Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/10a047ed-3daf-3bec-9992-5e800b2356ea.roa
File:                     10a047ed-3daf-3bec-9992-5e800b2356ea.roa (raw, json)
Hash identifier:          zBthMEdhcQ3hXUfgODeumfjlPMavJm0i9M6r8LYZ77Y=
Subject key identifier:   E9:06:E4:B6:E4:A3:EB:E3:B0:39:E6:88:03:58:C7:A2:8A:04:ED:C9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DA6B010706C6DBFE4C1739138
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/10a047ed-3daf-3bec-9992-5e800b2356ea.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     62907
IP address blocks:        2605:4300:fe00::/40 maxlen: 48
                          2605:4300:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:10:70:6c:6d:bf:e4:c1:73:91:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=36784548-2a4a-4a71-9f35-3ee3f70304a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:f7:52:f3:88:7f:f7:9d:4c:b3:4a:99:fa:
                    e0:79:08:65:8f:08:c5:56:ee:f2:0f:04:da:99:6b:
                    12:c6:0a:30:b9:e5:d2:66:c7:8c:7d:04:4f:8b:81:
                    15:59:69:92:57:19:33:61:9d:e9:99:78:1e:45:d6:
                    0c:e4:09:0a:7b:69:93:08:58:c8:10:10:3e:1b:1c:
                    fe:d3:d5:1d:4f:67:ae:e3:a2:c6:f7:bb:52:7b:88:
                    03:75:d0:b5:0d:37:e8:04:07:62:8c:51:4b:c7:5e:
                    6f:b5:a3:f2:07:28:3d:f4:c5:2c:ba:f5:b8:36:c2:
                    f1:fc:51:dc:df:5b:17:8d:6e:ba:dc:31:c2:52:f2:
                    18:3a:68:45:74:a1:b0:c0:91:23:9e:2d:c0:fa:fe:
                    3d:48:38:03:23:54:ac:65:bd:0f:78:4d:f2:6f:b9:
                    14:a5:9c:b4:c9:24:10:3d:36:45:27:54:9b:9a:8a:
                    5e:5e:83:9c:21:f0:e8:31:7e:91:33:41:a7:a2:ba:
                    30:80:81:cf:91:3f:a1:f2:0c:84:3f:38:f6:f6:84:
                    c9:da:59:de:e2:c2:0a:18:e6:50:2c:26:10:28:c5:
                    37:9b:e7:b9:70:ac:d8:3a:8d:9f:03:b5:16:3f:a7:
                    b9:f2:c0:01:0b:df:44:aa:5d:d6:26:6c:75:57:ac:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:06:E4:B6:E4:A3:EB:E3:B0:39:E6:88:03:58:C7:A2:8A:04:ED:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/10a047ed-3daf-3bec-9992-5e800b2356ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:fe00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:5b:4c:da:da:01:98:6b:93:23:71:10:db:3b:2f:a0:de:
         f6:ce:66:0f:6b:bf:d2:c9:ce:86:19:2b:ce:c7:e7:3c:76:53:
         fd:04:02:f5:a0:9f:54:52:75:75:85:4c:40:b7:ae:8a:ec:56:
         83:c4:73:1c:e7:f5:fb:b3:59:d4:de:fc:be:8f:96:9d:df:41:
         8a:01:f2:10:8e:65:68:e0:b1:d8:de:42:9f:8f:3e:86:b7:9f:
         8f:13:5f:b0:32:d6:4b:c9:e2:21:ca:bb:23:d3:8b:6c:58:c6:
         4e:f0:1e:55:cc:11:e3:53:7e:30:b3:d7:e7:b8:d3:6f:87:82:
         3c:c3:c5:de:be:cc:bd:79:68:81:2d:8e:6c:67:f1:ed:51:35:
         de:f0:38:bb:6d:4a:9c:a6:55:0b:a8:5e:c1:98:2d:5c:e2:0f:
         54:e1:d3:19:76:59:b9:b6:88:30:f8:9d:53:90:99:ca:d0:fa:
         07:3b:7b:14:e5:ea:2f:20:bd:27:cf:18:e2:d4:32:3e:e2:b2:
         6b:41:fe:11:d3:6d:d6:6c:4b:84:62:3c:30:e2:c5:18:77:91:
         1c:ac:9f:4c:cd:e2:70:92:91:00:e6:58:6a:96:5e:86:b2:ef:
         c1:a9:47:aa:06:07:67:43:e2:d5:a2:3a:62:8a:2d:95:b3:20:
         ee:32:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 11:17:49 2026 by rpki-client