Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/14c604ac-cbfc-39b6-87b9-1c7cdcf94a99.roa
File:                     14c604ac-cbfc-39b6-87b9-1c7cdcf94a99.roa (raw, json)
Hash identifier:          ZHcz0aioY7h4+3qgi3qBkLSMY4M/6D/IHLcW+3YZ1Kg=
Subject key identifier:   31:2E:08:88:40:2A:DD:29:50:7A:B2:98:33:C1:2F:5B:11:3B:83:60
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F4328584D20AF7B56E7349597EBCC0B80
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/14c604ac-cbfc-39b6-87b9-1c7cdcf94a99.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     1828
IP address blocks:        2605:f500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:7b:56:e7:34:95:97:eb:cc:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=8da666a0-afda-48cf-a078-9041b5480869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:71:83:8f:80:4d:c4:ad:37:8c:e7:6e:25:23:
                    7e:0b:ff:da:4c:fc:96:d7:1e:ef:31:49:96:9c:c0:
                    99:eb:c2:8e:ff:40:b1:3a:7a:c2:e4:9b:a8:96:d9:
                    69:b4:44:7b:73:68:b2:04:0e:a6:6b:04:42:5d:12:
                    55:8a:fb:f2:95:90:12:8c:64:fc:38:4f:00:30:47:
                    a0:06:7a:c1:11:29:15:df:b3:08:55:63:5d:c7:74:
                    76:d9:d8:a5:99:92:65:58:b5:dd:72:5b:55:9c:d3:
                    78:4e:bc:be:bc:64:b2:ab:35:9b:d1:fe:81:3e:f4:
                    af:81:a0:d2:5d:7f:c8:f0:05:eb:2b:c3:12:be:a2:
                    b2:ab:20:10:9e:86:13:86:1b:3f:05:12:1b:33:57:
                    a5:a3:71:25:18:c7:a6:a6:a4:20:66:fd:04:40:e6:
                    ee:05:a4:2a:1d:96:1e:2a:1b:13:43:cd:f3:c6:fc:
                    a4:cb:c4:bd:4a:ec:6e:e1:4a:5f:44:b2:32:9e:04:
                    83:1f:b0:d4:87:27:53:55:3c:9d:62:0b:29:cd:b8:
                    8d:8f:c1:97:61:2c:c9:8f:35:3a:fb:89:c4:57:da:
                    01:29:1c:45:d4:fc:41:18:13:a4:57:6a:8a:0f:88:
                    9e:09:be:3d:c4:a4:66:0c:d4:88:7f:76:61:60:aa:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:08:88:40:2A:DD:29:50:7A:B2:98:33:C1:2F:5B:11:3B:83:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/14c604ac-cbfc-39b6-87b9-1c7cdcf94a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:65:cf:02:27:e9:16:6c:81:02:30:0b:6d:77:ff:90:23:
         7b:a9:9d:36:03:d6:8d:a5:69:2a:ba:45:8f:c8:0d:3e:cd:c4:
         d6:74:1d:90:98:22:af:17:62:5e:f7:2c:85:e4:82:74:de:d2:
         7c:a8:85:eb:ac:20:33:40:72:7d:d0:c8:ab:50:35:c9:a5:7d:
         93:29:e7:a2:3e:ef:70:38:dd:71:0a:fb:1c:1e:8e:75:6f:f9:
         29:84:d2:7d:40:21:9a:01:a2:72:c3:92:77:ca:f9:d6:51:be:
         82:c2:a2:e6:cd:c0:3d:4a:27:1d:1d:d6:d4:e2:80:55:09:f9:
         be:72:be:05:dd:9a:05:3b:56:68:aa:e6:8a:1b:83:fe:4e:fb:
         0a:6e:fe:3f:1a:58:2d:14:7f:07:d7:92:fc:1f:78:fa:93:7b:
         02:2a:d2:41:49:ba:64:1f:15:dc:05:68:56:61:0d:e3:ff:98:
         ae:86:0b:17:a6:f1:1e:1b:89:23:43:f1:c6:03:70:91:c1:71:
         ae:36:87:c1:26:bc:34:ce:f0:f0:ed:9a:27:10:fd:3c:25:55:
         fc:cb:13:fb:a2:15:9f:58:92:25:4e:22:29:57:49:90:0b:99:
         81:b1:6f:e6:c6:c4:87:72:4c:c3:90:f0:4c:e8:a9:48:d0:3d:
         26:b9:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:28:41 2026 by rpki-client