Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa
File:                     d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa (raw, json)
Hash identifier:          k3GY/94bSCHBFv3hKAL+TqxHV5mDdBbhMekY+zMfQgg=
Subject key identifier:   DC:C7:FD:F0:C8:D1:5C:BA:BC:5E:59:38:20:42:8A:2E:7B:9A:E9:ED
Certificate issuer:       /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial:       010D0C9F4328584D91C01FFB1534D301FC666020
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        2604:f340:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1f:fb:15:34:d3:01:fc:66:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=baabd4f7-7973-4ab9-83dd-7e17d21fac46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:3d:ea:05:ff:b6:62:5b:c4:89:98:ab:ed:
                    db:4f:a7:be:cf:8f:b4:9c:f9:b7:71:72:13:53:ec:
                    25:cf:ff:64:17:93:16:38:0e:31:3e:d9:07:a2:00:
                    49:9b:0d:0a:e7:7b:57:1c:2d:26:2d:f1:ab:13:ec:
                    ae:6b:b0:9d:9a:5b:c0:80:55:8a:a1:53:70:81:af:
                    6f:be:98:9a:b0:a1:08:5f:9b:e7:9f:5e:ce:68:25:
                    f8:e3:59:d9:ad:c9:9e:d5:dd:ca:81:10:88:18:7a:
                    26:d8:0d:4b:5b:1a:d5:a4:0a:32:fb:c9:8f:83:9c:
                    97:b5:80:0e:8e:f8:de:3c:98:75:6f:ac:80:66:b0:
                    44:da:6f:5d:d4:80:af:fc:9e:31:2a:aa:3b:92:dc:
                    80:b8:8f:6d:11:aa:92:2f:b2:4d:b0:90:90:66:bc:
                    61:19:3a:0c:16:88:a4:33:7f:7d:36:51:8c:d6:d1:
                    b4:fe:7a:9c:43:2c:9c:a0:cf:d5:e4:7c:45:93:93:
                    fc:57:42:35:8c:33:66:20:ec:f4:f9:50:e9:ea:6c:
                    86:24:14:0b:c9:0f:51:a1:50:0d:42:4c:d2:71:bb:
                    aa:73:b8:c1:4f:75:f1:db:06:57:ae:e9:4d:ca:48:
                    05:45:61:f0:35:d1:d8:15:02:05:74:87:03:82:59:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:FD:F0:C8:D1:5C:BA:BC:5E:59:38:20:42:8A:2E:7B:9A:E9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d16e6f67-b483-36a3-82f1-7c774d2bca7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl

            X509v3 Authority Key Identifier:
                keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f340:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:15:b2:ff:6f:4d:65:cb:d4:9f:9f:62:e6:42:2e:68:53:
         ff:61:72:a7:89:97:66:f3:a5:18:77:dc:52:41:f0:58:27:53:
         5c:06:31:c3:6e:fa:32:85:f5:9b:0a:04:1c:96:e6:52:d7:8b:
         cb:e0:86:3d:78:7a:02:d6:b5:73:7f:f8:da:2f:8b:dc:fe:3e:
         a0:1c:67:6d:0e:34:80:db:0f:00:82:f7:0a:4e:8d:b0:b5:0a:
         a0:bb:82:e8:ff:51:7a:05:43:12:c2:44:f0:ad:a8:fa:c2:4f:
         e4:3f:d8:e0:61:cc:5b:44:96:a0:ec:3f:5c:67:35:8e:46:f3:
         3e:13:fb:0a:ed:04:59:f2:8b:8d:f3:e5:6f:ed:cb:bf:9a:0b:
         5b:ab:ce:94:e7:9a:bf:27:11:db:05:23:c7:07:4f:a4:53:e2:
         07:41:f3:31:f9:38:26:8a:e4:bc:f1:50:60:66:a7:37:9c:bc:
         cb:c0:ed:d5:87:6b:d6:af:94:d9:19:68:a3:1f:4c:04:2d:b2:
         52:4f:f1:7c:cf:b8:1b:18:f3:f6:5e:bf:e2:eb:21:d0:f6:eb:
         62:af:67:9b:79:69:5e:2c:17:70:1d:50:b8:b0:b8:7c:ef:ce:
         2a:79:48:9e:5a:59:34:3c:54:2f:9f:24:70:72:3e:fd:64:4f:
         b4:86:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:33:37 2026 by rpki-client