Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa
File:                     6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa (raw, json)
Hash identifier:          O3Liu2synB9u5PXVfqc725fD0XOg2uLUc4X264vHAXI=
Subject key identifier:   52:C3:7A:79:94:94:DD:F4:F7:38:15:33:26:37:38:AB:88:66:3A:6C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D300A2DEE8E9E8E1AD3833740
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     22652
IP address blocks:        2607:fad8:1101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:2d:ee:8e:9e:8e:1a:d3:83:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=135d3b43-6e71-42a8-8809-22e9ca027632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:d0:09:eb:99:6d:20:cd:4d:d8:34:48:58:
                    6d:67:b4:f4:47:d3:06:6d:30:05:2a:87:c7:e9:44:
                    8e:d4:eb:02:90:88:03:fd:b0:67:87:c2:88:7f:28:
                    06:c5:fb:a6:18:7a:73:d4:0b:43:04:09:01:46:42:
                    f5:47:6f:26:65:ec:ff:f1:82:83:ff:39:49:1e:ec:
                    93:18:33:bf:5d:5e:d7:74:80:03:24:d9:42:79:45:
                    4f:bc:1d:57:30:86:5f:d1:90:76:38:18:ee:2d:a3:
                    cd:d1:4a:b8:e3:7c:0e:a3:eb:b7:61:c9:bd:e4:4c:
                    47:9b:f8:8f:0a:97:89:da:bd:88:7b:d2:d8:12:78:
                    52:c1:9a:74:4d:6a:a4:84:7b:e0:28:4e:3b:4f:87:
                    e3:00:8d:6b:ab:55:09:b5:ab:4e:67:5f:da:cd:20:
                    5c:05:63:52:2c:cf:0b:77:ae:53:d1:ac:3d:56:68:
                    df:87:8f:f4:af:e0:cd:cc:f9:42:03:4f:73:bb:1b:
                    23:f9:b3:38:32:be:5c:ce:46:36:23:46:d4:a3:b1:
                    10:47:cb:cf:64:af:15:84:20:da:28:ff:12:0d:09:
                    2b:a9:f9:f4:54:53:a6:9f:f9:38:a0:d2:44:0a:ff:
                    96:bb:a2:88:eb:7b:54:c5:56:1e:3e:2a:09:5b:24:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C3:7A:79:94:94:DD:F4:F7:38:15:33:26:37:38:AB:88:66:3A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:1101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:f4:b0:33:89:68:0a:f4:a5:98:56:96:18:5c:ef:42:73:
         33:1e:ea:b6:b7:4c:68:a4:65:68:62:ee:a0:a3:3b:53:07:84:
         ad:5a:04:8f:8a:7a:cc:d5:0a:5a:88:a3:67:54:d0:5f:55:46:
         61:61:7f:fc:46:9c:8b:bd:7d:4c:2f:ce:d2:78:71:ae:2b:c2:
         26:1d:1c:6c:56:04:02:5d:37:f2:ac:d3:87:9a:11:24:1e:f1:
         95:75:a6:d0:d7:12:7d:80:a7:77:b6:15:16:6d:f4:eb:f1:ad:
         cf:27:ca:5f:d6:85:1b:94:44:6d:a2:23:6f:1f:15:df:dc:48:
         6a:e2:a4:e8:b5:e1:7f:a4:50:31:52:2b:62:c8:dc:03:58:74:
         4a:ba:17:d7:be:14:7d:92:ad:d3:e7:52:1f:8d:db:09:4d:ac:
         ce:a9:2a:ac:b2:54:70:79:6b:93:25:35:50:96:26:af:3d:8b:
         43:93:10:6c:1f:f5:b7:a2:22:9d:fa:36:96:62:2f:91:6f:8f:
         12:cf:99:44:54:1f:56:3a:bd:ea:2e:9f:08:56:61:f3:15:e1:
         52:34:50:e8:58:32:81:85:98:20:b8:f8:4d:e4:37:02:62:28:
         99:29:db:9c:cc:72:16:c5:b7:a2:a3:17:3d:50:40:60:0d:cc:
         dd:5b:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 10:04:50 2026 by rpki-client