Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
File:                     19707577-a550-35cc-9aa1-82013a93096f.roa (raw, json)
Hash identifier:          ZcHnIEaQ83hPbQPZrEjoSrAwGOJlSzZ1RMYPD3jY+YI=
Subject key identifier:   02:4E:BB:02:CA:1B:80:79:28:AF:81:4A:C7:28:5E:8E:BF:0B:38:AA
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584D300A4D46C323DF232AE60500
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     14230
IP address blocks:        2001:49f8::/32 maxlen: 48
                          2604:9b00::/32 maxlen: 48
                          2604:ac40::/32 maxlen: 48
                          2607:fb20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4d:46:c3:23:df:23:2a:e6:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=02453e52-52f0-4a31-8c32-99357471c73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:74:48:d6:9f:b0:1d:fe:e8:74:f4:53:97:
                    19:cf:0b:30:bb:f7:b8:15:e7:01:51:ec:ce:00:2f:
                    c8:6c:23:02:dc:ed:ab:18:52:c1:23:a9:cf:59:d7:
                    3b:c4:0b:3d:42:80:64:a1:e5:6b:3c:8f:08:95:fc:
                    0d:48:14:55:cc:31:dc:30:ad:e1:62:0a:ab:47:d7:
                    d4:80:57:5e:7d:ee:7f:03:af:66:66:de:26:a2:56:
                    d6:2d:10:d5:d7:20:dd:ee:75:c5:9e:22:bf:01:94:
                    7f:d6:a4:24:63:f6:f0:90:b5:8d:f6:64:e7:bc:25:
                    2c:cb:bc:cf:15:a4:82:34:70:bc:aa:97:40:4b:0a:
                    64:aa:a0:b5:cf:58:0c:1d:b5:df:ed:b3:7d:95:62:
                    0f:5f:6d:6c:b4:0c:82:4c:e9:07:e3:6a:0c:02:36:
                    0e:1a:e7:f3:ef:ca:9a:45:3b:dd:4d:b9:02:ef:21:
                    e7:06:37:a7:c9:4f:3f:1c:d5:74:3c:6b:b4:a1:5a:
                    ec:85:89:99:78:82:e2:56:6f:ea:ad:a7:42:a3:26:
                    34:90:67:64:f3:bb:46:e2:7a:4a:48:c5:b9:ad:53:
                    61:05:b7:0b:e8:e7:97:4a:f1:6c:02:60:a5:d0:06:
                    55:e3:67:4a:8b:d0:f2:33:aa:03:45:b6:c2:0b:7f:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4E:BB:02:CA:1B:80:79:28:AF:81:4A:C7:28:5E:8E:BF:0B:38:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f8::/32
                  2604:9b00::/32
                  2604:ac40::/32
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c7:93:51:ca:a3:95:4c:2e:6f:d0:ac:93:01:88:89:5e:a3:
         d9:ab:83:73:6a:0d:fc:80:e8:52:f2:10:be:1d:aa:d2:52:ca:
         49:d3:e8:3f:fa:3a:1a:b0:bd:79:2b:eb:db:a0:3d:86:15:28:
         89:c0:34:65:4c:73:1a:9b:f9:b3:0c:f4:0c:4f:e2:69:b7:25:
         07:67:bb:e6:0a:6b:62:f2:eb:4e:87:4f:bb:59:2f:4b:b1:82:
         b5:73:4c:68:3a:d9:fa:30:14:f5:e8:c7:a7:dd:d4:13:a0:12:
         56:8c:dd:81:69:2f:aa:22:53:2f:42:d7:20:94:8f:87:58:b5:
         a2:94:f9:c2:8f:74:b7:26:ec:c1:0b:e7:8d:70:fb:8c:8b:99:
         02:34:a2:c0:e0:6a:0f:a4:f1:09:e2:fe:0d:63:ac:41:fa:67:
         b1:53:4e:7f:25:75:bd:69:17:37:91:1d:4c:8c:4a:ee:07:e0:
         2a:1f:d8:98:42:3f:ef:be:38:47:c5:5c:86:df:78:07:68:e0:
         cf:c2:19:cb:09:08:bb:af:d0:9c:1d:af:63:0b:e4:e2:89:13:
         8c:da:d7:c4:13:ad:fb:9e:3d:c6:50:31:17:04:5c:8e:d1:47:
         13:70:9e:7d:2f:8a:85:57:20:a7:f4:3c:1d:8b:3e:92:81:61:
         3b:44:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:31:04 2026 by rpki-client