Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/5804f869-6080-32c2-b9e4-b73d94e4428b.roa
File:                     5804f869-6080-32c2-b9e4-b73d94e4428b.roa (raw, json)
Hash identifier:          SPfdQGjKdtdP7OWbPBpeKEFlZHUqweH3SLzHEHYN9HU=
Subject key identifier:   79:AF:E1:56:BE:50:F7:91:F1:09:17:A6:A3:30:41:99:CE:B4:19:B1
Certificate issuer:       /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
Certificate serial:       010D0C9F4328584D57463B9E070BECBDC8DC09C0
Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/5804f869-6080-32c2-b9e4-b73d94e4428b.roa
Signing time:             Mon 30 Mar 2026 14:18:25 +0000
ROA not before:           Mon 30 Mar 2026 14:18:25 +0000
ROA not after:            Sun 28 Jun 2026 14:18:25 +0000
asID:                     8075
IP address blocks:        2620:129:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:46:3b:9e:07:0b:ec:bd:c8:dc:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
        Validity
            Not Before: Mar 30 14:18:25 2026 GMT
            Not After : Jun 28 14:18:25 2026 GMT
        Subject: CN=a9de11ca-be22-4086-b9ae-f68fe1807148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:84:6f:a3:1c:1f:4f:4f:45:70:92:77:4e:
                    99:92:32:cc:23:19:1c:c6:79:5c:61:39:e6:65:49:
                    84:f2:4d:94:54:1c:4b:3e:f2:e7:13:f1:7e:69:e1:
                    6f:fa:03:b4:6b:5d:55:4d:ef:a1:5f:80:bf:35:65:
                    57:ee:03:d1:d2:03:96:c5:82:b1:9e:a4:63:f2:96:
                    fd:fb:45:a7:1b:df:81:38:01:e4:0e:9d:df:81:f4:
                    64:10:44:a3:74:04:cb:54:7e:4b:f6:51:44:88:46:
                    21:55:82:29:83:70:f7:14:b3:67:d1:3f:85:cb:74:
                    44:eb:86:f3:e0:a8:7f:e6:56:96:e0:f4:a9:4c:fc:
                    11:84:3c:74:ed:ec:01:d4:b8:f5:88:ad:f9:c3:dd:
                    0b:d8:af:a7:fe:28:82:e0:68:3d:6b:4a:c9:c2:2e:
                    f6:7c:4b:4f:d5:b1:ee:a1:9c:c8:1a:42:9b:09:02:
                    16:40:55:00:1b:e6:74:05:f6:52:27:23:a7:78:3e:
                    7e:10:12:16:7b:40:d6:4c:97:b0:69:a7:fe:d5:47:
                    6f:18:bf:65:75:3c:e9:c6:5a:be:71:b6:82:77:3a:
                    52:29:14:d2:f1:6f:eb:d4:06:a3:a9:45:c0:72:ef:
                    ec:75:56:61:bc:2f:66:44:04:eb:38:48:5b:4f:d2:
                    c6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:E1:56:BE:50:F7:91:F1:09:17:A6:A3:30:41:99:CE:B4:19:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/5804f869-6080-32c2-b9e4-b73d94e4428b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl

            X509v3 Authority Key Identifier:
                keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:32:3b:38:d9:27:4a:0c:cb:1b:10:15:fd:6a:9c:39:3f:
         a5:52:2f:2c:89:19:3d:f2:75:b0:60:1d:1b:81:53:be:40:6e:
         c4:c1:f1:c0:a7:93:3a:8c:ce:2b:04:a1:5d:0f:35:db:e0:1b:
         e8:53:63:eb:4a:ef:ae:c4:3e:36:21:56:5d:10:41:a4:79:c9:
         2c:54:a0:d7:41:35:24:75:4f:41:91:31:40:a1:f7:56:f9:02:
         b9:df:5b:26:fb:bf:9d:1d:49:d3:d3:4a:6f:99:c6:33:6b:0f:
         60:44:71:e7:ec:f3:27:5c:dc:be:b2:ff:8c:8e:30:f1:ce:02:
         45:9f:30:f9:85:b7:63:48:2e:2a:be:10:48:ef:01:1e:ac:9d:
         b9:af:d9:be:34:23:47:bf:b3:10:60:b2:90:f8:c2:7a:a4:44:
         50:da:3c:84:fc:78:41:d1:63:6f:f0:4d:a4:cf:51:e8:88:53:
         6f:bd:86:0a:2d:11:3b:88:0e:65:9d:dc:7c:db:ff:6d:57:f9:
         0b:a4:e6:45:6e:10:f0:4c:c2:23:41:79:fb:1f:4c:09:fd:47:
         34:35:72:49:d8:0a:dc:9b:1e:f6:3a:31:1f:7b:d4:01:4f:7c:
         5a:7a:f8:55:44:60:77:87:02:0f:02:d8:cd:f4:35:3d:0e:e0:
         6d:38:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:55:58 2026 by rpki-client