Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
File:                     13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa (raw, json)
Hash identifier:          gpluLNA/ZeNVBhU3IpOY4ZgCgRdzylwJbmffPbyj0QU=
Subject key identifier:   B3:DF:38:80:8F:E4:20:FF:39:C2:78:CC:40:24:04:75:5F:78:EF:0A
Certificate issuer:       /CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
Certificate serial:       010D0C9F4328584D773A6C48E8683394C2DC0400
Authority key identifier: 54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     397301
IP address blocks:        2607:7580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:6c:48:e8:68:33:94:c2:dc:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=490a09ce-cd30-421a-b97e-59a026252907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:40:07:50:95:02:fd:35:0f:9a:fd:0d:8c:
                    79:dd:2e:2d:a2:a2:09:8e:f1:e0:f8:15:32:2c:26:
                    ec:3a:95:73:a1:fc:a8:42:02:f6:8b:1d:03:81:f2:
                    b9:d3:45:3d:d2:94:8a:f7:4b:0f:a0:ee:ea:9e:c5:
                    53:81:28:b7:5f:83:04:77:fc:dc:5f:20:1a:f1:3b:
                    07:65:f0:30:f6:d5:4b:df:8f:94:a9:9b:bd:42:68:
                    2a:77:47:41:bd:7f:58:e6:68:a1:06:76:07:3b:74:
                    45:79:e5:3f:4b:c4:32:d5:bc:96:9a:50:9a:6a:64:
                    61:45:03:1e:2a:d5:7f:05:19:02:7d:09:3c:54:16:
                    c5:f8:f3:50:c0:e9:4c:a2:a7:44:5c:02:8a:c4:a4:
                    2b:d5:a4:c0:45:1b:17:e8:00:b1:21:35:ac:74:71:
                    a7:e6:9b:e5:69:2e:61:db:7a:e8:ff:eb:48:ef:0e:
                    94:a2:1f:d7:ca:1b:c1:d4:ff:f8:c1:1e:3f:99:23:
                    ff:79:08:6b:b4:18:f6:31:ab:89:99:38:ed:12:7b:
                    0a:7e:63:71:14:fb:89:57:f7:95:0a:0c:8d:e8:c8:
                    ba:b9:59:0e:1f:77:b3:d9:5c:16:a7:2a:b5:e7:c4:
                    40:40:67:49:12:9b:ff:ea:a4:df:8b:60:dc:ab:cd:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DF:38:80:8F:E4:20:FF:39:C2:78:CC:40:24:04:75:5F:78:EF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl

            X509v3 Authority Key Identifier:
                keyid:54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1e:35:22:7b:01:1f:9d:0b:db:6c:0c:8a:55:bc:fc:89:ff:
         be:b6:ef:c4:44:61:d3:66:0a:3a:f6:bc:fb:06:f6:de:13:7a:
         c9:d4:04:41:9b:fb:7f:6c:71:a8:ab:04:d0:b6:8e:d5:52:07:
         e2:2b:48:73:4c:d7:8f:a9:29:be:1c:14:bc:1f:91:ab:fa:c7:
         03:8c:f5:b5:63:05:75:34:6d:cf:eb:1c:60:5b:84:15:0c:e4:
         ae:15:ea:86:2a:28:d6:a2:31:03:54:6d:72:84:28:e7:2a:9f:
         c6:0d:d6:83:92:42:eb:70:d7:f4:17:6d:4e:57:e8:36:96:4e:
         f3:f0:00:57:ef:2a:db:f7:6b:fa:ea:0a:c2:a2:0b:b3:aa:9a:
         22:ca:84:98:41:96:59:fb:ae:ac:f9:7b:e3:bd:3e:c2:05:ff:
         59:b7:3e:34:00:fb:3d:40:81:32:0f:80:d3:f0:99:37:6f:d6:
         57:58:7b:55:3e:e8:84:3f:07:ad:e9:0d:2b:63:48:72:8e:c0:
         b6:86:b9:45:49:6e:ed:81:f5:2e:2e:a1:d9:b3:26:eb:bd:e0:
         4f:6c:f5:dd:dc:dd:3e:c7:7b:78:50:e2:5e:37:f7:14:c6:88:
         85:81:36:c2:1d:31:08:45:4a:f9:31:45:46:b7:49:8c:3c:91:
         bd:64:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 20:02:17 2026 by rpki-client