Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa
File:                     f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa (raw, json)
Hash identifier:          iHzHZ/WCwm9SKgWDGb7Lu3n3ZZTkPLWCUtcplO3g1R0=
Subject key identifier:   C7:FA:E3:85:30:96:CD:ED:11:50:B4:1E:EE:32:60:DC:2D:B3:63:6D
Certificate issuer:       /CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
Certificate serial:       010D0C9F4328584D773A8050A5F1AC1095054A80
Authority key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     401736
IP address blocks:        2620:d7:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:80:50:a5:f1:ac:10:95:05:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=9dc85728-f78a-4d44-ad94-499394c05336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:44:8b:35:74:20:00:44:14:1a:3a:ba:13:
                    58:ba:98:3a:53:ca:b2:31:42:1d:ef:a4:38:6c:de:
                    a7:28:25:19:66:45:02:24:be:52:ec:54:e7:88:c5:
                    7e:1e:8b:3b:f2:c5:b3:41:7a:f1:6f:ed:4b:2d:d1:
                    a9:7d:37:18:5e:7c:c9:0e:73:cc:06:4d:ba:d2:53:
                    02:e5:07:c6:03:43:9b:eb:f4:0d:7c:35:02:a1:18:
                    db:33:b8:19:bb:f0:92:1a:32:e6:7c:10:30:b9:ed:
                    83:ba:e1:3b:dc:72:a0:80:fc:bc:c9:93:88:b7:97:
                    5d:8e:a1:67:79:78:24:22:1d:0f:37:5a:46:4e:26:
                    70:83:1f:d3:d5:5d:8c:3b:d6:1b:40:ae:8e:37:68:
                    fd:d7:1b:df:3b:6d:80:4f:9c:0c:30:2a:d6:01:35:
                    01:93:2a:03:55:89:86:58:6e:d7:5d:62:7d:07:49:
                    ec:eb:b4:d0:4b:b5:7f:e1:6f:6a:40:73:55:23:59:
                    33:11:0d:f7:1a:cd:9e:25:e9:ba:5c:ed:f2:11:f1:
                    e9:19:41:85:97:d7:d6:5d:de:c5:13:8d:cf:3a:02:
                    ee:62:d8:9a:42:8f:aa:5f:9e:9e:85:60:64:32:85:
                    ac:fd:d7:7c:f8:11:50:0e:4f:d4:be:b5:f1:d3:70:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:E3:85:30:96:CD:ED:11:50:B4:1E:EE:32:60:DC:2D:B3:63:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f5b4c4d3-3c1a-3c16-8b64-9e178e5096b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl

            X509v3 Authority Key Identifier:
                keyid:8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d7:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:7f:25:88:79:60:84:d5:86:eb:c5:4c:a9:6c:30:73:43:
         72:98:41:54:e3:e5:d8:36:61:9c:41:3c:52:43:a2:1c:cb:16:
         89:b1:31:ca:d1:23:54:28:e6:02:82:8e:4a:1f:25:17:f1:02:
         bb:12:f2:fd:51:14:b6:32:37:52:6d:6f:78:99:cf:d7:84:ce:
         95:3e:11:56:87:40:9a:80:16:6d:94:66:1c:13:c5:c7:b6:19:
         09:95:7e:a2:cb:f7:2c:59:ab:af:85:72:b9:b9:84:78:68:43:
         f7:91:3d:a8:e8:5f:2f:9e:ec:fb:73:53:6c:1b:c6:07:19:e4:
         4e:04:53:ed:2e:f5:1a:20:15:ff:3d:0c:30:64:ab:b2:a1:49:
         ce:19:96:6f:4f:7c:a9:ff:09:21:3a:c1:c4:77:26:3e:90:15:
         21:90:c5:25:80:e5:b0:36:15:3e:7d:c3:30:2e:28:a1:b2:30:
         d5:d2:c6:24:cd:24:aa:72:fb:14:c9:7d:5e:8f:60:ac:50:fb:
         c0:ca:a8:26:1e:c2:8b:50:fb:c4:00:2b:1d:47:b9:f3:e6:fe:
         92:47:27:82:aa:2c:9d:16:1e:96:0f:75:d3:25:86:bc:bb:a6:
         68:9e:4f:e3:93:c0:39:f4:f7:5c:25:93:d8:9f:b9:80:9e:a3:
         6a:84:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:03:02 2026 by rpki-client