Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/be654372-eef5-3631-9f32-5f05f36923ba.roa
File:                     be654372-eef5-3631-9f32-5f05f36923ba.roa (raw, json)
Hash identifier:          2B7x0IikwkN7LRRaI64gAvdYmjpu8kudCVEo+keSPpA=
Subject key identifier:   BB:43:DB:B1:09:CC:FA:04:F9:F1:C3:50:5F:9D:A0:9C:BC:5A:F5:EA
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D9B856361E5D4282F870F9AA0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/be654372-eef5-3631-9f32-5f05f36923ba.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     22652
IP address blocks:        2607:fad8:120f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:63:61:e5:d4:28:2f:87:0f:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=1fe8e779-64d8-4576-a3b9-8755a4362d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:2b:f3:21:29:67:91:2c:40:a8:e3:e7:d2:
                    1a:4c:0d:81:57:e7:98:79:e9:2f:b4:d4:40:70:1a:
                    10:fe:b2:18:3a:04:30:86:51:45:20:75:71:a6:17:
                    40:53:c6:48:25:07:8e:8a:2d:63:3b:7c:0f:f8:07:
                    a2:ab:a5:35:45:33:c0:79:4e:68:5a:f2:31:00:b3:
                    ea:05:a0:8c:a5:a9:8b:73:2f:0f:ae:77:0f:98:83:
                    69:db:65:ea:05:78:43:5e:c2:34:09:ca:50:84:29:
                    7e:a6:74:a3:50:d3:40:c3:75:ad:ba:6c:24:76:14:
                    75:f6:95:79:4a:38:d4:44:6e:66:25:e4:99:86:df:
                    15:25:fd:10:31:7e:73:04:34:aa:c6:15:ae:9d:55:
                    98:b5:40:b5:4f:26:cb:a3:41:fa:68:f8:42:57:6b:
                    57:9f:8a:3d:6e:15:2b:69:5b:6e:1b:04:2b:ab:37:
                    9b:28:2c:ec:48:27:af:41:85:76:1a:bd:64:67:c5:
                    40:10:38:65:fb:b0:9a:7f:2e:97:89:39:27:b3:a7:
                    d6:8a:c7:9b:f5:d1:f5:63:e1:c7:6c:45:23:f4:e3:
                    4c:e9:65:f1:83:41:2c:33:fe:1d:cf:de:63:d7:48:
                    ac:a7:6e:cf:7e:7a:b6:85:08:43:64:fa:b3:b4:08:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:43:DB:B1:09:CC:FA:04:F9:F1:C3:50:5F:9D:A0:9C:BC:5A:F5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/be654372-eef5-3631-9f32-5f05f36923ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:120f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:cd:08:0c:8f:bd:b6:6a:a5:22:4d:2c:b2:96:2e:24:7a:
         96:c3:c4:26:bb:be:94:cc:4e:4a:d4:a0:ac:c4:8e:af:b4:b2:
         d3:9d:f2:ca:0c:dd:69:ec:cd:9e:bb:88:44:e6:d6:25:10:63:
         dd:14:64:a9:8d:b2:39:40:e7:0b:24:cc:8b:07:a1:55:73:3a:
         f0:5d:d4:da:ee:fd:bf:f9:60:f3:db:57:fd:e2:47:be:82:c5:
         d0:c1:a2:7e:87:bf:e7:d5:11:68:22:e4:28:a6:b0:68:a2:8a:
         de:e0:32:73:6d:61:91:28:07:b8:aa:8a:7e:06:b6:84:13:58:
         be:08:e7:dc:eb:96:31:a2:e8:a0:6b:40:d7:a7:e5:ae:ae:a6:
         b5:9e:7f:d4:cc:4a:50:49:b6:7a:8f:b0:13:37:ef:82:58:7e:
         0c:a9:4d:1b:73:6f:bb:9d:ff:c9:e7:83:cd:91:2d:50:53:3e:
         e0:49:ec:f7:7e:a6:91:77:ba:ce:9c:d8:c2:83:5a:c7:fb:16:
         bd:ae:a0:ce:b3:fa:8a:ea:dc:98:fe:d3:be:91:5c:2f:f9:6a:
         2d:58:4e:01:9a:ea:e0:07:47:8a:8c:5c:da:0d:07:95:8a:25:
         22:70:a8:71:29:21:45:00:6d:7b:a8:0e:83:e0:08:1e:59:e3:
         52:02:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 19:30:30 2026 by rpki-client