Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa
File:                     c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa (raw, json)
Hash identifier:          3ZzRbo1HChQobAKkJTbwEu5T+vpI0lJt88kdGpoJoQE=
Subject key identifier:   9B:C6:39:12:98:A7:3B:4C:EE:63:36:FE:57:DC:13:56:E1:3A:B3:F9
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584D5234F14E81A2CC3527DEF980
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa
Signing time:             Sat 28 Mar 2026 18:44:32 +0000
ROA not before:           Sat 28 Mar 2026 18:44:32 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     26277
IP address blocks:        2607:3fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f1:4e:81:a2:cc:35:27:de:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Mar 28 18:44:32 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=99f37db3-0c86-4a20-afdd-36a8722530f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:bf:43:ac:1a:75:7d:7c:2e:de:d3:23:2d:
                    c6:62:ae:91:ba:7d:04:57:df:1f:92:1d:1a:ff:95:
                    64:4b:ff:26:87:42:b2:a0:19:83:0b:8f:68:1e:fc:
                    5b:2f:06:71:9a:33:16:e2:c7:c9:61:63:0a:f1:a0:
                    5e:8c:df:8b:ea:69:b0:20:5b:b3:47:16:4f:c1:9a:
                    ad:93:7d:47:0a:3a:1d:17:38:c8:bb:bb:56:2b:60:
                    85:89:3c:f0:9c:f4:08:4c:9b:a8:32:a5:40:6e:a3:
                    6d:65:61:a5:68:fc:59:4b:a7:04:10:41:92:fd:da:
                    65:94:b3:45:41:f2:ad:9c:cc:55:20:e9:a9:e1:1f:
                    9a:4c:3b:05:1f:dd:a9:b1:e2:20:3c:02:58:b3:0b:
                    df:0e:86:1a:cc:f2:36:62:13:04:37:f7:85:fc:6d:
                    ae:05:b0:c6:f4:b8:3a:32:3a:5d:50:58:b0:8d:0d:
                    b3:e3:68:e5:e4:fd:42:da:93:25:64:ad:35:c8:8a:
                    6e:1b:a5:70:f9:5e:36:97:d3:a7:52:bb:f4:52:72:
                    14:3c:1d:24:51:b7:62:aa:b1:2a:4f:8f:a6:1e:42:
                    6b:6f:bd:c8:0a:25:63:e0:68:7a:2d:a8:45:86:02:
                    f5:8c:24:9d:bd:b1:85:2d:ab:1a:77:85:04:77:e4:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C6:39:12:98:A7:3B:4C:EE:63:36:FE:57:DC:13:56:E1:3A:B3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a0:4c:27:4d:25:c5:3e:55:21:16:7c:ec:de:0d:17:c3:78:
         ee:e8:db:42:73:af:2e:d0:ff:7e:fd:b2:2d:c1:70:fd:57:f2:
         d0:42:de:b8:9c:96:77:3f:69:f2:c3:b1:99:92:e3:4d:08:6d:
         04:68:cf:73:29:2b:18:13:9c:bb:c4:d8:dd:ec:8d:02:a4:0e:
         2e:9e:7c:9d:63:31:5e:cb:f2:73:48:c1:ea:42:74:17:1b:c1:
         70:f7:87:b3:40:83:5e:15:76:69:a9:48:3e:13:87:ce:b3:01:
         fe:21:bc:8d:5e:07:12:6e:24:9d:32:d9:07:c0:f3:e9:fd:2d:
         10:2e:96:11:43:1e:e9:e2:41:19:8b:17:74:7b:2e:ca:92:64:
         07:6b:f9:0b:62:5d:c7:23:58:28:09:bb:c8:7c:a2:33:99:de:
         95:e4:53:e6:ab:69:8e:a5:c9:b8:48:52:5c:a4:b1:f3:25:c4:
         58:13:b9:78:f5:d5:3a:4f:32:a8:78:f5:79:a3:da:bc:b6:c0:
         3c:84:d5:70:d5:59:31:ac:93:a3:39:00:41:a5:21:ff:5a:0e:
         3a:e8:7f:b0:65:95:dc:f5:85:6e:99:20:f4:dc:95:fd:2e:e5:
         ec:93:3a:57:84:ca:46:1a:f4:e6:db:19:bb:3b:62:f7:54:f2:
         86:18:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:30:52 2026 by rpki-client