Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c2fef04a-a7e7-3822-8f22-138ce491274f.roa
File:                     c2fef04a-a7e7-3822-8f22-138ce491274f.roa (raw, json)
Hash identifier:          3V4yPfhPAIHKYVId6n18BKa/zlPpAx5e1IJDF4q/O6M=
Subject key identifier:   C3:B5:F1:74:01:4F:8C:E3:54:E2:ED:6E:70:77:09:06:79:84:D0:97
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584D571FB636D6E91290A1A90280
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c2fef04a-a7e7-3822-8f22-138ce491274f.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     27411
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b6:36:d6:e9:12:90:a1:a9:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=7500006b-61a5-4c69-b008-d72c8f10a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:c0:3a:61:98:0c:be:77:be:77:be:a0:b1:
                    63:75:63:10:71:6c:72:28:05:1b:4d:68:43:40:9c:
                    05:5d:37:2f:3b:88:ec:70:0c:37:2c:ed:38:df:12:
                    44:8b:11:fe:8b:f1:01:cd:59:db:ee:e7:93:be:f7:
                    01:d1:2a:89:72:87:ed:ed:a3:69:25:4d:0c:8a:f7:
                    2e:85:5f:64:51:56:43:19:38:6f:b7:44:91:54:db:
                    f2:a5:c4:fa:d8:22:ec:17:11:97:bf:fe:99:71:0d:
                    02:ae:a0:a9:05:19:d8:9c:a9:8f:fd:c0:18:a0:98:
                    47:ea:6e:0e:f5:93:af:3c:05:41:58:0d:5b:bd:74:
                    6a:cb:b8:04:94:ac:8c:aa:fb:17:b8:73:64:78:4e:
                    fb:34:68:06:0b:4f:b0:f7:55:9c:07:57:ad:03:ca:
                    ff:54:04:67:95:a5:48:96:34:cb:f7:c6:93:32:4b:
                    7c:e7:34:bb:8d:9f:f0:b9:46:1e:c4:36:91:d8:ef:
                    ac:d0:6e:2c:2b:f9:c9:0c:da:67:1a:90:02:05:d4:
                    f0:bf:10:d4:43:08:0e:40:09:5b:9c:e4:f9:7f:0c:
                    35:ce:45:ea:3e:72:bb:47:46:02:76:e3:74:5d:79:
                    d7:af:fe:e1:a2:7b:eb:b3:de:68:b4:20:ac:a0:6e:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:F1:74:01:4F:8C:E3:54:E2:ED:6E:70:77:09:06:79:84:D0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c2fef04a-a7e7-3822-8f22-138ce491274f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:33:cd:cb:35:47:a8:87:f5:9e:3a:99:21:fd:a4:ff:e7:
         f0:a6:c1:a8:73:b1:3b:c9:5d:83:80:9c:2d:8e:c7:06:76:8a:
         ef:f5:55:5b:74:07:ee:04:9b:2f:e6:a6:74:14:53:4f:da:ce:
         26:d5:dd:19:c2:78:59:02:09:24:2c:26:5e:31:06:0f:a9:28:
         0e:08:e0:d7:2e:16:38:2f:3a:6e:c8:c2:e2:75:39:ba:2d:10:
         8f:cb:ba:b4:05:36:06:2c:4d:94:74:f0:01:47:da:6c:be:a5:
         b9:6c:27:ae:49:ff:e3:08:0d:65:7e:88:8b:39:2a:2b:82:03:
         1c:91:8d:04:63:9d:b7:e4:8d:ed:62:16:bd:35:f1:38:8f:62:
         1a:26:4c:8b:38:23:3c:c3:75:69:87:e2:22:74:43:fb:63:bf:
         f2:92:51:dc:0b:e2:54:99:56:14:bd:ee:8b:91:ea:25:13:37:
         f1:d0:c6:e5:09:18:a2:ee:33:37:41:fd:af:9a:ff:e4:0e:51:
         af:a3:9e:21:a9:55:fe:0f:f1:74:86:99:4e:c5:48:a6:77:25:
         3c:0a:cc:fd:06:c0:f0:c3:7f:b4:7e:57:98:6a:72:18:2a:e8:
         bf:11:53:84:37:be:1e:6e:47:90:7b:40:ad:ee:cf:29:16:c9:
         6b:f1:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:29:09 2026 by rpki-client