Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa
File:                     d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa (raw, json)
Hash identifier:          2VVwz3lrKMVY1att1J1pofnjFl444kBdkCH9tMceR9E=
Subject key identifier:   99:7C:82:5F:60:FB:9C:9A:8B:70:FD:4D:5C:25:57:4D:C0:D6:39:67
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584D65152C0B46BCC08C3DDE4680
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     25899
IP address blocks:        2607:400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2c:0b:46:bc:c0:8c:3d:de:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=06544b49-0b69-4a92-8932-83538ed39ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:e9:5c:3a:18:32:75:29:93:7e:b3:d7:9e:
                    f8:1d:cb:4b:da:cb:e0:d8:ed:49:85:9f:a7:38:32:
                    b0:84:61:97:75:5b:28:5f:f3:12:15:7e:7d:ff:e8:
                    fb:0e:5e:7f:a6:1c:08:20:43:f3:5a:5e:76:9d:52:
                    50:71:61:1c:12:40:56:73:b4:b9:b6:f3:d2:bb:62:
                    29:f1:c4:5d:1a:2c:87:8f:16:1f:28:83:81:20:50:
                    62:d3:9c:52:9a:d2:54:2d:6f:f4:39:c7:e5:50:95:
                    66:c1:d1:65:47:bb:7e:42:2d:be:3b:fa:61:5c:60:
                    cf:b1:a2:60:92:4e:4d:eb:a8:b8:ce:56:b3:7a:15:
                    13:50:1e:73:50:c4:e2:61:0f:cf:47:b4:fc:3d:14:
                    01:6f:c3:1f:6e:0f:be:2d:05:58:22:96:3d:69:da:
                    83:5a:3d:3b:28:a6:f0:32:1c:4a:1b:46:d9:4f:3a:
                    5b:dc:43:9b:e9:65:d8:5e:db:60:e6:24:d4:bd:7a:
                    79:bd:9e:a8:03:14:99:c9:b3:f5:b3:2c:35:fb:1c:
                    30:4e:c7:6c:6f:3b:31:3e:b9:dd:bb:3f:a4:62:d0:
                    59:53:51:79:50:db:8e:39:96:ad:07:08:55:27:a0:
                    ba:78:92:7c:3c:b1:f9:84:c5:f8:6e:24:5b:bc:b9:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:82:5F:60:FB:9C:9A:8B:70:FD:4D:5C:25:57:4D:C0:D6:39:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d8ee0d49-c697-3a70-9cfe-78b45af6f3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c7:00:e8:b5:57:15:99:92:ea:03:46:1f:60:2a:25:95:1f:
         fb:0d:5c:07:b0:9b:9e:85:c8:16:e3:51:a7:3c:85:7f:00:9d:
         92:12:7a:0d:4f:4b:4a:85:bf:ec:58:09:7c:8d:4f:c1:ee:a8:
         63:7c:26:57:18:76:c2:c0:43:ff:0b:11:ee:f8:10:2d:cf:19:
         f0:f7:df:fd:97:63:5c:3f:2d:43:a3:90:f3:6a:c7:47:45:f7:
         e6:98:d4:82:b3:d5:50:35:d1:05:90:03:52:d4:81:d5:ed:2e:
         4f:2b:8a:74:b5:a3:72:4f:99:e6:f9:05:6b:bf:e7:10:c0:62:
         c6:8b:2e:08:d1:c9:08:03:1b:d4:bb:12:d8:d7:e2:4e:84:20:
         ba:f7:e7:be:86:cf:14:1b:53:e2:99:df:12:d6:59:eb:b3:79:
         b2:bb:89:bf:c8:12:dc:fd:d3:33:d3:45:86:fc:af:9e:b7:41:
         2c:f2:42:3c:dc:81:b9:f6:70:06:f9:9a:47:ad:41:6e:62:ff:
         94:0a:90:98:65:64:a5:c0:41:07:57:ae:46:78:f0:1d:55:d6:
         26:e7:d8:9c:f5:5c:ca:2b:ee:5c:19:f2:25:16:58:cf:00:85:
         0c:0b:27:da:b6:bd:0e:f3:4d:ba:32:fb:aa:21:4a:35:12:20:
         38:07:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:56:28 2026 by rpki-client