Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/e6921b83-4d0c-3c56-988e-e42a8f7fde48.roa
File:                     e6921b83-4d0c-3c56-988e-e42a8f7fde48.roa (raw, json)
Hash identifier:          /3UGLkqPRildfI/GHem+r1XwuvuWF6zVzmGf/clm8qo=
Subject key identifier:   2A:9A:03:21:20:38:41:F4:FD:25:9B:AA:40:B1:63:CB:52:99:27:0A
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584D91C00E3D620902E833481D80
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/e6921b83-4d0c-3c56-988e-e42a8f7fde48.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     20148
IP address blocks:        2001:5c8:f7fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0e:3d:62:09:02:e8:33:48:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=bbb81e49-8089-4c04-aaed-4c00bba17ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:ad:0d:4f:7a:3e:cc:3f:51:4a:20:20:2c:
                    a5:3c:32:89:af:11:0b:51:f1:6e:34:f7:d0:35:e5:
                    45:6f:b8:cb:06:db:9a:b0:ff:b8:40:56:36:d7:08:
                    23:81:30:50:e8:3f:11:d5:23:01:9b:65:ab:2c:03:
                    3a:81:50:40:d9:79:fd:75:65:87:2f:46:ff:21:60:
                    33:84:ed:d3:e6:3b:63:12:98:bd:14:9f:3e:83:bb:
                    75:51:a5:82:82:30:57:b5:d3:6c:db:30:7f:b3:91:
                    cd:32:32:53:c3:68:1a:29:82:e5:61:cc:5e:d6:72:
                    08:24:31:70:b7:62:32:ab:7f:83:e8:3f:e1:f1:a9:
                    31:d4:c3:45:40:c1:c2:65:61:db:0a:c0:b9:d7:a6:
                    b9:b6:bb:b0:6c:d6:67:b5:aa:1b:90:b0:a2:6b:b3:
                    68:57:47:37:5b:00:8d:fc:9b:e8:85:d8:7a:a1:3e:
                    28:06:5f:c8:41:99:f6:a6:20:4f:91:72:3a:ef:b6:
                    56:9b:26:b7:87:41:99:f8:16:b3:a6:03:04:1c:0e:
                    61:9f:65:83:17:e1:c2:ee:21:ee:a1:94:f2:e1:5a:
                    fd:ec:b0:94:0b:1b:4b:cd:e1:5b:2d:77:96:3d:ea:
                    cf:1d:87:4e:04:9d:28:88:66:67:0e:61:d6:43:22:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9A:03:21:20:38:41:F4:FD:25:9B:AA:40:B1:63:CB:52:99:27:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/e6921b83-4d0c-3c56-988e-e42a8f7fde48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5c8:f7fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:cb:49:6f:68:f3:21:a9:65:5d:11:ae:fb:c2:2c:15:d5:
         d8:c4:e1:95:bf:98:ab:97:9f:fc:cd:d2:3c:3f:c5:be:a0:32:
         8f:6d:84:89:a9:f3:fe:fb:f7:b4:70:59:64:c7:bb:94:ca:6b:
         0f:6f:39:fa:65:73:16:24:05:1d:5c:11:f4:d5:20:06:b2:9b:
         54:80:4a:d4:b5:19:04:6f:57:79:25:19:96:fe:60:4a:29:21:
         4f:64:31:62:8e:96:fb:12:06:37:5d:b7:0c:23:03:7c:78:5b:
         66:68:6d:ca:30:10:74:be:7f:15:ed:17:26:9f:2d:96:36:52:
         60:94:e1:23:95:f9:45:21:22:26:59:bc:5b:99:36:be:ef:a0:
         17:2b:f1:e9:5f:de:1f:17:39:67:8b:27:6c:4e:6c:bb:03:56:
         31:02:47:87:10:38:3c:ac:48:50:34:3e:5e:1c:a3:94:0a:5c:
         04:5a:1a:42:cc:ee:88:af:ad:dc:e6:1b:b0:52:0a:a8:0e:89:
         68:e0:59:9e:08:6c:20:a7:03:2a:1c:4e:3c:0e:36:a6:13:59:
         a8:b1:92:bb:17:d5:96:3b:63:8d:54:8c:f1:fb:8b:b4:bd:6b:
         d2:95:f7:fb:e4:44:80:96:26:2a:c6:6b:57:4d:bc:92:c9:cf:
         c5:d0:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:37 2026 by rpki-client