Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa
File:                     f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa (raw, json)
Hash identifier:          XF9sn9my7lP7MTq9iTqkw77Fz1VOMHq7lU01maSH9yk=
Subject key identifier:   18:D1:6A:71:75:24:E5:7A:B6:42:28:B6:74:EB:3E:1D:DB:8B:A6:AC
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D09126A68C4C2D03455A80300
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     8987
IP address blocks:        2605:4300:2c1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:6a:68:c4:c2:d0:34:55:a8:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=c42faf8e-c593-4d72-82d3-1083a94c5a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:27:df:8c:c6:ae:72:8f:3b:81:b7:73:9a:
                    ed:1c:23:b9:95:80:6d:13:c4:66:25:36:d2:46:a5:
                    be:75:1c:75:4e:48:4b:6a:5a:bf:37:0d:9f:7b:e0:
                    85:bf:3f:37:af:db:75:88:53:5f:4c:17:00:7c:b6:
                    3f:cf:5c:1e:b8:dd:b9:6b:69:65:2a:bb:85:68:ab:
                    ff:fc:3c:a3:6a:16:a2:69:1e:be:d0:0d:ee:94:67:
                    a7:62:aa:c2:54:fb:3c:e5:cc:2f:d3:c4:2a:77:d3:
                    cb:ca:7d:a1:9d:6d:fc:b2:8a:59:ab:af:7a:b9:ed:
                    fc:ac:ec:26:53:0c:51:55:ef:2b:d6:65:a2:00:b7:
                    e9:5c:55:d8:df:84:f5:fd:8b:d0:27:50:42:a5:2c:
                    7b:b1:c5:e3:28:f1:30:95:4d:43:ea:ef:d9:9b:41:
                    9a:ff:55:78:c6:5a:84:4d:2d:bf:fa:f2:6f:71:85:
                    e7:a6:60:f5:46:23:3d:00:15:1c:b2:58:95:d4:56:
                    d5:d8:5f:ae:c8:fb:cd:65:50:af:b8:ae:ef:55:71:
                    8b:12:c9:22:ff:62:3d:8e:f7:00:28:d0:e0:fd:89:
                    22:be:c9:1d:08:d6:5d:52:fa:2c:fb:db:c0:96:ec:
                    bc:98:7d:a4:85:df:0e:1f:10:5c:10:7f:33:9d:b8:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D1:6A:71:75:24:E5:7A:B6:42:28:B6:74:EB:3E:1D:DB:8B:A6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:46:1e:f7:d1:01:5d:63:d1:33:f5:da:7b:c0:08:01:fd:a0:
         ac:b1:c9:34:5e:31:f8:63:56:3b:5f:0d:b3:37:ce:79:b8:77:
         d3:80:e4:2c:8c:e1:4a:d1:f5:86:99:cc:7a:ca:d6:4e:6b:b7:
         6b:4d:70:ad:25:f9:e5:04:00:85:00:09:ba:ab:96:b6:d1:22:
         d6:db:49:5a:f9:98:ed:46:a6:58:25:22:3d:75:f2:d0:bf:db:
         c5:b6:cd:06:99:c2:d8:25:0b:3b:1b:5b:fa:d7:c8:34:31:73:
         91:70:28:87:28:1d:b9:34:6d:90:5d:d5:59:ad:88:8f:3d:62:
         e4:bd:80:78:b7:15:cd:d8:a7:e2:23:81:5e:83:4a:61:c1:33:
         88:d6:a1:df:10:7e:b9:e0:10:eb:82:59:6a:38:56:47:26:79:
         15:a3:15:c7:1a:29:c7:bb:e3:1a:30:c7:83:0b:77:b0:bf:36:
         0d:b4:85:c8:a0:8a:a9:33:0c:e0:b5:42:0b:d4:fc:01:b3:a4:
         0a:0f:22:47:a7:6d:0d:db:59:71:23:b8:02:63:1f:f4:ed:cc:
         ae:c6:69:8d:d4:cd:5f:6d:a8:ac:0e:8c:e9:ec:16:ee:b4:29:
         fb:48:c9:8f:42:4b:2b:77:98:f9:fd:ad:bf:98:5a:4a:06:4a:
         52:0c:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 14:26:31 2026 by rpki-client