Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1bc1f0df-9603-3133-a795-1262552821fd.roa
File:                     1bc1f0df-9603-3133-a795-1262552821fd.roa (raw, json)
Hash identifier:          RMIfxqJIoAVJja2uEgtlV9WwoDdjUUPJTnk9BQjBvVg=
Subject key identifier:   87:93:7D:5B:CD:4D:5E:90:1B:C2:2A:4E:6F:8E:51:1E:8F:CC:7B:3E
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584DF5A6F70D888A52752387A080
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1bc1f0df-9603-3133-a795-1262552821fd.roa
Signing time:             Tue 26 May 2026 07:51:02 +0000
ROA not before:           Tue 26 May 2026 07:51:02 +0000
ROA not after:            Mon 24 Aug 2026 07:51:02 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f5:a6:f7:0d:88:8a:52:75:23:87:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May 26 07:51:02 2026 GMT
            Not After : Aug 24 07:51:02 2026 GMT
        Subject: CN=81baf734-02b1-4200-bc48-63ea96685faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:0b:fe:fd:f6:f4:67:bd:82:89:22:3c:e7:
                    98:79:01:34:00:81:8d:71:49:8b:30:f0:34:5a:69:
                    54:58:e5:0a:b5:3d:81:b0:7c:46:62:c8:10:a0:d4:
                    37:02:07:9d:0e:8d:62:21:14:15:35:d9:44:04:2a:
                    11:35:ce:6e:15:3f:50:c7:6c:0f:ba:11:00:25:60:
                    7c:39:6d:7b:7e:cf:f5:b0:2d:e9:13:85:32:f8:fb:
                    3a:01:9b:04:6c:06:2f:d9:35:59:d8:02:c6:2c:59:
                    f0:1e:c0:ed:ae:e2:7b:b4:59:4d:d5:e6:b0:8d:30:
                    f1:84:57:ff:4d:e3:c3:c0:ec:3b:67:04:91:0f:31:
                    0c:04:61:17:fa:ae:ff:85:57:63:a4:66:b7:bf:9d:
                    98:d6:12:54:5e:6e:ed:1a:41:45:e9:f6:79:bc:69:
                    1f:f8:0f:ec:02:36:c0:ad:95:bf:9f:86:61:b6:26:
                    cf:f6:2a:16:e3:64:b2:03:1a:8d:76:e3:3d:b8:f5:
                    ac:9b:29:25:ef:7a:89:9c:a7:50:a4:39:b9:8f:64:
                    ad:18:53:66:12:31:a5:be:fc:9d:cb:2c:47:07:65:
                    c1:f3:44:55:51:ff:68:6f:5c:66:b4:26:bd:76:1a:
                    47:97:35:9d:a7:d8:96:bd:11:63:f0:6d:06:8e:cc:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:93:7D:5B:CD:4D:5E:90:1B:C2:2A:4E:6F:8E:51:1E:8F:CC:7B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1bc1f0df-9603-3133-a795-1262552821fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:06:6d:d7:96:8f:10:c0:9c:42:1c:07:04:6b:1f:c2:49:2c:
         92:05:19:53:f8:ab:2e:d9:11:a3:30:fe:52:d4:46:7a:71:f8:
         44:4e:c5:a7:17:7b:0a:77:8f:65:dc:8d:64:93:74:e9:b3:ba:
         00:c2:a3:bb:57:e4:9b:14:f3:28:f8:d3:07:35:04:eb:60:38:
         35:63:4b:a1:43:c8:a8:d5:a4:e8:da:50:dc:2a:8b:7e:f8:92:
         0b:21:20:13:f4:a2:4a:c0:ab:83:e6:20:41:2f:c9:b3:13:ef:
         2c:6b:4f:e4:96:24:6f:0f:ac:73:2b:7f:01:c2:cb:48:04:7c:
         89:f0:92:74:95:96:a9:09:76:45:a1:d1:e1:d8:59:65:0a:c7:
         ba:91:f5:e9:45:c8:05:7a:81:76:e9:42:fa:57:65:0c:66:1a:
         b6:ef:61:2a:01:cc:9b:84:48:db:14:8e:43:0c:50:b5:bc:6a:
         a8:65:ad:33:a4:b5:89:af:c6:2f:06:69:87:1b:40:3e:fb:ba:
         5d:d1:6e:0a:33:86:71:0e:57:31:4b:32:bc:d0:84:2f:d9:b8:
         20:8c:ad:fb:a2:88:87:ac:8f:50:1f:01:e8:f7:0f:9a:1e:74:
         a0:79:01:f3:7a:40:88:28:aa:8f:c9:e5:b5:51:e3:c1:c5:fa:
         6b:af:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:05:51 2026 by rpki-client