:2d:47:6a:
         ac:e1:89:4f:fa:1f:b5:21:52:35:66:e8:5f:a2:c4:5b:76:90:
         90:cb:f1:61:2a:a8:86:55:75:96:13:47:8c:e5:be:2b:36:77:
         3e:8e:e0:09:2a:70:80:59:54:c2:9e:3c:de:4b:51:64:a7:0d:
         9f:7c:79:5c:ff:7e:41:2a:9a:95:02:48:7b:c0:f8:a6:86:5f:
         0d:14:1a:31:ed:42:41:62:94:32:75:2c:5e:b7:f6:ea:34:bc:
         6b:e2:9c:2d:f3:c9:fd:bd:e1:0c:15:22:bb:70:5d:90:ce:d5:
         70:17:3b:80:d3:cf:d7:9e:f8:66:68:0b:15:85:78:cf:ad:69:
         51:5a:db:4f:f9:f2:db:76:a6:3b:76:9a:09:19:0c:b8:82:5a:
         8c:de:15:12:ce:ac:58:7e:32:37:0c:1f:c0:c2:76:e8:8f:1e:
         f5:9a:1c:11:2b:85:01:f2:03:d2:d0:55:ec:4e:81:86:50:77:
         dc:33:1b:e4:35:4f:86:5e:2f:32:d3:88:f7:8c:80:83:ec:66:
         f6:7a:83:3b:cd:6d:bb:a9:d5:c1:6c:9a:6e:9b:8a:e0:08:0f:
         d9:1d:20:15:89:d1:44:f8:6b:e0:35:e2:5c:18:4a:fd:df:52:
         94:81:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:03 2026 by rpki-client