Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa
File:                     d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa (raw, json)
Hash identifier:          5QERugUr5jbUej6bc+iOE7QuWKbhSutWKjzoQ27lQ+0=
Subject key identifier:   D7:EF:9F:E1:91:96:1F:55:95:34:7F:14:70:1C:2F:9B:BD:1E:96:14
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328584DAF102BC8C439E318E6A58180
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     398032
IP address blocks:        2620:1d8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2b:c8:c4:39:e3:18:e6:a5:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=a128bb50-2270-4482-b72f-a3c35a52168a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:81:bd:c9:1e:d6:2d:c1:5b:a9:2e:bc:d6:4a:
                    90:6c:b7:c3:ee:85:67:8d:7c:d7:cb:7a:ff:bf:1f:
                    72:fe:e6:b1:75:9d:25:54:3e:8c:3d:a5:78:b8:7b:
                    b7:1e:f5:52:02:3b:58:21:fd:00:57:fc:2e:a1:1d:
                    06:70:9c:42:eb:2d:6c:53:d7:b5:4c:cb:24:d1:d1:
                    8c:28:ca:b5:29:13:9e:5a:0b:0b:03:a5:b4:f1:0a:
                    ba:88:c8:b9:a5:99:70:8d:d2:d6:3d:c0:cd:28:45:
                    b5:9b:dd:4e:99:0f:db:02:0f:42:05:cb:49:7b:60:
                    bf:80:d4:d1:40:fa:37:9a:9c:29:73:61:85:f9:b4:
                    cd:54:d6:5d:f4:47:86:c4:04:db:96:5b:f5:3c:1b:
                    01:c1:e5:4a:b6:c8:12:55:24:cf:4c:f4:8c:6a:f8:
                    ae:86:59:86:c2:97:3e:c8:8f:ad:eb:42:3f:c4:f5:
                    df:70:0b:57:51:ca:de:59:3d:e5:a5:97:93:1a:a2:
                    78:e3:d0:5e:6b:06:b3:19:90:5a:95:eb:d5:15:fa:
                    c3:15:e4:c0:9a:4a:6f:48:0b:28:c8:a9:b2:8a:a7:
                    02:6b:85:f2:07:ae:c5:81:a1:ef:ee:fa:f9:9a:81:
                    fb:91:00:48:69:44:d3:7a:be:38:47:73:bb:74:9f:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EF:9F:E1:91:96:1F:55:95:34:7F:14:70:1C:2F:9B:BD:1E:96:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:15:fb:aa:a5:3f:75:b0:4c:99:ad:ba:0b:21:21:7f:aa:
         67:33:c8:1d:2b:a7:5a:94:da:5f:b7:e3:b9:f3:b9:17:dd:ad:
         fe:5b:7b:da:4a:f6:bd:38:76:9c:2a:c6:47:46:37:07:3e:17:
         05:80:15:ed:d1:2d:d6:bc:3d:04:6a:b1:4d:cc:fa:1a:fa:58:
         df:d4:25:ac:1c:8c:b9:a5:8f:86:4d:99:56:ef:c2:d3:4d:09:
         30:7f:5b:06:0f:a6:6f:ad:74:26:a8:93:72:26:9e:90:4f:a2:
         a6:b5:77:10:17:e5:f4:89:e8:f9:67:84:41:d0:57:ef:83:37:
         92:6a:a0:e0:d5:88:bf:2d:60:1f:c6:b4:44:aa:12:65:7f:e1:
         01:6e:0f:90:33:0b:6c:ec:2d:52:3e:7e:cf:79:2d:e0:3a:80:
         cf:73:fc:aa:ef:c1:86:ba:c2:99:3c:73:34:b1:19:d3:b2:2d:
         8b:13:47:eb:22:d6:ae:c5:71:32:33:0a:e2:e2:60:df:31:bb:
         a5:40:63:aa:db:18:cc:51:5b:18:9f:de:c8:2c:01:a6:a2:36:
         5a:d1:45:d4:4d:f5:c5:21:5a:63:58:97:ba:87:00:10:d8:96:
         32:ac:61:a7:e8:6e:01:59:dd:57:97:e8:27:93:e2:7a:48:a6:
         72:19:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:58 2026 by rpki-client