Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
File:                     2e34a07c-b74c-3aa4-ab19-a5965764e773.roa (raw, json)
Hash identifier:          yPosyMCU6ZX0v8PY3wWUng7aAu/8aKwAOL8M4Cw5cFk=
Subject key identifier:   F1:D0:4C:1D:F2:F3:D0:9C:2D:48:22:D4:32:D1:CE:77:A8:1A:A5:63
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584DAAE0334018FE1800F954A820
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     393885
IP address blocks:        2604:4a00:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:33:40:18:fe:18:00:f9:54:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=510b2c39-4cab-42c6-9ef1-efc9f8920df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:5c:66:0a:07:5b:33:e9:2d:9b:f5:74:50:
                    4e:8d:30:40:eb:21:e0:67:90:71:6d:9b:45:3f:33:
                    2e:18:62:37:77:1e:9b:6f:2d:4b:df:42:ad:b9:4f:
                    41:f6:e1:85:ba:81:89:51:82:a6:cd:69:c8:7c:16:
                    4a:62:8a:23:a5:2c:f2:95:62:44:76:ab:fa:41:a2:
                    88:aa:c6:b5:c9:66:dc:bd:1c:2c:20:17:e7:7e:29:
                    e9:ba:db:c9:f0:02:8d:71:33:ff:f4:48:fa:06:a5:
                    e1:4b:a3:ad:bb:25:22:91:11:40:30:49:eb:cb:1a:
                    a0:99:e8:df:0d:52:f8:a2:de:2d:b9:8e:36:b6:1f:
                    48:26:ca:1e:f1:3c:b8:fd:b5:b2:1a:97:24:e7:12:
                    26:ee:11:de:4c:04:8a:13:3b:f4:99:fe:2d:44:86:
                    e0:95:10:35:72:38:ef:80:ef:b0:f9:02:8a:a3:02:
                    6e:5b:a3:3a:7d:f5:74:a6:a1:b3:cc:10:3e:cb:31:
                    17:2e:1f:15:c4:c9:79:7c:3a:33:a5:07:2d:64:e0:
                    15:70:c7:ec:cb:51:99:95:2d:fb:5f:82:67:21:dc:
                    b6:48:25:e5:fa:c6:53:8c:51:fe:4f:af:b4:bf:9a:
                    05:53:17:dd:48:6a:a8:b6:67:c6:3b:5b:77:c9:b0:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:4C:1D:F2:F3:D0:9C:2D:48:22:D4:32:D1:CE:77:A8:1A:A5:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:57:ef:ce:30:1b:6a:b5:77:70:37:d1:0c:c5:be:38:3a:8e:
         66:c5:5c:20:46:e3:c1:d7:2e:cb:ce:fe:b8:2b:b7:81:34:f7:
         84:4e:69:77:45:d7:f3:b9:79:b9:94:22:2e:34:e1:e2:b0:c7:
         3e:29:4f:67:a1:6a:03:53:0a:03:28:6a:95:2b:bc:76:89:d7:
         ec:19:f0:d8:78:2e:90:94:bf:72:26:e3:0e:ec:ac:f3:6c:be:
         15:cc:c2:46:63:0d:67:08:11:1b:53:d1:31:6f:60:da:ac:3a:
         4c:08:6b:44:a9:64:ef:74:49:ce:4a:fb:b6:b3:ac:01:f5:03:
         a5:5b:fe:be:1c:9e:10:13:3c:9a:20:d9:c0:21:84:64:49:b8:
         96:52:61:1e:72:94:be:24:09:7e:2f:75:c1:a4:6f:13:2b:7c:
         35:7b:fb:5e:0a:4f:97:60:22:ce:bf:8b:a5:f3:6c:14:31:3e:
         96:61:88:72:d7:3f:14:21:b5:ad:3a:56:06:7e:2d:14:57:d3:
         95:7c:af:64:57:01:66:61:14:b2:81:73:af:48:fe:f1:17:0a:
         3d:99:6d:f4:a0:a8:70:2c:c4:57:85:2c:15:d0:2a:0b:85:60:
         af:f1:04:ec:c4:bd:35:86:e9:2c:0a:69:4f:c7:0b:32:3a:74:
         6e:3f:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:45:08 2026 by rpki-client