Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa
File:                     1f1d842a-8b80-3174-b179-a1287f433e90.roa (raw, json)
Hash identifier:          iahGQ2BuMIbgkkrO83mqnu/Z1oRKq3qzpDCDOaG6WTA=
Subject key identifier:   1F:1E:59:26:3F:65:8C:D1:64:6D:0E:40:47:7D:9E:40:74:9C:B1:09
Certificate issuer:       /CN=c5aae53f-608a-4f49-919c-d5976c7324b1
Certificate serial:       010D0C9F4328584D4F36B29BE1C271DD2642BF80
Authority key identifier: 19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa
Signing time:             Fri 27 Mar 2026 17:00:39 +0000
ROA not before:           Fri 27 Mar 2026 17:00:39 +0000
ROA not after:            Thu 25 Jun 2026 17:00:39 +0000
asID:                     54201
IP address blocks:        2605:bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4f:36:b2:9b:e1:c2:71:dd:26:42:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5aae53f-608a-4f49-919c-d5976c7324b1
        Validity
            Not Before: Mar 27 17:00:39 2026 GMT
            Not After : Jun 25 17:00:39 2026 GMT
        Subject: CN=4f65f5ce-6f31-49f3-bae8-dc7de4c5158f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:54:06:24:ee:d6:ec:76:b9:38:e9:9e:5c:
                    3f:d0:ac:27:27:3f:c6:23:d0:60:89:68:00:e6:b7:
                    02:3d:9b:ff:92:a5:dc:de:d2:32:70:11:d0:f4:d7:
                    f3:98:d7:79:24:6f:22:93:66:e9:ac:3a:4e:d6:58:
                    e9:5c:c6:88:c1:e4:c1:8f:57:c7:8d:94:c4:d1:e3:
                    9a:a1:ab:87:06:6e:c4:1b:7b:b0:c9:39:ed:e9:b8:
                    f9:3c:57:0f:4b:20:bd:bf:34:7d:46:c9:f7:c3:ed:
                    fd:00:22:49:de:1c:1c:75:4b:85:db:09:b2:05:14:
                    b7:0e:a0:63:6c:d8:54:5f:b0:bd:ec:d0:e5:3c:00:
                    c6:92:9e:60:9b:07:0b:07:ac:cf:aa:ab:d2:7a:cf:
                    4c:c3:02:20:21:68:d6:80:db:c0:a3:80:11:ee:02:
                    f8:d7:b6:d7:4b:95:1f:9c:55:4f:55:e6:0a:8f:62:
                    bc:b5:26:f2:0f:44:ab:d5:46:92:49:1a:2b:8c:6e:
                    93:2c:8e:11:19:50:60:0c:5a:2f:04:96:f8:47:ca:
                    85:fe:aa:f7:cb:29:3a:41:78:96:ef:88:aa:e5:79:
                    de:15:f0:34:6e:3c:a5:48:e7:39:4b:cb:4f:6c:7d:
                    cc:7d:94:7d:7c:eb:44:3e:a0:b6:48:af:f7:0b:9b:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1E:59:26:3F:65:8C:D1:64:6D:0E:40:47:7D:9E:40:74:9C:B1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/1f1d842a-8b80-3174-b179-a1287f433e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl

            X509v3 Authority Key Identifier:
                keyid:19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bc0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:d0:c6:25:76:ce:ed:86:d0:0c:0c:4e:36:7c:ab:f4:a3:
         d5:69:1e:6c:bc:23:99:a6:99:2f:33:4f:5f:b9:05:e6:31:e9:
         cc:43:1a:92:cb:a6:03:22:27:93:84:ab:02:7e:6d:28:68:d0:
         1f:bb:1f:72:4d:9e:43:e7:b0:13:4f:ad:5d:14:69:48:b3:ac:
         05:1d:c4:9b:e7:07:f8:3d:2a:f8:a9:6e:f0:8b:f6:22:6d:5e:
         18:47:e3:b9:43:0d:77:87:7b:1f:89:46:f5:99:42:77:86:18:
         77:90:a4:84:fa:c6:89:56:d5:d5:cd:20:6d:88:df:b4:8b:75:
         ab:0e:44:92:ed:ea:f2:6e:54:bc:13:c3:a1:5d:5d:5b:73:99:
         65:ac:ae:7c:29:b8:0a:bb:c8:bb:d7:17:3c:3a:8c:79:f3:ae:
         0e:5b:12:98:ae:c3:08:42:bc:81:a5:2c:c8:2e:87:ce:db:97:
         e6:3c:96:36:1c:4f:b7:f3:22:47:ef:e7:fc:42:c7:5c:68:22:
         bc:23:95:a2:52:87:45:25:70:d2:7b:21:ec:a8:e6:90:f8:6a:
         7f:0e:99:da:d7:65:f4:e8:90:98:5e:eb:6e:97:49:0a:eb:4f:
         05:e7:c4:36:14:29:27:32:e0:7e:6e:ac:49:ad:53:b7:c4:22:
         43:c0:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 09:16:29 2026 by rpki-client