Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa
File:                     da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa (raw, json)
Hash identifier:          cGvduoaOjiomA4K46hPlCfVLEYDHv9invor3M8teA1c=
Subject key identifier:   5C:91:EB:7A:48:54:FD:A0:06:CE:D9:D7:15:B4:6F:BE:A9:7F:43:89
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D8AC547830C528F1D6B2E9D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     33363
IP address blocks:        2603:900c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:47:83:0c:52:8f:1d:6b:2e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=eb2d718f-0595-47c2-afe8-5cd21ea870df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:ae:87:4b:4f:38:5a:f8:cf:16:fb:3d:2d:
                    01:5e:d5:38:83:b0:a4:8c:31:8a:60:1f:43:28:55:
                    31:96:54:c0:81:98:c2:5a:5c:03:aa:29:cd:2e:ef:
                    a0:00:e3:18:32:42:a5:23:0c:04:d5:4b:f1:75:79:
                    e3:d3:41:ea:56:0e:68:e2:29:90:84:cb:09:8e:9c:
                    e7:10:af:bd:43:c8:0a:43:a8:5b:88:a6:c2:d0:9d:
                    e7:94:b8:3a:66:cd:97:79:6b:af:54:89:26:65:ba:
                    a8:c6:53:89:8f:b9:42:66:b8:58:5d:1d:a8:a7:e1:
                    bc:e5:9f:25:b6:c6:63:b7:e9:51:27:fd:e4:3d:8f:
                    08:2b:7d:ea:88:61:48:5a:13:cf:44:87:91:16:14:
                    d1:03:42:e1:07:8c:13:8e:b8:c4:bd:f4:db:8a:bc:
                    ce:8c:79:b2:d3:81:3f:0a:ac:b7:26:3d:04:a5:98:
                    76:c8:ab:58:13:59:5d:5c:89:cd:d1:17:17:f9:fe:
                    d4:1b:f6:91:a7:3b:9d:b6:c9:9c:ba:d1:a1:36:62:
                    82:81:89:00:2e:52:c7:69:94:52:e0:59:07:9a:1e:
                    88:6d:c6:fc:37:56:4b:5d:fe:4e:46:88:c3:ec:b2:
                    cc:cd:32:b6:68:79:57:3c:1f:02:e9:43:39:fe:11:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:91:EB:7A:48:54:FD:A0:06:CE:D9:D7:15:B4:6F:BE:A9:7F:43:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:900c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7e:eb:d8:4e:12:ee:fa:d8:50:f9:dd:91:9c:b4:8f:49:d8:
         60:62:4b:c4:62:79:0a:6a:30:d5:83:95:c7:3c:b7:b0:d6:82:
         40:ad:67:42:c9:b9:16:a2:c1:55:b2:c1:34:1c:ed:51:4e:88:
         f2:a3:6e:da:90:82:5a:b6:a4:ad:09:33:41:e4:0d:ab:c8:17:
         bc:17:dc:ab:6c:3f:1f:e2:72:a2:01:69:7a:67:28:6b:d3:29:
         7f:f5:cc:36:c9:95:92:5b:32:a2:4e:0b:44:41:d1:a2:fd:a2:
         5f:92:f2:15:d3:c3:77:15:6b:f4:24:a0:3c:ed:d8:8b:c8:55:
         f4:d9:d7:ba:b5:ee:cb:92:bb:95:a5:11:9d:92:79:1f:f4:18:
         6e:4a:2b:26:f0:9f:26:a1:58:02:a0:7a:d9:33:d6:30:40:33:
         48:41:14:fb:b1:9b:27:e9:78:d0:93:25:d9:fa:b0:99:ad:12:
         04:34:9a:39:b2:f4:40:30:ee:fc:62:ad:57:8b:ef:ed:a6:f1:
         38:b0:d3:9d:16:93:68:7c:6e:5b:c3:cf:45:5e:9b:08:d2:7b:
         1f:b2:30:37:8f:8d:31:f9:a0:43:78:20:78:ec:2f:56:6e:cf:
         68:f8:6c:ba:38:5b:5b:d3:08:0b:1f:48:eb:44:58:62:0f:dc:
         e5:91:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 14:16:01 2026 by rpki-client