Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa
File:                     adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa (raw, json)
Hash identifier:          h4gRJ9b2fyDqBd4RJNy9ZX4Uy36NQYXVKX8Y0QUUZ2E=
Subject key identifier:   5F:96:93:D4:6D:AB:46:B5:E9:2B:88:D9:5A:46:A4:64:13:11:67:23
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584D143D48C961B35A32607F0CC0
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     20148
IP address blocks:        2001:5c8:f7ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:48:c9:61:b3:5a:32:60:7f:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=6e239db6-1a53-4e0e-8ee6-a211c562640a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:21:5f:0a:bd:8a:55:3b:62:41:ac:a3:f5:
                    6d:7f:dc:74:a3:b1:f5:42:b6:8d:66:41:77:4a:da:
                    b3:94:75:1f:21:ba:03:22:5f:15:8b:45:2f:f3:9f:
                    b2:80:d0:0e:1c:1d:24:33:05:80:4d:b7:ad:d6:fa:
                    7f:56:bb:fd:13:b4:a7:98:e2:14:32:15:c1:92:e8:
                    4a:f5:0e:e0:ba:c7:3c:c5:c7:6b:61:b6:ea:e4:49:
                    cf:33:78:4e:5f:af:b5:03:95:4b:13:43:02:7b:a0:
                    ea:83:97:22:64:a6:f3:76:10:74:73:f6:d6:fd:db:
                    f3:a5:51:39:73:3f:29:85:f3:ba:02:0b:be:c7:4b:
                    d0:a2:5f:a7:f0:7f:48:06:1c:e1:c7:9e:ef:26:e1:
                    ad:35:2d:3f:53:56:17:c6:3c:0a:04:25:aa:9b:f8:
                    1e:1a:05:d4:76:7b:9b:c8:0a:48:4c:d8:08:b3:97:
                    86:ed:b7:2d:7e:5c:e6:4b:05:f6:b1:79:d6:9b:ae:
                    15:69:77:f6:c8:dc:85:54:63:c2:23:1f:f6:db:2b:
                    ae:f0:99:9a:8b:01:8f:5f:4f:d8:fe:95:e3:c6:83:
                    db:c8:2c:2f:b4:57:01:5d:5d:cd:3c:f1:bf:e4:2c:
                    67:5d:f5:b8:5a:ac:41:63:a9:a7:94:d9:6d:d7:e0:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:96:93:D4:6D:AB:46:B5:E9:2B:88:D9:5A:46:A4:64:13:11:67:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5c8:f7ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:25:8d:d5:fa:d2:00:a7:ac:08:74:8a:d2:fc:c8:99:0b:
         e1:88:f6:25:72:f7:41:38:6c:41:e0:86:25:96:cd:da:0b:95:
         bc:e8:10:03:0c:ae:e2:c1:08:14:73:fa:71:0a:2c:15:0a:ad:
         47:13:81:4e:9f:4a:85:34:18:6e:1b:ee:66:ca:00:43:16:74:
         aa:c0:68:f5:80:4d:3b:53:1d:61:de:42:bc:43:33:92:4d:31:
         df:01:e1:95:c9:93:6b:ab:53:1a:ef:73:c2:b0:86:ff:12:dd:
         fe:d8:27:3b:b4:56:89:49:be:6f:c0:7a:ba:9c:d6:76:92:07:
         19:4e:b5:fe:45:78:1c:0b:41:ed:24:f9:c4:b3:16:6e:50:1b:
         92:d2:3b:2f:5c:86:e4:c5:db:55:73:3f:bf:7b:d5:a4:cc:e3:
         12:e0:c8:9e:76:57:21:28:2d:87:48:84:1c:84:b7:22:53:28:
         b0:2e:8c:14:3c:5e:83:dc:7e:f7:a8:d5:46:9b:c2:9d:14:19:
         f0:22:0b:27:22:6b:a6:21:7e:29:53:89:14:72:63:e6:7e:e9:
         de:53:85:7f:77:7d:f2:d4:78:56:6f:35:11:4c:8a:0a:24:50:
         71:df:1b:87:d6:3b:5f:dd:9d:6f:db:45:d6:ec:bf:0e:85:31:
         c0:74:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 02:07:18 2026 by rpki-client