Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
File:                     d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (raw, json)
Hash identifier:          5Y+6NgvCgheNeqzeMBXq9QLUNN6JPiLJtJQEDvG1H88=
Subject key identifier:   03:01:37:D5:81:D1:14:FE:07:F3:73:45:5C:7E:67:37:0D:C3:D8:2B
Certificate issuer:       /CN=3878fd50-eae1-4b38-a142-8eff8910579b
Certificate serial:       010D0C9F4328584D19B4E1D3826ABBEFECC6DE00
Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     14807
IP address blocks:        2607:b7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:e1:d3:82:6a:bb:ef:ec:c6:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=698e4326-1e59-41a7-b8ed-aff3ead5a796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:09:c7:26:4d:76:9a:ab:93:b0:e6:af:9f:
                    e3:19:a7:83:39:22:bd:dc:b7:e7:ea:29:dd:8d:52:
                    d8:56:21:e8:b2:ac:01:bb:a4:48:e8:45:d5:13:ce:
                    99:b7:4f:92:4b:ee:6a:9e:d5:08:d7:f4:d9:9b:ec:
                    02:8f:25:aa:02:cd:1b:cb:9e:7a:cb:d8:98:ea:72:
                    d9:6e:b6:97:91:14:20:60:17:41:3f:e7:cb:80:77:
                    93:ae:43:79:f3:51:5d:b2:86:6c:30:08:cb:fc:4e:
                    66:56:58:f5:80:62:1c:c8:1f:07:28:42:dc:b8:11:
                    dd:5d:6a:df:42:41:37:52:7b:6f:3c:15:30:cb:35:
                    cb:8b:d4:14:ff:6d:ea:0f:3b:80:04:02:51:70:96:
                    ba:35:72:c8:3d:0e:72:71:f6:ad:0a:21:a2:02:5d:
                    8e:29:26:be:d1:11:4c:49:a9:97:90:ff:6d:c8:b7:
                    e7:35:be:ad:6b:e8:bf:27:17:71:56:d6:4b:22:6e:
                    69:b5:bf:ed:15:f3:4f:af:64:bc:fe:0d:ba:d4:80:
                    a6:64:6f:ef:84:55:cb:27:a3:32:25:80:99:de:73:
                    f1:3e:7f:4a:03:30:46:2d:55:02:8c:04:cd:28:3f:
                    80:d7:8b:55:bf:90:f2:bc:eb:df:2e:5e:d1:f7:2e:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:37:D5:81:D1:14:FE:07:F3:73:45:5C:7E:67:37:0D:C3:D8:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:a4:f4:29:6b:0e:06:86:06:d5:0a:ef:db:bc:cf:c7:85:
         b1:fc:bc:eb:41:ee:e4:9a:d4:e1:9e:13:a9:dd:f3:c1:7c:f4:
         1c:58:f6:80:b6:17:32:3b:b5:28:53:51:a8:18:da:ec:e1:96:
         a5:0c:f0:d6:cc:90:80:1b:6e:53:b2:7d:05:be:a0:22:79:64:
         fa:3a:6c:61:25:75:11:21:26:7e:8b:99:fa:d4:6d:12:43:3f:
         c9:0b:74:37:f7:34:47:ad:1d:6e:23:72:bc:b1:cb:86:aa:14:
         ec:3c:7a:16:89:3c:c5:7d:ec:56:20:5a:85:3d:91:7c:03:19:
         f5:68:34:63:33:f5:da:be:79:13:e3:c5:c5:ba:f1:16:d8:a4:
         9b:57:ab:05:9c:e9:35:05:f8:f8:06:05:62:1c:4f:04:ca:12:
         0e:c2:81:68:86:93:13:88:88:47:77:3e:78:79:a1:33:55:b5:
         6a:a6:76:74:3b:6a:be:b0:a7:08:c1:a2:0c:98:22:df:d6:1c:
         85:4a:c9:1c:6e:84:3f:2a:36:a9:72:26:99:90:e6:29:1e:1b:
         1e:26:32:ef:63:49:c8:e5:9d:1e:de:a2:d5:6e:e6:ec:46:10:
         82:cf:75:90:6c:42:21:1e:5a:1e:30:b4:e7:27:78:2b:04:87:
         05:3d:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:58:09 2026 by rpki-client