Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/c9837e83-a771-3f0e-9f1e-2977319acec0.roa
File:                     c9837e83-a771-3f0e-9f1e-2977319acec0.roa (raw, json)
Hash identifier:          a9+IEcdZIfqPVKAdGKRNRwixRgAqUI1exrAMYtUQx8Q=
Subject key identifier:   21:DE:4E:96:6A:C2:5D:99:A5:DB:C2:B1:B9:3C:96:0B:F4:92:22:B5
Certificate issuer:       /CN=44449637-d770-4e08-ae28-94a492bdcd5e
Certificate serial:       010D0C9F4328584D1D545F8C4998AB8B72E7A6B0
Authority key identifier: 77:B5:8A:AB:28:2E:FD:86:70:71:53:A0:CF:C9:C4:CE:3D:5E:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/c9837e83-a771-3f0e-9f1e-2977319acec0.roa
Signing time:             Mon 09 Mar 2026 20:10:01 +0000
ROA not before:           Mon 09 Mar 2026 20:10:01 +0000
ROA not after:            Sun 07 Jun 2026 20:10:01 +0000
asID:                     210
IP address blocks:        2620:e:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/44449637-d770-4e08-ae28-94a492bdcd5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/44449637-d770-4e08-ae28-94a492bdcd5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:54:5f:8c:49:98:ab:8b:72:e7:a6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44449637-d770-4e08-ae28-94a492bdcd5e
        Validity
            Not Before: Mar  9 20:10:01 2026 GMT
            Not After : Jun  7 20:10:01 2026 GMT
        Subject: CN=212b4ab4-d235-4703-86a9-8985e19231ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:5a:cb:5c:f8:da:d6:a3:15:0c:fc:f1:e8:
                    1f:7c:c6:6f:ab:f4:62:91:11:f9:60:f9:bd:c3:f7:
                    a5:b9:86:d7:3d:cc:7c:91:2f:e4:08:6e:04:ad:92:
                    34:0a:71:b4:af:1b:79:49:99:8e:f5:33:d6:f4:5d:
                    1e:06:81:72:9b:ec:2a:50:dc:10:e8:f0:99:81:5b:
                    a1:ff:d1:12:75:0e:c9:f2:ee:03:fc:d2:77:a7:89:
                    cf:6f:ae:ab:9a:58:e2:97:5b:8f:76:f5:1e:16:95:
                    dc:17:5d:e5:2d:5f:b4:40:59:b3:b1:60:89:be:be:
                    39:f7:91:df:4a:8d:38:a4:59:f7:62:bd:71:ec:95:
                    91:b3:92:ef:4a:e1:1b:85:ff:57:ed:d2:0c:28:9f:
                    2d:fa:35:c1:0b:f9:20:c0:3a:91:10:27:01:42:99:
                    01:3a:5a:a9:ca:5d:fa:a8:42:87:c6:53:65:5c:dc:
                    56:aa:ea:1a:d8:1d:a9:a2:40:9f:ce:ba:a2:63:35:
                    36:47:8d:d2:8f:c1:4e:8d:77:73:96:03:47:c8:2c:
                    7b:6d:e2:c2:6f:7d:0e:5a:6f:2b:6d:f4:94:6f:84:
                    26:d5:08:fe:16:06:e6:21:db:a1:4f:50:cd:d3:d0:
                    4f:0d:56:d3:d9:05:b1:eb:ac:07:86:36:03:87:ab:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DE:4E:96:6A:C2:5D:99:A5:DB:C2:B1:B9:3C:96:0B:F4:92:22:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/c9837e83-a771-3f0e-9f1e-2977319acec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e/44449637-d770-4e08-ae28-94a492bdcd5e.crl

            X509v3 Authority Key Identifier:
                keyid:77:B5:8A:AB:28:2E:FD:86:70:71:53:A0:CF:C9:C4:CE:3D:5E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44449637-d770-4e08-ae28-94a492bdcd5e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:e9:ae:a2:ee:c1:5b:f1:13:80:c2:19:8c:56:b7:23:cd:
         e3:e4:76:bd:f1:0a:ef:b9:ff:b6:79:40:4b:43:db:d5:90:2e:
         b8:d1:9a:7c:39:4d:8d:3c:f3:fa:ba:1f:9d:ac:bc:89:b4:47:
         78:c1:02:d5:5d:d2:ef:6e:ad:a0:51:af:f5:eb:df:59:a0:fe:
         c6:1a:4a:94:e4:c7:e7:4e:0f:22:25:11:fe:b0:2f:74:4e:6e:
         19:a6:48:dc:98:a8:cd:7e:8b:8c:b1:2b:50:1d:db:3e:2e:32:
         75:9e:83:6f:37:b1:1e:e7:e4:cd:9a:a0:d0:52:86:5a:c2:0c:
         a7:61:26:82:f4:76:cd:cb:ed:fd:94:e0:0c:76:97:31:96:29:
         0f:b3:8d:e9:df:de:72:5a:e2:ee:ec:9d:97:ac:f2:ac:d2:35:
         dc:73:95:d7:01:33:06:05:85:71:fc:ca:69:c5:2a:ef:b4:57:
         b2:e3:66:4e:ef:b2:dd:d5:a0:f6:b0:6c:03:67:ea:82:f3:55:
         40:dd:7a:36:1f:5e:d4:73:3e:b8:42:07:a1:f5:cc:da:6e:e8:
         c8:cb:b8:c1:64:a7:d9:fc:f3:17:3e:f4:5c:87:b4:38:7b:bd:
         8f:2e:0d:85:4e:07:96:d1:57:5e:e0:75:ec:8e:30:67:10:61:
         5a:11:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:18:02 2026 by rpki-client