Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa
File:                     d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa (raw, json)
Hash identifier:          fgtInPUUj+qragZMPai7Cw0khlLaHmkGg2Es2hBGI68=
Subject key identifier:   D1:E0:B6:FD:D3:19:76:AB:9B:A8:CF:0C:E0:88:0A:33:E2:49:9D:9A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A72F32115658EF7B80A3C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        2603:90f5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:2f:32:11:56:58:ef:7b:80:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=9ca4ffb5-cd68-4008-9dbd-71cfd274a1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3c:f6:b9:f5:82:e7:7f:f5:4b:1e:a0:6a:35:
                    fd:4b:2f:a5:62:e9:06:3c:ff:2c:84:44:ca:56:6d:
                    1a:e1:8a:03:10:4c:c5:72:54:4a:47:7a:93:8f:d5:
                    63:59:4f:fb:8d:1e:84:e6:b0:ca:c5:38:04:b9:67:
                    f7:26:2e:34:90:35:3f:2c:70:c8:e0:33:39:21:1e:
                    5c:af:6d:7a:3a:2e:a6:b7:0d:5c:4b:36:96:eb:d5:
                    99:81:f0:d0:5a:a6:e2:35:a9:00:e8:bf:74:bf:bd:
                    89:d0:a9:1f:81:4b:a9:9f:51:57:55:7f:ae:1a:24:
                    44:a3:67:4f:59:84:6c:84:3d:af:7f:de:f2:32:38:
                    ba:1a:04:d1:92:1a:93:ac:69:48:5a:b8:ef:8e:c9:
                    a0:08:03:28:1b:1b:3e:92:66:f9:ca:95:8e:7d:f5:
                    e1:ec:88:81:22:0b:8f:bb:dc:5f:0e:4e:72:80:fe:
                    41:97:57:fd:31:58:27:54:16:03:d2:b0:f4:52:6d:
                    4f:d4:15:ee:5f:99:9a:df:ae:90:c8:1c:30:97:31:
                    3a:bd:d3:41:09:f6:05:55:46:78:55:a9:15:29:49:
                    84:bf:1e:4c:51:c5:e4:dc:a7:40:4f:23:5f:ef:71:
                    c8:ed:ec:35:fc:7f:9e:ae:91:9f:c3:26:6d:fa:c8:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:B6:FD:D3:19:76:AB:9B:A8:CF:0C:E0:88:0A:33:E2:49:9D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:53:df:fb:a3:47:17:97:e2:34:a0:54:46:3e:c5:82:3d:
         21:bc:a8:7a:5f:2e:7c:eb:ea:b8:78:7c:12:c2:25:78:08:3e:
         29:59:34:68:12:89:da:56:77:cb:64:93:7f:97:c0:40:5c:36:
         ac:9b:f4:65:e1:1a:ca:16:5d:f7:94:44:a2:c4:fd:ee:1a:75:
         8d:53:03:51:60:28:31:34:ee:f7:c3:7f:0e:41:12:d9:c2:97:
         6b:a8:c7:de:c2:b8:85:10:a7:e3:a5:ec:ee:6c:61:22:10:09:
         e1:f5:75:e7:7a:6e:8a:90:f5:1c:78:21:fb:02:a7:ad:e7:d0:
         de:0c:03:2d:7d:b3:92:d3:33:e5:80:7b:cc:b4:e9:5c:c9:fa:
         6a:92:d1:26:6e:ad:15:f0:2b:5d:e7:c4:90:04:d2:5e:e4:a8:
         f8:14:a2:73:5a:fe:37:f8:1d:cd:fa:51:0c:a7:45:1c:86:f7:
         db:a3:13:41:93:4c:8e:31:c8:e1:0d:d3:e2:9b:d2:b0:bd:ef:
         c2:49:1a:6b:bb:15:91:61:90:ac:ff:64:3c:36:04:cf:59:79:
         25:31:78:53:fc:1a:a9:5f:33:36:e5:aa:c5:df:f9:ee:d1:d4:
         4c:54:92:80:1c:7b:f2:49:a5:de:5a:fc:04:98:57:05:86:e4:
         95:38:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:18:47 2026 by rpki-client