Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/a15bb8f9-5f58-3dde-b836-b44822b3323f.roa
File:                     a15bb8f9-5f58-3dde-b836-b44822b3323f.roa (raw, json)
Hash identifier:          OKYxCycJPBEP6WL6tyIvcOg8He7ebA6vCY0CFjz8k2g=
Subject key identifier:   B3:79:7B:BC:03:64:A0:A7:06:5B:39:80:C1:51:94:24:F0:95:10:0C
Certificate issuer:       /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial:       010D0C9F4328584D237A3080F7D6D3C5DFB40210
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/a15bb8f9-5f58-3dde-b836-b44822b3323f.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     49791
IP address blocks:        2606:2040:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:30:80:f7:d6:d3:c5:df:b4:02:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=73cfe1d1-263b-4400-97bc-49a0daea80a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:fd:ab:c9:d5:b8:ab:73:8a:10:1f:56:39:
                    1d:37:f3:0d:f1:be:27:22:6c:06:98:15:ce:e6:c1:
                    be:31:e2:15:57:47:b2:47:b1:c5:00:86:b7:df:3b:
                    cb:0a:e0:b9:e6:a2:0b:93:f5:b2:74:fb:e7:b0:4f:
                    86:8c:2e:75:c1:9b:4d:f6:d8:ec:5e:d8:ec:4a:c1:
                    0c:52:f0:90:df:ef:ce:37:d0:3b:d5:8e:8b:b6:2a:
                    7e:b1:fa:e5:89:6f:ea:c9:5c:3d:42:27:bf:45:87:
                    1b:83:d3:44:e6:e9:bf:0e:15:89:a9:12:b0:e4:0e:
                    92:0e:c1:26:33:d7:79:6e:39:eb:27:89:19:e8:07:
                    bb:93:60:58:14:bd:d1:8a:40:80:58:cc:8a:bc:dc:
                    7a:e7:ba:b5:2b:83:4e:b3:69:24:44:0d:37:2b:b9:
                    97:4d:01:80:9e:93:09:d5:d3:84:65:35:af:64:79:
                    ab:3e:95:5a:68:29:b0:20:a3:56:32:82:82:34:c8:
                    b8:c9:c3:b3:72:6a:08:dd:40:54:16:7a:ee:ac:ca:
                    fc:e6:a0:12:c7:dd:20:63:06:e4:55:d8:e5:5f:89:
                    e5:f0:64:a9:f8:c7:2f:3e:52:4d:57:c0:6d:08:73:
                    28:14:9a:46:b2:f9:2b:96:26:56:33:5f:a9:36:b7:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:79:7B:BC:03:64:A0:A7:06:5B:39:80:C1:51:94:24:F0:95:10:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/a15bb8f9-5f58-3dde-b836-b44822b3323f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl

            X509v3 Authority Key Identifier:
                keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2040:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:22:cf:f1:f3:c1:d3:fd:21:33:df:c4:66:a9:ca:18:bd:
         52:c8:7f:81:28:ce:2c:a1:80:17:37:45:fc:2e:10:4e:fe:16:
         33:3c:7a:e6:56:55:72:dd:5b:d2:b5:32:83:46:3e:0d:47:fc:
         8a:04:24:2c:ec:2f:94:4d:1b:cd:85:39:f8:8c:bf:20:f7:6a:
         69:ad:c8:b0:51:a8:d1:14:e2:53:4a:85:a4:91:dc:46:fc:20:
         08:4f:77:f9:0b:97:b6:6a:6a:e1:a2:9e:91:89:24:4d:31:28:
         5e:bd:d8:0f:e2:e6:a2:06:20:83:49:27:2b:b7:d3:81:65:13:
         62:41:b9:f6:88:44:ec:8d:18:5c:db:8b:e8:d6:92:c1:5b:20:
         24:c4:e2:e0:6b:3b:a5:38:73:8a:83:e2:fa:af:90:07:8a:d3:
         db:4b:11:2b:84:77:86:bf:71:ef:3d:61:4d:58:31:f1:c5:55:
         85:96:b2:8d:c4:e0:97:ea:bd:2b:6b:87:91:7b:8f:30:b3:91:
         b9:e9:60:35:e8:a7:a6:86:2c:54:05:56:46:4f:aa:79:8d:78:
         01:23:49:a4:fa:c7:b7:16:f3:07:e8:ba:08:5c:35:e3:49:53:
         18:91:f6:7b:80:2c:90:43:0d:f7:08:d6:7d:c2:85:6b:70:c1:
         23:3d:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:41:46 2026 by rpki-client