Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
File:                     985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa (raw, json)
Hash identifier:          h0LOTrhQHQBCqwiX8MsMCMnA9hUz3UaJeHJJ+mLmkQ0=
Subject key identifier:   96:C0:7D:9D:84:6A:45:F5:1C:52:FD:95:AC:11:77:EF:80:8A:25:EE
Certificate issuer:       /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial:       010D0C9F4328584DA6B01DCB817173E175DC1A00
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     54816
IP address blocks:        2607:67c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1d:cb:81:71:73:e1:75:dc:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=3b5e6dc4-fe07-4465-8e95-603bb210a505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:74:37:ee:b0:6c:b7:a6:99:1b:fb:2e:f1:
                    8c:61:da:57:70:67:9f:c1:da:51:37:07:97:8b:33:
                    11:d2:f6:5b:ec:16:b3:1d:24:84:33:8e:00:7b:23:
                    b5:24:e3:b5:82:a3:12:05:56:e7:f2:2e:55:51:10:
                    99:8f:58:bb:bf:f6:16:ca:a1:a2:ef:50:b6:80:d1:
                    0e:f3:20:05:39:42:d5:a4:a8:8b:8b:b7:26:fb:96:
                    71:13:45:0b:34:75:6b:8d:53:80:b1:b0:7a:44:b4:
                    cd:28:d0:cc:92:f4:b4:07:5b:21:f1:15:3e:1e:97:
                    a4:32:e2:42:d4:ae:2f:ff:14:6b:34:21:1b:11:25:
                    52:20:39:2f:3a:81:df:d7:9c:51:51:43:9a:9d:12:
                    aa:12:b3:9b:96:4c:dc:9a:d3:66:0b:19:f4:7c:3f:
                    09:55:e2:38:74:76:91:6c:14:17:14:02:ba:d2:ea:
                    bd:c6:65:6e:13:6b:e0:01:03:4b:10:12:27:56:71:
                    c1:7f:1a:10:68:8b:5b:2e:8c:e4:dd:5d:e7:a5:92:
                    d2:94:a4:51:16:d0:c1:b8:8e:ec:07:4d:a1:de:7e:
                    68:cd:7f:d4:c0:15:62:5a:1c:a2:cc:dc:23:d1:07:
                    9a:cc:3c:05:60:96:b8:64:fd:cd:d8:62:a5:f2:c9:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:7D:9D:84:6A:45:F5:1C:52:FD:95:AC:11:77:EF:80:8A:25:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:67c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:9e:58:9c:b5:09:5e:04:c6:32:bf:bb:31:52:13:c7:6e:
         b3:41:b4:49:08:41:42:bd:be:a1:2b:af:d4:9a:f5:f6:bd:a9:
         e9:fa:a4:00:03:f3:5f:73:98:07:c4:5d:d8:b7:75:75:c6:41:
         32:c4:24:37:6d:58:48:19:91:6f:76:2a:07:82:ed:c4:45:8f:
         41:8b:84:6e:d9:41:d0:f8:0a:52:56:08:a2:4c:69:c2:9d:65:
         a3:d9:dc:68:c6:3a:ac:f6:01:74:bb:5c:c2:bf:80:aa:87:2a:
         ec:4b:85:6b:b6:d6:f9:c9:9a:f7:fe:a4:5d:57:6e:25:ae:2f:
         4b:23:a4:9d:f8:b6:33:1f:1f:9a:c4:1c:2e:58:52:d4:cf:42:
         58:43:3b:a7:57:a7:14:67:52:82:4e:62:e7:a4:70:51:c6:ac:
         68:08:1a:81:8a:9f:59:2f:36:92:23:ba:e2:51:22:e1:0b:5f:
         29:2c:2f:02:79:6a:96:d8:84:23:c4:c0:89:7d:89:d2:c9:65:
         d6:4c:28:0b:94:4b:de:c2:96:57:7a:47:d9:b0:d5:95:d6:b9:
         ed:8f:d8:f1:9e:29:be:9c:22:c5:73:11:38:4a:6e:7a:b2:d8:
         3d:5a:dd:b5:ea:0d:60:af:8f:3b:b6:a7:a9:81:63:f0:5a:17:
         2b:b3:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:44:44 2026 by rpki-client