Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/64d8e1de-7c81-36e5-aa09-ad2065e36762.roa
File:                     64d8e1de-7c81-36e5-aa09-ad2065e36762.roa (raw, json)
Hash identifier:          hBUwmRw82zKfcWJkoN/Npf39mH8dj/qRle+38lLcWyw=
Subject key identifier:   9D:AC:B9:3A:F6:44:88:CE:51:6E:26:70:D7:9B:6D:A5:A6:67:F7:A4
Certificate issuer:       /CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487
Certificate serial:       010D0C9F4328584D55BA3F79FB7ACE1EF9AC2F20
Authority key identifier: F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/64d8e1de-7c81-36e5-aa09-ad2065e36762.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     1075
IP address blocks:        2602:fb39:e00::/48 maxlen: 48
                          2602:fb39:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:3f:79:fb:7a:ce:1e:f9:ac:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=28f34125-56df-470f-ada6-0ce72f37d0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:df:43:c3:f5:4f:1d:50:3c:e6:a2:6e:8d:
                    10:9c:c6:24:6c:98:0c:ad:c9:28:62:b7:0c:d7:9e:
                    7b:75:5d:f2:9a:98:83:f8:37:f9:c9:f2:04:38:5d:
                    bb:40:c0:3b:20:df:eb:d2:ce:c0:b9:57:2b:ba:5b:
                    5e:f4:2e:4d:d4:ed:ce:09:35:6c:e6:2b:25:19:b3:
                    7e:25:e5:f0:9c:b3:de:a2:63:09:2d:96:03:05:6d:
                    c4:69:82:d2:f2:14:a6:64:56:3e:41:35:69:b7:68:
                    ad:92:92:d2:6d:c1:bd:0f:41:9f:a9:ff:75:d3:26:
                    f6:bb:ea:3c:b0:48:c9:39:8d:5d:31:65:08:ff:c8:
                    95:80:1f:f9:df:2c:50:9d:ce:f6:00:ce:34:b9:9b:
                    d1:32:de:7a:41:d5:17:1b:98:56:0c:62:3b:69:07:
                    a2:d9:04:cc:3b:53:ec:59:f2:a1:9d:e1:3b:d0:e2:
                    98:c1:f3:4a:61:6a:49:7c:d7:3b:b6:35:ff:91:f0:
                    15:45:cc:55:fe:b2:23:67:ca:94:50:7e:d4:c7:8c:
                    8a:de:e2:26:4e:1d:1d:86:f6:3c:80:57:a4:cc:b3:
                    d3:e3:67:16:4b:6d:27:78:75:b7:7e:d1:b2:33:43:
                    19:3b:bc:e3:41:08:03:b4:e6:d9:25:72:c8:0d:59:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AC:B9:3A:F6:44:88:CE:51:6E:26:70:D7:9B:6D:A5:A6:67:F7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/64d8e1de-7c81-36e5-aa09-ad2065e36762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb39:e00::/48
                  2602:fb39:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:8b:c4:fc:d2:3c:37:ab:75:43:cc:4a:38:bf:05:81:49:
         0c:cc:54:7d:2d:42:51:33:4f:b3:ed:03:31:b0:9b:88:cc:ac:
         df:79:23:64:73:4a:ec:93:70:e5:3f:03:b4:11:5d:3a:60:7f:
         cc:cc:0b:fc:bf:47:d3:8c:42:cd:3b:78:18:f7:9d:82:0d:a4:
         bf:02:ef:ad:01:0f:a7:86:35:40:ea:07:59:b6:e5:23:3e:b9:
         22:ba:34:26:35:5b:e4:77:4d:79:cc:81:b8:93:91:16:8c:c1:
         01:0d:d4:67:29:6d:f7:6f:fe:0a:73:09:32:d5:20:ce:89:88:
         09:54:32:6a:f4:84:dc:7a:0a:69:0f:a8:52:5c:ba:b3:b2:d0:
         f9:83:e5:32:9d:76:25:f2:fa:ea:63:1a:cd:56:44:8a:19:98:
         86:16:89:9d:e2:84:d2:17:12:e8:ca:ae:93:91:8f:21:6f:7d:
         39:fa:e3:b5:43:e4:84:fd:17:0a:97:7e:f3:0e:00:0d:57:98:
         16:02:c4:bf:4b:c0:8d:a4:3e:68:2c:eb:1e:0c:bd:c7:b6:f0:
         51:d2:23:10:63:25:58:db:a8:e1:cf:61:cb:02:12:eb:63:17:
         35:d1:94:2b:30:65:e4:ad:1c:5e:be:be:a4:f9:17:8a:87:fa:
         0a:ef:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:11 2026 by rpki-client