Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa
File:                     3428cc45-73a3-37b3-a9c8-d2366e878b14.roa (raw, json)
Hash identifier:          +fKVHk+eN29wx+fQyDF+0LW4frdUsCzGAchEbAsNpZM=
Subject key identifier:   A8:11:2D:AE:4F:C6:AA:F9:91:27:95:40:91:56:1B:93:30:B6:66:BD
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DD4C075186389FE22566BB5F6
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:75:18:63:89:fe:22:56:6b:b5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=da11c3ab-6a8d-46a8-ae29-87871e46e84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:f5:44:44:67:65:da:c3:4b:50:d2:14:dc:
                    14:08:62:de:74:6f:ca:84:9c:94:c4:6e:99:8c:cd:
                    d1:fe:16:43:23:f5:a9:48:81:fd:f7:36:24:90:50:
                    29:19:22:d0:1c:e0:94:e0:f4:73:b5:f0:11:51:a7:
                    d2:08:80:4a:fa:a3:df:af:56:6f:c3:2d:5e:94:2e:
                    fb:f2:6d:90:ff:d0:c4:61:70:5c:33:4b:94:c1:34:
                    98:c8:0e:95:37:bf:5a:27:b5:b2:e1:59:05:a5:35:
                    45:57:d6:57:f6:21:62:2b:d9:b2:0a:9c:71:56:16:
                    6d:7c:f5:23:64:1d:f6:b0:f0:03:b4:61:0a:c1:3e:
                    b2:58:09:11:04:66:51:f4:89:80:a2:85:0a:2c:f2:
                    71:e7:4f:86:1a:74:5e:68:52:ec:51:92:ee:b0:e5:
                    de:1e:89:27:d5:42:5e:b4:b2:15:ff:1b:25:53:a8:
                    8c:c8:6f:ad:c8:56:cd:a7:b3:04:3f:eb:51:c7:89:
                    53:d9:43:0a:5f:e1:8f:ee:05:91:91:b0:12:9f:c9:
                    4a:25:61:71:29:9c:07:3f:ab:db:ef:d1:13:20:1b:
                    d0:13:bc:05:00:b1:c8:29:e1:2d:32:98:5a:87:1d:
                    be:06:72:bd:de:34:8a:b5:55:0c:a4:0e:4a:c3:34:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:2D:AE:4F:C6:AA:F9:91:27:95:40:91:56:1B:93:30:B6:66:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:7b:cf:56:36:4d:47:9e:de:1a:e6:21:a6:0e:b2:f9:99:
         01:13:6e:a0:86:53:2e:7c:dd:b4:85:f6:bc:ee:cb:b1:11:86:
         6d:c5:ab:f4:7c:23:5c:75:09:98:0f:0d:08:5d:4f:e7:9e:03:
         25:de:98:66:9c:1b:ca:2f:f6:65:1e:38:ed:e8:06:a4:59:6b:
         8a:c8:44:15:9a:03:c8:d8:7b:8b:3a:97:93:73:2c:36:f1:0c:
         5e:7f:55:0f:e9:08:6a:71:05:0b:91:24:6a:12:1b:8b:df:8d:
         2d:4f:91:c9:62:0f:b3:77:2b:53:79:1b:71:eb:82:fa:eb:65:
         ae:4c:ff:8b:13:9b:0f:9f:9a:b1:af:a5:2e:42:25:2f:76:11:
         ab:7d:e9:71:36:91:06:a8:d4:e1:25:ee:e4:03:d5:ee:af:d0:
         f6:9e:41:4d:ef:87:c6:f6:3b:c3:c5:a4:b0:92:fb:a2:72:ca:
         98:99:a4:57:cf:e8:97:76:a8:e2:ff:ef:65:a9:94:3d:02:d1:
         17:a9:b3:4e:3e:9a:f8:0b:67:2e:1f:62:9c:9a:78:d0:0a:e4:
         40:25:52:b4:53:15:dc:ea:2a:3d:c5:04:33:9c:74:7f:bd:92:
         99:6f:67:e1:8d:1c:c0:0b:e2:03:f2:1e:ae:c1:9f:9b:7a:01:
         5f:f0:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:50:44 2026 by rpki-client