Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa
File:                     b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa (raw, json)
Hash identifier:          eRDg4g+Zdv3IbSZsXr4e9HCXHPFjPOScd1EefgyWED8=
Subject key identifier:   4E:DE:4E:37:A4:17:46:2F:BA:FB:37:A3:7B:CE:2E:47:EC:EB:B5:00
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584D9E5008644CE385898C2CC220
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2606:9c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:08:64:4c:e3:85:89:8c:2c:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=ac7e6691-f369-4f39-bce3-d4a68808efa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:5a:c2:bb:de:31:d9:67:61:5b:ab:e5:1c:
                    b3:31:2a:54:4c:56:35:5a:cf:cd:91:01:a0:fd:0b:
                    b1:f9:27:e4:6d:98:36:5f:8f:92:b9:f3:97:bd:01:
                    50:ea:bc:a9:21:07:ae:01:44:30:80:55:d6:56:4f:
                    40:49:f4:0d:7f:97:7e:4b:e8:f5:d9:65:ea:39:21:
                    ec:13:70:66:e4:78:94:af:0c:d8:c6:91:52:12:4e:
                    0e:f0:e2:c7:e2:57:bb:04:6f:39:15:b4:a8:68:af:
                    16:c2:0d:43:f4:03:fe:c3:7d:b3:9f:a8:97:ad:b4:
                    2c:4d:47:53:d2:fa:d8:9b:9e:11:50:88:c9:1a:2e:
                    30:0b:28:40:ad:9b:43:03:da:49:51:ef:6c:50:c2:
                    54:f9:13:be:fc:46:c2:81:45:7f:76:ed:f9:93:40:
                    9d:9f:b3:d4:1c:e2:d6:f5:35:a8:0f:f0:02:56:3a:
                    38:eb:54:39:c3:69:21:1c:d3:ac:9e:88:79:4b:b3:
                    cd:bf:dd:a7:19:56:37:d2:fd:f6:01:9a:e6:d0:4d:
                    79:0b:41:f6:8c:f3:5a:fe:89:41:6a:58:93:29:92:
                    56:c5:7d:e1:e9:3d:09:a8:d6:86:ae:cb:e6:23:5f:
                    bb:a8:3a:76:98:67:ae:1e:a3:f9:03:a9:0f:e2:72:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:4E:37:A4:17:46:2F:BA:FB:37:A3:7B:CE:2E:47:EC:EB:B5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:29:f4:e1:f2:a7:0b:fb:5b:ca:44:9c:9b:d7:9f:41:7a:a7:
         f7:67:5c:7c:ae:27:6c:ce:91:3b:60:f1:51:2a:12:b8:0e:f9:
         7c:e0:a7:a2:03:4d:c8:bf:f4:9c:75:28:2b:f0:ce:b2:52:7b:
         f9:ce:de:6d:10:7c:29:55:5b:0f:be:65:be:67:0f:66:fc:af:
         9e:29:4e:26:39:c7:f8:9c:a9:3f:f8:ae:56:b7:94:53:7b:2d:
         b7:27:52:db:af:c5:e9:7f:f1:38:81:02:85:d3:56:53:85:e8:
         69:31:19:b0:53:3f:09:22:1e:bf:e6:a0:04:d0:e5:c9:03:b6:
         c7:3d:68:9e:83:9f:20:61:24:36:12:37:92:ec:13:9a:55:88:
         ed:af:57:57:18:77:a7:88:96:8d:c3:ee:f8:15:be:b9:5d:05:
         78:9b:0f:9c:96:8d:88:84:7a:b3:b1:f7:7c:52:39:74:a2:8d:
         98:bc:68:6f:d1:95:fd:57:70:fb:5a:95:e5:49:a9:58:51:92:
         ff:72:4f:da:36:cf:a2:e7:f3:24:0f:04:a3:4d:45:80:ea:7d:
         ed:73:23:3c:b4:be:9f:50:0b:3e:f3:c8:b0:8e:8c:52:49:6a:
         fb:5d:c7:31:b1:49:91:78:44:ad:b6:01:6a:d6:f0:58:50:e6:
         ca:62:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:17:43 2026 by rpki-client