Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5fc86629-60c1-318d-b809-f69eff095ccd.roa
File:                     5fc86629-60c1-318d-b809-f69eff095ccd.roa (raw, json)
Hash identifier:          oHZDfgeXzHkIj1fp3JNh8563Bu93xElTEe1QydGk2n8=
Subject key identifier:   66:5B:0D:E9:24:21:80:A8:51:CD:75:9F:CB:75:DE:BB:B2:FE:79:92
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584D905A9AA8457BB6E881F8FC40
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5fc86629-60c1-318d-b809-f69eff095ccd.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     271
IP address blocks:        2607:f8f0:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:9a:a8:45:7b:b6:e8:81:f8:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=22da62ae-9cd9-475e-8c9a-027894bf56c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:69:8f:d8:97:e8:76:c0:8f:13:77:c0:df:
                    27:14:e8:f8:22:21:73:c2:0d:4f:e6:f3:99:12:48:
                    51:f1:b4:6d:58:67:7a:02:60:96:b1:3b:b7:d6:2b:
                    82:70:8a:0b:8e:cf:78:84:c7:cd:bb:4c:4a:6c:87:
                    4e:4e:aa:5e:dd:12:dc:8e:f9:c6:89:61:ea:85:0d:
                    cf:2f:fb:73:74:51:45:76:c2:b0:f2:6e:3d:c8:fe:
                    4e:08:f4:7d:b2:05:8b:2e:90:ee:7f:79:a1:38:35:
                    94:23:3a:4d:3d:a2:56:28:9d:87:8a:c9:7d:a1:1e:
                    cb:67:fb:b7:a1:82:82:d3:eb:72:fd:00:46:94:f1:
                    fd:c6:90:ce:d5:18:c5:62:44:76:79:80:54:0e:0c:
                    4d:4c:be:54:9f:7a:08:3f:95:94:2c:4b:18:d2:c8:
                    df:88:74:f3:49:e7:ab:4e:cc:04:7a:76:84:19:6b:
                    7c:86:c2:fe:23:31:78:ad:34:e0:95:7d:31:0e:76:
                    2b:82:99:1f:1c:94:f8:ec:58:e2:46:22:1f:87:e7:
                    a0:f6:64:23:e5:d7:41:01:54:93:b6:2b:11:c4:d4:
                    68:d7:dd:1f:df:70:ad:c6:02:20:81:e5:76:73:52:
                    11:79:85:11:fd:c2:c0:48:2f:f4:c8:8a:ea:ad:0f:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:0D:E9:24:21:80:A8:51:CD:75:9F:CB:75:DE:BB:B2:FE:79:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5fc86629-60c1-318d-b809-f69eff095ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:ca:33:ac:63:a8:5c:55:52:cc:63:22:3a:e0:c3:63:5c:
         86:1b:a1:02:14:aa:41:0c:f5:32:a9:3e:17:e8:cb:7f:59:fe:
         95:25:97:08:65:f8:4d:8e:8c:58:4d:1b:c0:fd:62:70:1f:69:
         f3:9a:49:e0:6d:0d:d0:32:1a:18:70:28:e0:33:b2:f9:1d:74:
         76:db:d9:1f:eb:14:d6:98:ac:64:0f:60:b2:eb:f4:bd:26:da:
         e2:9e:06:01:5a:f7:f3:5c:27:e2:81:d6:35:fe:e9:00:7a:e3:
         d8:83:f7:78:a1:9a:4b:5a:45:d6:2b:d3:d2:63:6c:3a:3e:6e:
         d1:d2:c2:e3:f5:0c:01:8e:4e:74:e5:9b:52:70:19:85:78:73:
         a4:e5:b0:ad:92:76:50:f3:1b:72:4d:91:31:0b:56:de:46:54:
         6f:0d:a5:de:33:34:36:ba:cc:d7:8d:c1:cc:1d:58:1e:77:e4:
         45:4e:8f:55:75:39:5b:b0:94:69:0d:81:86:87:8b:d3:35:3b:
         1f:cf:ab:54:b2:6b:fc:30:db:cb:33:27:8c:7b:2e:89:cc:88:
         97:43:15:c2:a5:1c:10:31:00:8d:ac:b2:11:91:b0:47:ad:b8:
         b2:85:d9:7b:84:23:b8:16:f3:68:53:1b:df:28:a3:25:49:b5:
         e6:b6:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 01:44:39 2026 by rpki-client