Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3020458-0b15-3fd1-b74b-a47a9cbe6ccd.roa
File:                     a3020458-0b15-3fd1-b74b-a47a9cbe6ccd.roa (raw, json)
Hash identifier:          VZGu8R7CkIXC1lQKZ31nWtKj5NI42I8uq63MrJx+cHQ=
Subject key identifier:   89:2B:59:0D:3A:C6:58:CD:59:C6:25:06:3C:D1:65:97:86:05:24:1F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A593B8E66F0F92827E5680
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3020458-0b15-3fd1-b74b-a47a9cbe6ccd.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        2620:11a:c005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:93:b8:e6:6f:0f:92:82:7e:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=9c22572b-3a05-483a-a8e0-76f446789117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:e5:bc:6f:9e:58:d1:c9:0e:3a:30:bc:d3:
                    af:28:76:b6:52:ed:4b:1a:29:92:41:29:fa:a2:b2:
                    48:3b:02:d5:53:46:ca:97:06:e0:1a:29:56:18:30:
                    c5:1f:47:b9:57:f1:ca:0b:0b:1d:b6:51:3a:2d:61:
                    6b:fe:0b:88:be:d3:5c:e4:45:9a:b5:b5:0c:00:3a:
                    4e:43:22:95:de:10:af:43:44:61:ea:17:16:6d:cf:
                    7f:6f:74:b1:97:85:69:e1:93:b1:b7:f8:4d:53:11:
                    96:b4:d5:b9:85:79:28:e6:66:2f:0d:21:67:4e:8c:
                    d2:33:9a:61:0f:a7:52:37:61:f0:e3:42:4a:6b:04:
                    54:82:d7:28:1e:4c:9a:47:50:a9:e7:ea:37:1f:b8:
                    f4:a4:87:82:c6:b1:69:a3:48:b4:87:8c:2d:81:a1:
                    9b:d2:b8:09:df:14:ba:66:6b:b7:61:1c:e7:2b:87:
                    7b:91:18:0e:b2:54:1b:e7:4f:1e:5a:84:8f:83:83:
                    70:29:5d:7d:4c:38:11:70:d1:2c:0a:94:ee:ff:74:
                    48:ce:05:b9:7b:26:b2:48:ff:7e:d6:64:a6:f2:d9:
                    85:4e:b9:81:d2:06:9c:c9:fe:91:c0:29:4a:da:b5:
                    74:4e:7b:1e:2d:c2:0b:23:2c:7f:d0:3b:73:f7:f4:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2B:59:0D:3A:C6:58:CD:59:C6:25:06:3C:D1:65:97:86:05:24:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3020458-0b15-3fd1-b74b-a47a9cbe6ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:ea:28:3a:d3:f1:3a:19:bd:a5:2e:fb:ad:e7:6e:2c:68:
         06:1d:f3:0a:b5:f4:09:3e:59:7c:74:b3:a8:2a:d0:13:0f:f3:
         ae:66:86:c2:1f:e9:f6:95:76:84:44:73:48:54:f0:46:5d:de:
         a8:6b:13:d7:ab:d0:7c:9e:8d:c9:80:55:bb:a8:2f:1b:42:f8:
         64:25:26:ac:e8:32:17:a2:d2:48:28:72:7f:eb:31:0e:8a:a0:
         c6:af:7f:10:c9:6c:30:38:89:4c:6b:a7:2f:10:f6:71:c8:bb:
         ae:21:e7:fb:74:7a:05:61:c4:d6:28:a2:a0:be:b0:8f:4e:95:
         3e:d5:9a:2c:84:e4:de:0b:da:f2:ae:d4:79:3a:c8:c0:ba:59:
         77:76:14:74:64:8a:2c:ae:c1:49:e0:86:7a:17:e9:42:cb:88:
         fc:d8:8d:b4:7b:3d:88:a8:cc:00:04:7b:38:d7:49:de:38:0a:
         3c:f2:1b:4a:03:e2:0d:eb:81:e4:2a:a1:bf:75:da:2a:8a:0f:
         84:f5:e6:ba:13:3f:88:a8:08:fc:d6:25:6c:4a:1c:0c:ee:3d:
         67:97:c3:fe:77:28:6a:8a:12:39:fb:e8:79:a6:1c:49:d1:f8:
         e9:18:4a:a2:4f:76:c3:55:d5:ff:15:dd:98:e8:31:eb:33:4a:
         6b:02:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:54:27 2026 by rpki-client