Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
File:                     f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa (raw, json)
Hash identifier:          2jCnnCAxlEXwBRvnedus3ivU+fDB3j9Z/9hsazRZyUs=
Subject key identifier:   BA:C7:11:4A:3E:88:1D:36:90:5A:86:7E:B7:27:AF:CF:DC:47:C0:3B
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584DF2108A77CBAA283EDFA9A968
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     396026
IP address blocks:        2607:fc30:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:8a:77:cb:aa:28:3e:df:a9:a9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=b65014fe-cf4e-4d2c-bb39-0afb3781debb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3e:6d:1d:c4:2f:8d:52:08:b6:dd:72:f3:24:
                    83:ff:5c:a3:1f:27:06:c9:d6:b0:a3:de:84:d2:ae:
                    27:bb:38:55:3a:89:32:68:0f:28:87:34:c2:3c:45:
                    f0:07:ab:80:5e:af:c9:e6:22:f7:a5:e6:07:e3:00:
                    9f:a9:2c:4d:d0:e4:56:23:77:50:a1:2c:9e:2c:81:
                    c7:15:1b:10:33:f0:17:75:e0:39:c5:e0:52:19:30:
                    ca:97:e5:71:61:aa:69:30:4f:b5:1e:12:a5:99:fd:
                    f3:79:b6:78:d0:bd:29:87:a9:b1:df:52:c6:3e:1a:
                    8c:b8:97:97:e3:72:b4:2d:af:68:c8:59:63:4f:e7:
                    ba:9a:54:e0:96:34:fc:da:bf:92:e5:3d:6b:cd:5e:
                    ca:b1:27:fb:bc:e1:dd:8b:32:09:a4:18:0d:95:fe:
                    64:ab:c4:ca:df:82:82:92:cc:76:0a:d0:a7:15:db:
                    91:06:fb:e1:ec:ad:dc:3d:24:17:b0:e5:67:23:90:
                    0e:e6:4d:d1:c8:2a:45:48:a8:c3:5e:15:15:22:0b:
                    ef:94:f1:06:df:a2:a2:f0:99:a7:c5:68:c3:ea:9d:
                    13:a7:43:ce:26:eb:f3:c2:5d:39:fb:e2:6a:64:06:
                    05:c9:89:bc:1d:6a:0e:a8:1d:c3:3e:12:61:2d:a3:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C7:11:4A:3E:88:1D:36:90:5A:86:7E:B7:27:AF:CF:DC:47:C0:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:10:0f:da:af:ef:a0:41:72:45:36:ea:8e:e7:4c:ea:17:
         63:a8:f6:29:a6:27:df:11:58:bf:7d:f8:58:e0:34:f2:12:a7:
         5a:fc:c8:ea:da:d9:5f:de:6c:92:79:89:66:93:ec:59:45:d1:
         64:a9:0f:b4:17:8f:29:f3:a2:b9:33:39:39:42:da:19:a1:05:
         f7:81:75:1e:4b:8b:fd:ad:53:88:83:dc:36:ed:8c:8c:a7:9e:
         02:05:be:3b:e8:94:84:7b:e6:40:20:ad:f3:6d:04:08:ce:6b:
         66:04:01:9f:d6:6a:73:76:cd:83:0e:bb:c4:a6:b6:58:40:b4:
         80:34:d8:a6:7d:2e:f4:35:15:0d:cf:a8:fa:ce:bf:56:f0:38:
         e4:6c:5f:f8:fc:ee:f5:a5:d4:f6:3b:52:66:95:a2:e7:83:37:
         44:5d:9c:a0:e9:a8:0c:e4:d8:df:2a:50:19:9b:22:5d:82:b8:
         dd:13:3d:64:4a:41:d8:37:01:83:cd:06:1c:d0:81:37:8e:4f:
         17:77:e2:da:1d:4d:09:e3:d1:0a:02:1c:06:81:c6:f3:ff:b6:
         d8:75:4f:fd:e3:9f:0e:2f:b2:29:df:11:b8:9b:97:ed:29:b7:
         17:b1:32:4b:0a:7a:bb:0a:d6:61:c8:5a:d4:af:9a:5a:91:d1:
         f4:ce:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 07:59:00 2026 by rpki-client