Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa
File:                     913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa (raw, json)
Hash identifier:          r9iT5SAwoFCDRdY1DSVqsYYPRy2scCqcGSperh+97no=
Subject key identifier:   F2:DF:FF:07:D9:A6:57:8E:B8:8C:D9:72:43:1E:D5:0D:0C:10:FE:F7
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F4328584D9A200BBC3A8C6C7ACFA0E680
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     14618
IP address blocks:        2620:133:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:0b:bc:3a:8c:6c:7a:cf:a0:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=c8851fc1-1b12-418d-bc42-4bd16cf10ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:5d:de:c5:8b:db:4d:ac:d8:64:22:6a:ed:
                    71:e5:de:da:f8:8b:64:85:5e:a3:c4:52:c9:e2:88:
                    5a:c4:18:59:78:4c:5c:3f:0d:43:de:e3:55:70:80:
                    5b:e9:95:cb:81:44:8e:7f:6c:8d:4a:78:8a:20:31:
                    03:87:5a:94:f4:42:da:c5:cd:99:bd:70:2b:00:ac:
                    bf:e9:76:38:7e:c8:a1:cd:ec:62:39:62:d2:ac:a7:
                    5d:dc:30:5c:58:68:db:f6:09:92:bf:4e:8e:87:36:
                    96:0b:18:21:22:18:a1:96:9b:9d:8f:70:e3:85:f1:
                    04:2d:a6:05:bb:14:c0:13:ee:79:3b:e7:6d:db:92:
                    46:c5:b5:86:29:ab:c5:0d:d7:c4:8f:66:c2:1a:5f:
                    17:0f:32:9e:5f:de:36:f7:c9:fc:04:59:28:8d:14:
                    6a:36:f7:38:68:19:bb:83:3c:67:88:15:d6:4f:0d:
                    2c:e3:86:3a:81:fe:f8:2e:46:8a:32:aa:ff:a1:9f:
                    e5:a6:20:0a:f9:4f:63:56:25:d0:e5:88:4c:50:f9:
                    86:23:ca:8a:7f:af:35:03:dc:68:c1:d4:3d:82:fa:
                    71:f2:0e:6a:de:5d:17:e3:59:84:28:5e:8d:ff:cb:
                    a5:a2:fd:e9:8e:15:8e:c5:75:36:ee:c5:af:09:75:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DF:FF:07:D9:A6:57:8E:B8:8C:D9:72:43:1E:D5:0D:0C:10:FE:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:133:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:41:80:c3:0d:1b:3c:b1:51:ce:b1:0e:ee:28:7e:7e:34:
         92:a7:12:0c:eb:ff:fc:c3:7a:4d:36:4b:f3:c2:11:fd:d5:f0:
         b6:d8:02:4e:20:60:6d:08:d8:87:6e:9f:e3:63:d7:18:dd:ab:
         a1:d7:96:06:d4:19:73:c1:3b:fe:8d:85:a9:1f:01:f9:1d:24:
         3b:59:93:fc:b5:83:93:de:25:04:b9:95:09:65:a3:d1:4a:f6:
         83:1a:6a:17:a5:af:39:49:a7:4d:88:a8:74:c1:7b:98:12:d1:
         86:ca:c1:10:3c:1b:06:de:10:33:3e:3d:a4:9c:d6:5d:67:b1:
         f9:4e:f2:da:02:37:df:ca:58:c4:ff:46:19:92:43:fa:85:55:
         b5:c7:8e:f7:15:96:a3:90:74:43:e5:dc:3c:92:ab:76:f6:07:
         70:79:dc:cb:57:f1:41:a6:6e:c1:03:48:63:f6:71:0d:f5:ba:
         7f:c6:6b:5c:72:11:5a:4f:9a:11:cd:bf:cc:31:27:61:c2:b1:
         e2:2a:94:2c:2b:f2:ef:6f:90:43:b1:57:23:ac:45:24:c9:43:
         77:0a:19:cb:0d:5d:8b:c5:61:41:cd:96:df:ea:1e:52:67:87:
         51:4d:18:a4:0c:7e:5e:6c:28:a8:34:91:1d:89:4e:00:25:23:
         90:fe:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:48 2026 by rpki-client