Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa
File:                     61413741-9901-33ca-be44-090d9830ff16.roa (raw, json)
Hash identifier:          OFkOA9NyuOfK+tidI6CXqJfHxOhNgX/VCo5ixWAWdG0=
Subject key identifier:   1D:03:9E:2C:54:18:CC:E7:8A:23:4F:07:A8:A3:30:D5:33:19:5F:31
Certificate issuer:       /CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
Certificate serial:       010D0C9F4328584D9E501333BDEF48183F15EA40
Authority key identifier: 44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     396431
IP address blocks:        2620:53:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:13:33:bd:ef:48:18:3f:15:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=6a70d1b7-faf7-45db-a5cf-b03f28702d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:b7:09:9f:7c:54:60:66:6a:7d:45:f3:89:
                    02:86:eb:e4:50:9c:9f:6a:64:27:04:25:6e:44:57:
                    53:93:ee:1e:f4:4c:18:38:a5:bb:fd:a6:36:30:0b:
                    bd:7a:9c:99:50:9d:70:b6:2c:75:38:3d:80:42:cc:
                    b4:f6:6c:6f:d3:c1:26:f5:bc:11:61:7f:79:51:c0:
                    83:32:00:cb:71:3e:a4:29:51:f2:2c:b2:ac:38:df:
                    b2:77:38:6d:12:aa:fe:19:16:8b:15:e5:72:fe:56:
                    d7:44:4a:c7:51:4c:de:8b:44:9c:38:50:54:62:9c:
                    37:d2:80:0b:ca:cd:d9:e8:c8:c4:4a:17:84:6f:e1:
                    a7:14:0d:85:31:92:4c:09:09:fb:5a:b3:93:64:65:
                    64:88:db:a7:16:95:36:2b:96:ae:26:8c:d9:47:aa:
                    10:56:85:cc:3d:0d:8a:3b:bf:3d:5a:95:c0:92:c8:
                    39:0a:0e:ff:97:59:81:8d:e3:54:41:eb:b4:56:f7:
                    09:c4:18:5d:c2:bd:b8:5f:54:96:76:32:d5:ce:ef:
                    99:70:b7:46:21:45:8f:e2:87:a6:64:db:48:7a:14:
                    7a:96:53:4b:28:e0:1f:9c:f7:14:f3:9b:4e:07:9e:
                    d2:6b:99:a0:27:f7:a1:43:95:db:2d:19:fa:76:83:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:9E:2C:54:18:CC:E7:8A:23:4F:07:A8:A3:30:D5:33:19:5F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/61413741-9901-33ca-be44-090d9830ff16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl

            X509v3 Authority Key Identifier:
                keyid:44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:53:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:b8:87:d4:03:b6:b3:3b:f6:08:54:5a:78:83:0c:b9:7d:
         37:a0:44:63:89:ee:39:37:94:f5:57:e9:cd:ba:21:68:96:f8:
         82:a7:e3:f7:44:b8:74:ee:fb:6a:df:3d:aa:a8:26:65:4e:f4:
         34:a4:9c:3f:5f:12:02:73:03:a0:a6:46:63:d6:59:6a:08:c7:
         c8:40:0a:e7:19:69:3c:94:77:8b:d0:06:f5:7e:d1:e5:e0:99:
         82:19:ff:4b:fa:b3:e4:b6:94:f3:18:f4:69:31:f5:24:69:b8:
         66:41:27:e9:b0:83:69:92:df:ad:67:b9:83:be:64:ad:90:b8:
         2e:7d:ed:9c:e0:9b:73:96:ac:d0:f6:28:ea:a8:eb:43:d2:e7:
         cc:0b:db:81:d2:7b:ff:79:53:91:5d:9d:e4:9f:af:21:6d:8b:
         e8:25:80:80:e7:17:73:e5:54:42:81:45:a7:60:9e:54:2b:3a:
         e9:1b:33:5a:a2:aa:a4:4b:e7:79:1b:80:a9:95:a0:e7:5f:b1:
         81:0c:48:40:15:ba:8a:22:1c:6e:3b:5d:89:a9:d6:40:ca:93:
         96:81:3c:7a:90:13:2e:74:c2:fc:a5:78:80:45:c5:2a:18:33:
         54:3d:1e:c0:24:48:d5:05:60:a8:f7:e2:0a:ee:4c:10:ef:86:
         c2:69:6b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:28 2026 by rpki-client