Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
File:                     be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa (raw, json)
Hash identifier:          jBgEVYYKbzMOHVIJfsb06Cc63U6J0nnn+k6CXEZ0Pec=
Subject key identifier:   46:91:F8:42:38:15:7D:C6:E0:92:46:FE:0F:A4:9F:08:4A:BA:9B:F4
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F4328584D5E1A4C0021CE40356FF26AC0
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     18875
IP address blocks:        2607:d880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4c:00:21:ce:40:35:6f:f2:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=8f4dede7-6480-4f2e-9fb6-923ed1600602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:de:7d:ce:c6:23:b4:1e:11:8c:0b:9b:09:
                    8d:27:b3:cf:cf:d6:94:24:9e:8e:e9:54:6f:fe:2b:
                    bd:ed:cf:32:1f:4b:a0:8d:23:8a:b3:5b:c8:78:6e:
                    91:fd:24:11:68:37:fc:42:f4:a4:aa:5a:c8:9a:b7:
                    a4:8f:32:ef:c8:16:dc:21:d5:3e:a0:e9:74:f2:3d:
                    d0:b9:aa:b8:b4:8e:2f:bb:20:0a:65:4d:54:19:f9:
                    8f:0f:13:a6:09:28:b5:e0:0d:43:32:a8:f8:3d:30:
                    cb:10:71:b8:bc:df:fc:4a:10:1a:03:62:3b:be:00:
                    9c:b9:fd:72:2a:a7:76:c2:af:ba:22:0c:0c:1d:cf:
                    50:dc:86:0f:a2:b7:c2:20:ef:fc:3b:e9:bb:47:85:
                    4e:5f:9a:fc:48:37:03:91:00:5b:ba:6d:d9:e9:a1:
                    6f:1a:65:ff:d3:c5:d9:7c:c8:74:0a:b3:00:2f:a7:
                    b9:ee:d6:ab:9e:d2:f3:1c:c5:e0:eb:db:53:9a:5d:
                    94:95:29:a4:8a:26:d2:6c:0a:5a:b3:bb:63:82:3e:
                    69:84:7f:49:7c:96:af:ed:c1:c0:f7:60:b0:19:e5:
                    fe:2f:24:9f:74:66:1a:27:48:75:90:ac:f0:9e:bc:
                    50:8d:82:ab:c1:7d:e6:33:92:2a:3b:27:0c:b2:db:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:F8:42:38:15:7D:C6:E0:92:46:FE:0F:A4:9F:08:4A:BA:9B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:ee:66:24:63:06:63:ff:d7:9f:9d:8f:13:f9:31:14:c9:
         05:dd:97:51:ff:0b:9f:a1:e4:3e:55:5c:46:d7:00:04:d1:1b:
         6b:f7:e5:22:b8:e5:c9:85:8f:ef:06:a5:e1:8e:1e:db:fd:54:
         71:c1:33:69:b4:0b:10:7c:f0:1a:4d:14:05:31:9b:d0:d8:e3:
         ac:18:c7:6a:e9:5a:7b:f9:d9:9b:03:56:a4:fa:e4:dc:89:db:
         64:27:48:d7:1b:9f:d6:d9:4d:d8:33:ca:fd:2e:e8:59:c5:c2:
         c2:98:21:83:e6:7f:b0:ab:a6:18:c4:a0:c5:c7:cc:12:e0:86:
         ec:9b:e1:ea:c9:c9:05:67:de:79:d6:52:b2:48:94:07:a6:58:
         c4:ff:96:65:e0:47:c1:7b:21:a2:2d:d4:0a:4b:4f:03:49:f4:
         af:1c:23:ac:4f:9b:15:80:bd:f2:f9:ab:91:66:41:92:54:e9:
         ba:6a:58:d2:1d:be:6a:d6:2c:7e:dc:f6:c7:93:d4:39:77:9c:
         99:67:49:ed:19:3e:6c:39:d7:fd:e3:3b:04:c3:af:b9:9b:47:
         ba:52:8c:9c:5c:1c:6a:a8:f3:81:94:23:fd:ef:ac:c7:c0:86:
         4d:88:94:43:13:3e:92:59:f4:83:2c:4c:b7:f1:58:fb:bc:9d:
         d6:99:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:49:36 2026 by rpki-client