Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/09bc1176-d1f2-38a5-bf79-ed1bdc811aba.roa
File:                     09bc1176-d1f2-38a5-bf79-ed1bdc811aba.roa (raw, json)
Hash identifier:          iKbTzYGZpMm7EqF41daJZBpCTPAp94d3KoCcSunJY2M=
Subject key identifier:   8C:EF:27:56:FA:E1:AD:35:CF:41:80:8B:A3:8E:4D:93:98:ED:36:CD
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584D30388DD9B31FE68F87B70980
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/09bc1176-d1f2-38a5-bf79-ed1bdc811aba.roa
Signing time:             Mon 16 Mar 2026 14:34:20 +0000
ROA not before:           Mon 16 Mar 2026 14:34:20 +0000
ROA not after:            Sun 14 Jun 2026 14:34:20 +0000
asID:                     16504
IP address blocks:        2606:6440:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:38:8d:d9:b3:1f:e6:8f:87:b7:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Mar 16 14:34:20 2026 GMT
            Not After : Jun 14 14:34:20 2026 GMT
        Subject: CN=0d5f1563-2122-44c1-87af-69fbde0227db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:5c:dc:50:e4:4e:41:12:fb:62:b1:22:fe:
                    18:ed:44:6a:f8:6f:9b:2d:04:ba:50:11:44:f5:7b:
                    94:24:6e:5e:0d:a0:9e:b9:d0:87:f5:73:74:11:35:
                    dd:aa:ee:bf:b7:b7:df:76:96:57:f4:e9:3a:54:58:
                    e8:51:99:90:6a:c8:da:1a:8f:2c:ed:55:36:ef:0b:
                    5b:ec:f2:46:dc:0f:64:d2:db:68:68:b7:1d:e5:36:
                    05:4e:29:a2:31:24:a0:a8:7c:f4:c7:6a:e9:80:62:
                    ca:6a:d2:93:aa:a8:da:ee:f8:40:92:c1:ce:84:3a:
                    30:de:34:78:28:fe:fb:87:33:8b:86:e8:2d:7a:9a:
                    53:65:73:50:59:19:a8:b4:8e:cf:84:60:02:59:df:
                    11:c6:30:8b:12:d5:ed:a1:b8:0e:a7:4b:51:2d:08:
                    1b:74:55:be:21:ec:fa:5a:94:3f:71:5d:5e:d1:83:
                    d9:63:8a:29:c1:bf:7c:53:57:32:75:20:c5:91:68:
                    d3:dd:ac:75:76:2d:06:56:28:7f:11:3e:0b:e5:91:
                    1a:fc:f8:95:ae:5c:16:d6:e9:51:74:79:bb:ab:38:
                    68:5c:82:1d:3b:08:60:f5:00:2a:d8:f8:ef:09:b9:
                    0c:e6:9f:4f:35:77:d0:00:54:00:4c:d8:03:0b:80:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EF:27:56:FA:E1:AD:35:CF:41:80:8B:A3:8E:4D:93:98:ED:36:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/09bc1176-d1f2-38a5-bf79-ed1bdc811aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6440:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:83:4b:8f:42:1e:d7:af:5e:1e:cc:66:f2:3a:df:e8:c1:
         d3:71:d4:3b:08:63:59:99:ba:0f:e0:bf:5e:39:d7:b3:9c:07:
         2f:eb:dd:1b:17:86:07:a5:2e:a8:9b:d4:9d:68:b7:90:40:7a:
         74:09:29:1c:1f:e6:93:7f:3b:f8:67:58:c3:c8:de:ed:24:a8:
         f7:8a:cb:3d:e9:78:90:83:09:4e:55:bb:15:a4:49:88:11:32:
         30:d8:20:f6:d7:b6:f9:c4:7b:f4:1d:d3:cd:84:f9:c1:4c:65:
         13:b9:67:fc:63:f0:9d:5f:81:d3:b4:8a:49:4e:c9:a8:3e:39:
         c1:2d:3f:91:ff:f2:cf:ed:f1:7f:b4:67:25:72:ab:0b:85:3c:
         93:a8:55:3a:38:a6:be:52:1c:1e:03:4d:1a:aa:58:63:d8:59:
         2d:2e:3a:fa:55:68:11:57:cd:a9:37:1a:1d:c8:a6:e9:7c:3a:
         a4:d7:49:7b:0e:9e:cd:14:23:68:47:29:bb:13:43:c0:ff:6f:
         7a:90:6e:93:12:31:7b:66:e3:ab:83:c2:80:b0:a8:2a:2e:b8:
         71:75:bb:25:c1:f0:32:0f:48:45:5d:30:9a:ec:e8:8c:8a:a1:
         e5:66:23:61:fd:4c:be:c6:21:2e:01:85:64:1c:47:43:05:57:
         a2:48:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:57:44 2026 by rpki-client