Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa
File:                     c27b79ae-62b0-3f53-9608-18a1438b18ea.roa (raw, json)
Hash identifier:          AAuQ9RDTtOiqrqtu9h0KFJHopbdEXugG6skYwaBHux4=
Subject key identifier:   12:78:1A:4E:6F:7C:74:AB:41:1E:89:4A:90:86:11:AD:C1:4C:8B:F7
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584D1B1A1620FED09BA35A220800
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     400097
IP address blocks:        2606:3d40:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:16:20:fe:d0:9b:a3:5a:22:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=25df6540-46f8-48eb-b027-ff8e722a148e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:f3:26:55:67:14:1d:72:04:41:cc:97:32:
                    4c:cb:8e:55:88:b2:24:69:b9:8b:95:2e:9d:0c:79:
                    7e:23:3b:e0:db:83:d8:80:4f:a2:03:32:28:b2:cf:
                    2f:33:a6:8a:3a:d4:26:e3:8f:46:e8:70:43:8b:ca:
                    26:21:56:83:f2:95:2c:db:bd:22:9f:77:5f:c7:68:
                    66:90:f3:ed:80:91:b7:90:61:7a:13:d7:38:e6:b8:
                    bf:d8:b8:d4:42:3f:84:f9:c6:89:4f:03:e8:85:4a:
                    6c:91:55:89:4e:3e:55:b6:80:86:81:53:db:06:6f:
                    21:c4:b1:c4:38:f0:d7:49:90:b1:0b:24:92:27:4b:
                    64:7d:cf:40:87:94:24:a7:e0:37:34:c2:72:98:0a:
                    fd:22:ba:08:9f:54:70:ef:2c:ed:74:6f:6c:fe:a3:
                    5f:19:46:2a:93:ee:65:a4:d2:d4:15:20:30:d9:fe:
                    8c:e5:c0:10:f7:75:2f:5c:0d:5b:4a:3a:8c:5c:74:
                    9c:fb:ec:3e:9c:eb:f2:1b:c8:b6:e8:88:2e:f9:fa:
                    c1:de:4b:bb:1b:72:81:32:97:28:c8:c5:e0:a9:e4:
                    be:db:2c:66:60:d3:56:7c:b8:5d:45:09:37:9d:37:
                    1e:77:ff:ad:6a:1a:77:c3:6a:83:48:29:b4:ee:63:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:1A:4E:6F:7C:74:AB:41:1E:89:4A:90:86:11:AD:C1:4C:8B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a2:70:a9:5d:55:d6:0a:9c:c5:60:41:65:31:68:f5:4b:cd:
         98:f9:cf:dc:08:33:ba:7f:52:92:a9:e0:da:67:1f:7d:79:d9:
         e0:6f:04:71:1d:76:1a:cd:b9:e0:6b:8f:88:ac:1d:48:d9:d5:
         4f:01:ba:f1:96:d4:28:a0:31:a9:8f:dd:5e:9a:38:d7:ce:d8:
         a9:bb:ca:40:28:9a:bc:c9:9a:01:74:47:b4:20:84:9d:2f:a0:
         5b:55:92:b0:cf:2d:0c:46:c3:b5:b3:f4:f1:b2:74:9a:75:9b:
         65:2a:eb:4b:64:04:81:68:1e:cd:6a:0a:2b:6b:3a:fb:2c:94:
         65:b9:1e:87:c2:54:bc:29:16:8f:bd:ed:87:50:a0:da:52:f2:
         38:e3:d2:b8:29:04:2e:a7:1c:ab:dc:d2:7d:09:cb:20:fe:6f:
         07:53:04:51:dc:c2:37:14:43:8d:ab:44:f5:77:fb:84:62:6a:
         ff:71:e8:6d:e0:24:63:6d:b3:15:77:91:08:ab:7a:1d:55:fb:
         b1:ae:6e:48:d8:38:21:50:40:73:ff:17:98:30:0d:3b:c8:52:
         19:16:7b:ad:fd:ba:b7:ba:fe:fd:e4:59:a5:a2:5c:f7:18:72:
         f0:6c:f3:20:0b:f9:69:7b:51:40:3d:00:e4:db:59:66:8a:b9:
         13:31:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 13:50:40 2026 by rpki-client