Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/0c3838f3-b497-3c8f-b366-a84bab0d2573.roa
File:                     0c3838f3-b497-3c8f-b366-a84bab0d2573.roa (raw, json)
Hash identifier:          De95uHOnq/mBcEeu0ox4hmhEatdJx1EJsDGIJRgH/8E=
Subject key identifier:   27:80:C3:C8:D0:EC:D5:2A:55:D0:2B:09:8B:7E:5F:F5:4F:37:0B:76
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584D7CCFE5FCC100754D258BDD00
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/0c3838f3-b497-3c8f-b366-a84bab0d2573.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     396032
IP address blocks:        2001:560:4::/48 maxlen: 48
                          2001:560:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e5:fc:c1:00:75:4d:25:8b:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=d5ea2fe8-a09c-4e59-b0b7-754913d8dbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:d9:74:9b:9f:78:4f:35:4a:08:79:73:28:
                    ff:a3:f5:d8:c9:44:56:62:86:f9:22:11:13:e3:90:
                    00:ca:d3:9c:93:57:d1:7a:e5:e5:41:16:85:4d:83:
                    f1:2a:cf:20:05:8e:9f:cd:65:d1:ce:0a:b7:d7:ad:
                    3e:5c:e6:bf:57:d0:28:c8:1c:93:3b:19:a5:0a:1e:
                    1d:2d:16:1b:7c:8a:f2:12:da:2a:a3:c3:37:1f:28:
                    12:d6:f8:0e:01:e9:0f:72:16:e8:11:79:7e:d7:36:
                    54:25:6f:ef:cd:c8:08:e8:63:33:d0:d5:61:8b:c2:
                    27:b4:2d:6c:83:97:e1:57:ce:93:51:ab:82:c5:f2:
                    f6:3c:50:5e:be:7f:cf:16:ed:69:12:99:99:db:e3:
                    40:1e:ba:cf:e7:8c:b6:98:49:eb:a0:35:e7:b5:97:
                    7d:da:f9:58:4f:5b:1c:81:9e:cc:14:91:38:3c:d4:
                    e5:62:d6:07:f0:38:ca:cb:ad:4a:7e:0b:2b:5b:3f:
                    a9:d4:c7:9d:29:60:bc:2e:0d:08:87:de:25:3b:05:
                    85:f3:d5:fd:f5:10:d0:15:34:fb:1a:f8:cb:dc:10:
                    bf:45:dc:30:e1:85:7b:12:9b:69:a5:6d:5d:86:10:
                    21:1f:b4:33:d1:23:cc:d4:98:bf:66:e7:c7:1d:98:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:C3:C8:D0:EC:D5:2A:55:D0:2B:09:8B:7E:5F:F5:4F:37:0B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/0c3838f3-b497-3c8f-b366-a84bab0d2573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:560:4::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:55:9e:f2:c8:1b:13:13:78:c4:be:84:67:fd:23:c9:fe:
         96:0b:75:46:0e:1c:0e:2a:a4:33:b2:bf:4d:7e:b9:a6:31:59:
         d8:94:e5:e8:8d:59:39:d0:90:b4:d2:b3:32:75:0c:6f:74:59:
         59:a0:77:9e:d1:9a:0b:43:1b:ce:b2:92:98:6e:df:88:18:98:
         1e:cf:db:08:c7:4c:ae:a9:bf:4e:49:2d:7c:d6:52:68:6a:10:
         be:e0:83:89:d7:ae:dc:6e:97:fb:42:b2:65:90:87:a2:47:47:
         3c:cc:32:10:fc:73:c0:58:7f:8a:63:45:17:02:a5:c2:7b:ae:
         6e:6f:9d:7a:63:f9:37:21:c6:79:4e:b5:27:f8:86:6d:4f:56:
         b9:f1:31:32:16:e0:f6:2a:53:99:69:bd:4e:c9:bf:4b:a5:97:
         d7:a7:45:a9:8a:7b:e0:ee:8f:95:19:29:c7:f9:3a:04:e0:d0:
         0f:0a:54:fd:fa:56:ac:c0:ba:7a:c6:dc:05:d5:a8:60:13:19:
         b0:d2:0c:f1:c1:bd:6f:7d:88:bf:49:f6:46:1b:7c:46:20:63:
         ee:68:7e:52:6e:07:c4:9d:6e:83:27:bd:65:00:91:74:57:f2:
         66:6f:40:3e:93:9f:99:f6:d7:67:a8:42:ee:ea:fc:c1:58:ae:
         1e:d3:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:32:33 2026 by rpki-client