Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa
File:                     ca79c64b-eb6d-3434-8473-70559314df53.roa (raw, json)
Hash identifier:          lhXOi001agcKirZJi4U7qwA+7MIQ6F9U9YxNlz7ggkc=
Subject key identifier:   F3:A9:88:75:1C:D3:23:7B:DD:FC:59:BF:AB:E4:5A:85:48:02:E3:32
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F4328584D237A2F728155757F8D87BB00
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        2620:197:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2f:72:81:55:75:7f:8d:87:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=34629b49-45f9-40b3-80ce-3a6d07df0d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:db:6b:f0:45:87:9e:bc:85:0f:6e:e6:86:
                    da:55:2b:e1:12:d4:3a:af:67:e5:64:97:d3:ca:89:
                    79:8b:65:6e:7e:6c:dd:e7:66:03:aa:c1:26:21:64:
                    af:31:3c:36:64:7e:6d:87:3c:11:a7:8e:33:f9:eb:
                    c0:8c:a7:32:da:af:14:c9:30:80:b3:44:31:3f:a9:
                    c2:8e:31:d0:9e:65:3a:fe:bf:f7:fa:cd:21:63:e4:
                    88:26:58:f8:38:73:2c:30:79:8f:95:28:da:34:3b:
                    1f:63:6c:24:f6:3c:40:7c:9e:52:66:b7:4f:8b:fb:
                    34:70:13:3b:6c:a0:9a:07:7d:6f:ac:6d:9c:6b:8a:
                    de:a7:b9:65:26:93:6c:69:06:57:10:3c:79:d7:df:
                    a9:cc:ee:a3:8a:0b:13:a2:28:af:15:71:c9:13:94:
                    12:29:c8:57:a7:bf:88:75:29:96:e3:79:71:f8:81:
                    70:de:fb:05:09:83:ce:c4:bf:73:13:bc:ae:52:d5:
                    23:73:68:d0:d4:e7:8b:8d:cd:82:77:fc:2f:09:ed:
                    69:04:5d:b7:9c:0b:4e:4b:77:02:7b:3f:e4:a2:07:
                    4b:28:c4:f8:2f:e8:2b:f2:c7:20:a7:1c:23:d8:33:
                    68:c3:53:74:1a:32:99:4b:29:5f:a1:81:c6:20:f4:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:88:75:1C:D3:23:7B:DD:FC:59:BF:AB:E4:5A:85:48:02:E3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:13:1d:95:9a:8c:fe:0c:b5:9e:ba:3f:72:42:c2:a7:35:84:
         3b:86:b0:6b:4d:d0:46:6b:98:f3:4b:96:f3:b4:d2:85:24:44:
         12:4c:75:f6:c9:19:85:a6:c5:18:b2:88:ce:4a:16:52:10:fa:
         7f:d6:cc:8c:14:9d:6c:18:b3:8d:a2:65:a2:d4:e2:9b:b2:9b:
         1d:e3:68:48:f1:50:65:db:55:86:8b:56:95:f1:53:d2:de:b9:
         67:16:3f:77:42:22:44:3b:12:ac:73:6a:ff:ed:37:10:ff:b4:
         e6:70:5a:41:92:73:51:30:f3:29:aa:a1:86:49:7d:60:e0:f4:
         52:b9:2b:34:3d:a7:56:e3:69:de:71:1c:1d:3e:a8:fc:54:a6:
         96:8f:02:7a:c1:5c:64:c1:96:0a:6e:4c:d0:30:f6:6c:b1:02:
         51:9f:9f:64:1f:bf:2a:91:47:fa:ea:02:d0:01:a4:55:70:6d:
         23:1b:ef:d0:1f:5b:34:10:fa:7c:05:4c:f1:f3:ed:81:b2:d0:
         86:f6:be:42:5d:46:be:e1:01:2c:10:1c:3a:c6:9c:f8:e2:99:
         25:3e:78:62:7c:31:95:f3:0d:cc:38:83:69:bf:69:61:87:1f:
         bf:48:9f:8c:5e:09:7a:3a:27:9f:5c:fb:ef:37:a1:47:6e:64:
         c8:ce:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:47:01 2026 by rpki-client