Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9b166929-0b1f-3efe-87f7-b0f71d6bfb6b.roa
File:                     9b166929-0b1f-3efe-87f7-b0f71d6bfb6b.roa (raw, json)
Hash identifier:          u2aEmazTjkbBeMmps2/Jpj+QA/4i4D4/ej99Ty40Row=
Subject key identifier:   C4:D5:9D:D6:B9:D2:A5:BE:E9:0B:1E:C6:6B:D7:B3:27:08:20:3B:FB
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D905A98820FB0404C8B64C000
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9b166929-0b1f-3efe-87f7-b0f71d6bfb6b.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     62610
IP address blocks:        2604:980:e030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:98:82:0f:b0:40:4c:8b:64:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=66b7b315-0501-4b62-b7f9-68ab7d8a2d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:79:93:80:55:29:3c:9d:24:93:c4:fc:ba:
                    aa:7f:c8:a0:4f:fe:cc:86:87:bb:b5:37:89:d4:67:
                    51:37:4f:ca:7b:5a:18:93:d5:ca:3d:83:38:a9:f1:
                    af:61:f7:60:71:31:55:05:e1:fe:66:29:39:93:5a:
                    bb:17:57:44:8c:cc:7f:b8:61:c0:86:21:27:5f:a9:
                    93:a0:5e:dc:f6:26:93:c0:8e:b8:dc:b7:53:7e:7a:
                    8d:58:36:e3:c3:b0:a3:fb:fa:a8:a3:43:28:25:a9:
                    c0:30:a7:b7:7a:ca:74:cc:21:52:87:77:01:0f:36:
                    08:7f:dc:7f:4e:3c:fc:64:84:d1:49:7f:81:14:7c:
                    36:c2:b5:60:5b:a9:a6:a8:30:d6:d7:f0:d9:3a:1c:
                    ac:85:ee:6d:1d:4f:be:ee:0b:b8:49:0e:7d:f5:48:
                    95:cc:e8:26:99:2a:7a:f5:ff:d5:5f:b6:7b:8d:25:
                    2b:da:26:4a:3f:50:16:1c:ce:c3:37:d5:d2:c1:70:
                    a5:0f:e2:44:32:57:51:ca:01:09:e0:a2:b0:fa:c7:
                    53:84:e8:da:a8:82:b1:c9:3f:e1:3b:a4:aa:08:d2:
                    e1:67:7e:11:b4:37:ad:fe:85:af:e5:1c:be:5f:5a:
                    0d:63:0a:67:13:e0:35:79:b4:7a:38:81:84:ac:41:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D5:9D:D6:B9:D2:A5:BE:E9:0B:1E:C6:6B:D7:B3:27:08:20:3B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9b166929-0b1f-3efe-87f7-b0f71d6bfb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:36:9e:86:88:42:9a:c0:01:1f:82:65:7a:0a:f6:e5:40:
         79:46:61:ef:46:b9:38:00:3b:a9:6b:0f:28:50:b8:3d:09:22:
         83:75:ed:e1:a9:67:a0:5e:94:f2:ac:51:a4:ab:b2:b7:29:72:
         d7:36:7e:7e:20:bd:ab:29:b5:ed:d2:1d:d5:1d:5c:63:fc:86:
         65:18:1a:eb:4e:cf:fa:da:a9:78:6e:88:f0:4e:6a:62:b7:69:
         3c:16:de:85:68:4b:06:5b:f2:8e:cf:d3:65:be:71:82:15:b4:
         84:1b:80:ce:ff:7c:0d:bf:9f:61:4c:1e:89:2c:fd:ba:7c:92:
         52:9c:07:0d:c6:28:28:10:2e:f0:50:ad:ab:75:15:b3:4a:25:
         90:b0:21:1e:dd:b3:cd:42:0d:a3:b2:ae:dd:0f:0d:b1:57:09:
         c6:c3:bf:ec:38:7f:12:ff:c8:3c:59:81:74:db:0f:cd:54:ac:
         91:41:ed:b2:e0:f2:e9:92:84:29:dd:81:2f:f5:88:df:e6:00:
         79:a7:f9:da:2a:85:11:7f:4b:dd:51:34:65:60:85:21:0d:d4:
         1b:c9:0c:15:a6:d2:5d:6a:17:6e:79:81:ee:69:b1:03:61:8d:
         01:7f:5f:87:b3:20:49:9a:47:7a:9e:4f:28:53:aa:44:69:83:
         61:55:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 15:20:35 2026 by rpki-client