Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
File:                     5d25e087-be39-300b-9ac3-0f9a2a629082.roa (raw, json)
Hash identifier:          u08f5mqB0aIPcy7ppA/2o0MB7MPUytw9wnVp9Kb4xy4=
Subject key identifier:   D7:1E:96:67:0D:F0:C0:3C:3D:1F:57:4B:A7:62:B1:65:21:E7:83:1B
Certificate issuer:       /CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
Certificate serial:       010D0C9F4328584D5243590A5868F3797DF2A580
Authority key identifier: D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     5670
IP address blocks:        2607:97c0:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:59:0a:58:68:f3:79:7d:f2:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=def3769e-7e34-4017-86c1-8aab41dae080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:cf:d3:67:6b:f5:10:0f:a6:e5:2f:46:77:
                    35:e6:6f:f1:a2:7e:9b:47:bb:71:2c:96:31:41:68:
                    20:59:85:58:d9:e6:fc:cb:43:8a:ac:d4:cd:00:49:
                    0c:4d:fa:ac:89:a6:da:a3:c1:0b:38:13:d3:a0:b7:
                    6b:2d:38:fb:b7:c2:16:2d:5a:98:33:fe:89:f7:55:
                    87:00:4d:3e:af:ba:ec:d6:07:49:95:e0:e0:91:9c:
                    82:bd:04:f5:8b:df:f1:e3:b6:35:ce:e8:00:06:6c:
                    82:0a:75:c5:62:aa:55:14:6d:65:7b:2d:32:87:ea:
                    59:37:66:36:24:da:28:62:1f:a5:dd:53:01:21:99:
                    d2:c8:cd:4f:63:e7:cc:72:41:71:be:fb:3d:b7:cc:
                    fe:4b:e7:5f:4d:8f:79:ce:b3:13:9b:a9:74:81:5a:
                    f5:9a:31:8a:2e:12:93:bc:7a:6f:ec:fb:2e:03:b3:
                    3a:02:41:92:55:6a:f1:0b:54:1c:59:24:08:03:d5:
                    bd:7f:c7:22:78:f3:c9:ed:06:11:d6:b6:ff:b2:b7:
                    f0:80:cb:64:3e:ab:de:38:cb:9f:28:b4:2e:28:45:
                    14:d6:be:ae:97:bc:f0:c4:6e:ab:7a:0b:1e:eb:e0:
                    7b:bd:65:28:c4:b5:a6:04:97:20:a0:09:19:43:44:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1E:96:67:0D:F0:C0:3C:3D:1F:57:4B:A7:62:B1:65:21:E7:83:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl

            X509v3 Authority Key Identifier:
                keyid:D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:97c0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:27:47:f7:27:ff:dc:4b:54:f0:bf:65:e8:2c:68:b1:2d:8e:
         08:61:43:30:c4:e6:f6:b9:b9:a7:88:4a:90:0a:b1:ff:ac:53:
         f4:92:42:43:bc:96:26:df:71:46:a7:57:89:73:3f:68:ae:d7:
         08:cf:04:8e:bb:17:dc:45:3d:24:b9:eb:84:ad:d7:c9:7f:e3:
         58:c5:7e:4f:52:38:9f:ce:d1:50:eb:d6:bb:61:40:d4:40:92:
         9a:67:2b:20:c1:03:d2:7a:ef:69:b7:ff:25:41:87:94:d9:7d:
         d8:f7:68:66:e5:91:3d:d1:77:7c:03:ef:44:c4:2d:66:0f:ef:
         00:57:b0:5a:c7:64:f7:6e:0a:f9:b3:83:6f:60:32:a3:80:1e:
         56:44:ab:ae:ad:a1:81:2d:55:39:01:ff:de:b7:88:02:ca:4c:
         cc:4a:2e:ff:11:5d:26:5d:56:8d:b8:72:a7:66:ea:0f:3b:d0:
         b7:9d:8c:9a:f5:0d:34:82:90:11:60:50:03:ee:b8:a4:1c:b1:
         30:28:b7:f4:70:fe:af:39:9d:56:3f:b0:f6:43:ab:7b:a2:5d:
         6f:96:2e:b7:5e:b6:42:ad:27:51:5b:b9:74:77:d4:0e:3b:94:
         a3:81:80:eb:49:f3:31:de:ca:12:b6:02:b2:90:67:21:8d:f0:
         84:2f:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 02:17:07 2026 by rpki-client