Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/0a1403ff-5701-330d-9c24-a264f188b706.roa
File:                     0a1403ff-5701-330d-9c24-a264f188b706.roa (raw, json)
Hash identifier:          gCvqo9A25+d88/1yzmpNuRjsu9zKo3UYFqI/ESt+m+I=
Subject key identifier:   15:1B:67:F1:27:05:9E:BA:12:C5:E1:B8:58:10:F9:7F:C9:99:24:02
Certificate issuer:       /CN=122e6c80-f523-4555-a85c-d2640af24cd2
Certificate serial:       010D0C9F4328584D20AC814DD7B913F09BEA0F00
Authority key identifier: D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/0a1403ff-5701-330d-9c24-a264f188b706.roa
Signing time:             Wed 11 Mar 2026 00:55:01 +0000
ROA not before:           Wed 11 Mar 2026 00:55:01 +0000
ROA not after:            Tue 09 Jun 2026 00:55:01 +0000
asID:                     20473
IP address blocks:        2620:8:f080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:ac:81:4d:d7:b9:13:f0:9b:ea:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122e6c80-f523-4555-a85c-d2640af24cd2
        Validity
            Not Before: Mar 11 00:55:01 2026 GMT
            Not After : Jun  9 00:55:01 2026 GMT
        Subject: CN=4a4c54be-75bf-482d-8b56-54df99354ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:1c:c4:87:55:f7:62:26:5c:98:a7:c3:9b:
                    f1:6a:e4:7c:50:88:be:d3:57:81:d7:14:a5:01:1d:
                    31:6a:91:f4:53:a1:a8:21:73:72:50:61:57:4f:db:
                    1c:c5:bd:55:07:bb:a5:6a:a8:4a:52:aa:a4:09:36:
                    db:ca:5d:3c:a5:29:e4:59:c6:bf:c1:33:96:4f:7d:
                    ce:02:fd:0e:5a:7f:f9:5d:d6:39:ae:40:37:8b:4c:
                    54:a9:8e:f7:fb:d2:f1:73:d8:2c:f5:1a:c8:36:e2:
                    e9:2a:b7:b6:e3:12:41:5e:e1:f8:a9:f9:cd:c3:e7:
                    57:57:cb:08:28:0c:f0:53:52:eb:fc:f1:1b:1b:d3:
                    95:a7:2d:bc:d2:c3:b5:f6:13:99:84:13:bb:84:84:
                    ba:b0:78:d6:5f:4b:0a:33:8c:fe:1e:15:47:22:8a:
                    1c:89:b3:0e:28:a2:f6:77:c0:03:1b:2a:39:d8:02:
                    a6:6f:30:ea:0b:52:6f:92:e4:3c:2d:d4:76:a4:37:
                    7b:bf:88:7a:4d:53:ab:a7:f5:6d:6c:a6:77:30:02:
                    31:ed:9e:1d:fa:ad:0b:07:61:fa:7d:c1:5f:cf:00:
                    09:0b:f1:fb:93:05:de:3c:4d:57:96:46:f6:b4:d7:
                    10:f7:08:92:e8:0f:53:5c:d4:82:6d:d9:fe:79:77:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:67:F1:27:05:9E:BA:12:C5:E1:B8:58:10:F9:7F:C9:99:24:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/0a1403ff-5701-330d-9c24-a264f188b706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.crl

            X509v3 Authority Key Identifier:
                keyid:D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:f080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:ee:9c:45:87:82:95:00:9e:8f:30:87:2c:24:5d:c2:65:
         e5:f3:03:f6:56:ad:59:8e:a2:8a:29:e4:11:69:4c:1c:6c:f5:
         6a:d4:00:5e:16:0d:a3:cf:66:04:b1:8d:19:7e:4a:01:cb:c2:
         f4:58:79:c7:d3:b1:7d:56:ea:08:8f:34:94:1b:67:3a:c6:30:
         e1:08:44:93:6b:5d:f0:59:64:3c:13:69:04:c4:50:12:89:f1:
         86:91:d3:06:7b:b6:8f:72:f7:03:e4:85:40:99:cc:c6:20:fb:
         32:f3:54:c0:e2:13:d0:0d:81:2a:56:e0:02:a4:a9:ea:d2:e1:
         0c:f4:0c:0b:be:83:0d:95:13:aa:be:73:52:1d:d9:ef:6d:f1:
         2d:c9:21:4b:20:ff:db:2f:00:5d:ec:0c:23:1d:18:71:2f:ba:
         d5:c7:04:f1:04:f6:e9:1c:4f:da:28:e7:df:8c:3a:68:ff:bd:
         6d:ae:e1:47:e9:57:53:a4:48:b3:c9:88:99:ba:a5:1b:28:10:
         32:72:3d:13:46:20:dd:ab:d4:9f:2b:42:c1:99:08:03:76:cc:
         c5:3b:4b:42:63:24:b3:c6:bc:70:e8:b0:ed:84:3f:46:f8:0b:
         a6:f8:55:a2:5b:34:c3:fe:35:d1:94:5d:43:49:0d:4b:67:e0:
         23:b2:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:18:52 2026 by rpki-client