Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa
File:                     b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa (raw, json)
Hash identifier:          TC151TRx28GiCM44z5DTwTkvUloE8rC2ocheDMN/O50=
Subject key identifier:   9E:38:75:8A:60:15:52:27:D6:16:73:EC:A7:CB:13:4B:3C:D2:DB:CA
Certificate issuer:       /CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
Certificate serial:       010D0C9F4328584D07AD03A3F4D3761A031E2380
Authority key identifier: 66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     22439
IP address blocks:        2607:fa98::/36 maxlen: 36
                          2607:fa98:1000::/36 maxlen: 36
                          2607:fa98:2000::/36 maxlen: 36
                          2607:fa98:3000::/36 maxlen: 36
                          2607:fa98:4000::/36 maxlen: 36
                          2607:fa98:5000::/36 maxlen: 36
                          2607:fa98:6000::/36 maxlen: 36
                          2607:fa98:7000::/36 maxlen: 36
                          2607:fa98:8000::/36 maxlen: 36
                          2607:fa98:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:03:a3:f4:d3:76:1a:03:1e:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=e15f429a-641e-4cf4-9770-06a01d95aa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:3e:b2:57:30:4f:86:be:76:44:ba:0d:e5:
                    8f:c1:44:72:dd:ea:32:07:87:18:53:4b:89:f0:4a:
                    b2:2d:b1:6b:60:1b:c1:61:cf:12:e1:17:3c:38:ef:
                    97:f0:11:b5:c6:d3:25:97:30:56:0b:a4:fc:07:9b:
                    2c:23:fb:7a:3c:4c:76:fd:3a:9c:72:da:50:66:3a:
                    2e:0a:ff:9f:35:c3:80:c7:29:54:e8:3e:01:98:00:
                    01:f2:33:e6:26:8f:6d:57:a8:fd:a9:aa:73:05:b0:
                    3c:6e:ce:a2:f5:4e:b0:68:0f:ff:e5:fe:19:00:27:
                    ac:ab:8e:78:1f:52:84:63:b7:5b:b1:bd:d2:b4:8c:
                    af:b9:29:f3:2d:3a:fa:03:19:ad:d8:21:b0:cf:cd:
                    c3:3d:95:49:e7:d7:c9:f0:61:eb:c7:84:f6:68:33:
                    85:82:d5:b1:bd:08:fc:0a:58:23:55:fe:c4:81:b2:
                    8c:a2:69:4e:21:f9:9a:6f:de:1f:a2:5b:f6:94:84:
                    e7:f2:52:89:0e:32:80:c3:08:c0:9e:37:41:62:b3:
                    5b:b1:91:ad:0f:75:b1:82:65:95:b4:5c:81:b6:e8:
                    36:5c:89:46:1a:b2:94:a3:e1:73:a1:09:e0:3f:71:
                    4f:90:1e:6a:47:f5:b6:9e:31:bc:bc:27:cb:2b:d5:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:38:75:8A:60:15:52:27:D6:16:73:EC:A7:CB:13:4B:3C:D2:DB:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl

            X509v3 Authority Key Identifier:
                keyid:66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa98::-2607:fa98:9fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:33:9f:44:5b:25:3f:30:2a:35:f7:d3:58:c7:60:b3:48:
         c9:1e:82:25:09:25:65:60:d2:b3:19:41:46:8d:47:66:21:5a:
         26:df:8c:40:55:35:22:91:fb:64:29:63:76:a6:1b:a6:68:84:
         9d:0a:34:09:b0:aa:17:06:80:01:b3:f3:83:3b:04:4e:e4:3a:
         06:e6:3b:40:b1:81:a9:34:8b:c7:4b:be:2b:13:18:68:c1:86:
         02:43:a6:9a:38:28:68:ec:eb:c4:8d:9e:2d:23:7d:79:6f:f5:
         b0:6f:eb:a8:9d:69:09:c5:a4:38:54:2b:59:03:07:7b:c3:61:
         f3:c9:5a:2c:b1:1f:dc:bb:a9:92:25:4c:53:e9:c6:87:8b:f3:
         f1:24:bd:f0:92:1d:b6:f4:0a:d6:7c:fd:2a:14:31:d3:a2:77:
         4a:2a:4d:c6:4f:4c:0b:63:2e:48:ad:23:9b:f0:9d:bd:20:2b:
         f3:b0:d7:81:80:c6:10:75:3f:d9:21:6e:ba:17:4f:c8:61:96:
         e0:9e:cc:88:55:88:90:c4:dc:a6:0b:95:40:f0:4c:7b:f1:d9:
         5c:50:ba:3a:69:d7:98:69:7f:25:4b:39:61:b4:ea:cb:73:39:
         b8:38:ff:0f:29:ba:98:39:6e:e8:00:11:5e:ee:7c:4f:8d:02:
         16:cf:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:59:42 2026 by rpki-client