Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/73b87667-4798-33f9-b8d6-306bc759d858.roa
File:                     73b87667-4798-33f9-b8d6-306bc759d858.roa (raw, json)
Hash identifier:          yBuWDoW+udhGyiDIc4dNMJD7veJxQ+F3AqWOy2y2O2g=
Subject key identifier:   AD:F9:32:71:15:56:9C:F7:32:16:83:AE:B5:46:94:A4:31:3A:EE:3C
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584CA5F6F00232A55A5386F26100
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/73b87667-4798-33f9-b8d6-306bc759d858.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     30456
IP address blocks:        2605:7940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f6:f0:02:32:a5:5a:53:86:f2:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=71c09aac-f25a-48fc-9a21-99bdffc0c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:70:fb:11:92:8a:d2:43:a7:39:b6:0e:28:
                    51:a9:a4:bb:a0:8f:0a:12:86:1a:86:47:0c:b6:36:
                    0d:0b:b7:4a:0a:30:9b:5c:69:f8:da:61:62:f9:eb:
                    bd:13:25:70:14:3e:ce:0e:69:9f:2f:0e:9b:8b:fd:
                    25:19:78:f5:1c:9f:a0:a7:b1:8c:e2:7c:ca:33:2a:
                    7c:8f:9b:43:57:64:81:00:c5:62:e8:3d:ba:ad:08:
                    ef:de:c7:82:78:42:71:33:ae:f0:a4:73:47:c6:87:
                    a3:68:cf:06:03:83:e7:91:64:96:fb:28:20:88:fc:
                    cc:08:c9:f7:d6:a5:57:ea:4e:f5:ad:b9:af:a0:fa:
                    85:42:f1:45:9d:d6:dc:c0:e7:42:c9:5b:9a:ec:b8:
                    a1:48:44:00:cb:be:93:08:10:1b:a9:6b:5a:c7:a2:
                    d5:57:c5:84:64:a0:08:7e:1d:67:e2:b8:ee:45:1f:
                    10:fe:b9:af:31:1d:8b:bb:6e:3e:b0:ff:9d:cc:fc:
                    fb:19:1f:44:0e:55:91:87:16:ed:1a:e5:3b:50:cc:
                    4b:f2:13:0a:01:51:bf:8f:72:a4:72:e6:5c:3d:2d:
                    ea:76:ed:33:ef:f1:c1:61:af:30:72:86:a3:d0:5f:
                    60:ec:4c:4a:ed:af:d9:83:af:26:cd:50:f5:44:06:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:32:71:15:56:9C:F7:32:16:83:AE:B5:46:94:A4:31:3A:EE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/73b87667-4798-33f9-b8d6-306bc759d858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:01:3e:83:d7:15:17:e9:7a:53:5d:0d:11:a2:88:bd:b7:65:
         9a:8d:a0:8b:43:76:38:0e:09:8d:55:8a:87:0a:38:b1:2e:34:
         35:09:11:d1:76:1e:43:37:cd:c1:8d:45:41:59:21:9f:41:d5:
         1c:b2:06:51:a7:d6:a3:52:58:10:a9:ac:f9:1d:3f:33:ad:bb:
         7e:c5:ab:82:e5:0a:0e:c7:41:ac:91:21:9a:db:35:2a:99:ac:
         b4:37:15:4c:0e:cf:bc:9e:72:b2:1b:33:89:d5:dc:da:be:9a:
         0e:01:34:4d:60:8e:a3:50:47:b0:64:ff:f2:9b:8b:46:01:88:
         56:81:08:9c:09:19:02:81:cb:4d:e6:06:92:f7:21:de:6f:81:
         7a:a2:19:d0:23:2f:a3:6d:8d:8c:14:ea:76:6e:ee:23:c7:60:
         28:88:94:b3:3e:26:ad:2d:d2:ed:7a:9c:ed:ed:26:ec:05:f8:
         05:25:a4:9e:ce:96:07:9e:14:fa:b9:3d:57:18:9c:b2:bb:67:
         f1:95:db:5a:b0:26:86:7b:df:da:64:9d:d6:1d:8c:0a:3b:52:
         ff:da:39:4a:7e:84:32:8b:a7:fc:7c:45:5b:f4:3f:ed:f3:41:
         af:59:6d:7b:a2:5e:c5:82:7b:8c:3f:7a:37:be:79:10:31:6f:
         4c:b7:32:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:56:00 2026 by rpki-client