Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa
File:                     a32864a7-8943-31ea-94c0-9969594288ea.roa (raw, json)
Hash identifier:          FNX8tUxYPswXQHeAPTMe9oSH28//x2zg7QUoEJi9SMc=
Subject key identifier:   86:F9:B7:BD:FC:C2:D7:66:68:8F:18:51:28:ED:0B:A2:75:5B:9D:BE
Certificate issuer:       /CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2
Certificate serial:       010D0C9F4328584DDBBB106BD9EB3C1EC5C983A0
Authority key identifier: 4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     33523
IP address blocks:        2620:26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:10:6b:d9:eb:3c:1e:c5:c9:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=1dcd6f8c-cbc4-43c2-b103-f38eece1fffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:4c:d3:1b:92:49:fb:ed:4d:a9:69:9f:a2:
                    fa:14:51:c2:00:9a:64:9e:ff:b1:f3:79:02:11:23:
                    ce:a8:cc:16:b1:c5:ba:0e:bd:28:2d:72:43:66:4f:
                    89:7d:58:77:85:11:9e:05:29:3b:ac:19:04:64:39:
                    33:45:05:7e:32:16:7a:c0:f0:1f:d0:a3:ca:c1:3e:
                    3b:56:a7:4f:a7:e6:64:99:e2:22:c1:28:02:17:6e:
                    c2:e9:a4:66:52:4e:10:fb:fd:4e:e4:c7:8a:c8:17:
                    5f:ba:94:77:d2:be:b9:00:7d:cc:65:ef:5f:dd:9d:
                    6e:a8:2b:20:68:da:e2:50:ce:7a:0c:be:ce:79:be:
                    5e:03:60:df:81:e2:37:f0:cd:83:57:a9:05:c4:52:
                    e3:72:28:e2:76:bf:16:5a:a1:fa:cf:72:20:a3:d3:
                    21:39:6f:36:e9:2f:8e:c8:f8:06:23:9b:e3:bb:c8:
                    3f:7a:6d:22:2c:20:72:75:19:fd:6e:07:ee:3c:46:
                    84:d8:8e:fe:e3:cc:a9:95:86:46:c2:3f:27:22:99:
                    52:2d:71:9c:3a:91:09:eb:f4:2e:58:92:a9:6d:5c:
                    a7:5f:f6:11:d3:f8:61:0c:c8:53:26:31:d5:92:fc:
                    df:5e:3a:d8:7a:1d:8b:ba:a4:ce:fa:4b:0f:e2:a7:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:B7:BD:FC:C2:D7:66:68:8F:18:51:28:ED:0B:A2:75:5B:9D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl

            X509v3 Authority Key Identifier:
                keyid:4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c8:ad:26:d9:31:39:ef:4f:e8:48:45:37:93:fd:d4:1c:c2:
         20:6f:3e:f5:5c:1d:c2:6a:da:8f:48:ae:a2:fd:88:47:21:6e:
         d5:9a:f2:f1:61:46:92:67:29:6e:be:43:c3:1c:5c:4d:c7:7f:
         94:6a:e9:4c:df:c6:3b:45:de:7d:1e:56:2c:2a:55:25:2f:0a:
         68:08:85:76:67:03:8c:68:64:e3:36:15:d3:be:00:41:4c:fb:
         e6:81:01:a3:69:1b:8d:4f:28:a5:bc:78:db:fa:25:18:9e:97:
         33:66:0b:df:66:97:e7:57:da:71:a9:7a:28:28:5d:6e:65:a0:
         6f:0f:f6:1a:da:4a:e6:cd:0b:f3:33:eb:ac:3a:b0:13:07:b1:
         cb:35:c7:c7:06:e2:1d:ba:8c:d1:24:e6:8a:58:d5:57:bd:c9:
         df:12:22:b7:8e:56:01:bd:79:67:45:32:1d:63:3e:e9:8b:b3:
         b0:23:77:7c:85:2c:25:89:e0:73:94:3a:65:d3:2b:3a:92:81:
         c9:29:a7:34:8c:82:40:f9:da:77:6c:dd:94:88:36:4a:31:fb:
         26:2f:19:23:66:18:f3:1f:42:b8:62:35:7e:2b:ec:30:3a:37:
         d5:73:7e:b2:10:0f:d8:be:61:ee:94:72:64:4d:d9:1c:5d:7f:
         6e:f3:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 09:31:26 2026 by rpki-client