Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa
File:                     308fdebd-55e3-3c5a-99b7-a06760224d7a.roa (raw, json)
Hash identifier:          N93eC+QLJAV5WYXDKnr0fQpKxT/tcgCeKpmT2OEDVME=
Subject key identifier:   28:7E:7E:65:98:D7:D9:59:06:DE:A8:CD:6F:E2:A1:A4:59:D4:1B:D9
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584D6515245C0320233F10665CC0
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     400097
IP address blocks:        2606:3d40:5d01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:24:5c:03:20:23:3f:10:66:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=885ed3d1-1413-4541-b47a-6e7842c3aa18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:69:41:18:b7:56:83:a7:5d:5e:88:02:d2:
                    6b:ad:45:c5:2e:f9:45:ad:6a:f4:71:41:71:43:a3:
                    b8:0f:69:61:c7:03:cd:33:70:80:f4:75:9a:0c:28:
                    fa:4a:9a:02:94:e8:5c:59:07:7f:ae:0e:4d:62:87:
                    f8:ea:63:e0:8c:a7:73:84:ae:91:30:b3:82:2a:fa:
                    99:fb:fd:ec:03:39:ff:61:e5:80:32:7e:d6:52:a0:
                    04:e3:62:0a:11:5a:1f:e0:c0:3d:8a:5a:c1:22:93:
                    05:e0:43:81:e4:65:fb:c3:0d:2f:4e:ed:19:00:ed:
                    f0:ea:88:5e:b2:35:9c:1a:98:33:b8:b2:15:03:9b:
                    0f:9c:c3:a6:1f:d2:f5:31:7b:6e:d8:3e:d7:09:c6:
                    14:ba:d3:e2:7a:c5:91:a5:d1:25:27:ce:65:c2:ad:
                    e9:de:30:d0:1f:ca:3f:dc:19:c2:11:7b:e2:05:45:
                    1b:75:2f:b6:f3:78:16:55:5b:28:32:6c:63:f3:54:
                    07:d1:cd:64:b1:59:51:53:1a:3a:e0:00:5b:ca:6f:
                    fd:ea:9c:3b:83:08:f2:1b:57:ea:b0:1e:aa:8c:0d:
                    06:ac:b6:1e:dc:63:25:27:72:ff:63:4f:c5:84:18:
                    7f:e1:ee:ce:ea:9d:62:b1:15:5e:22:89:04:d5:47:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7E:7E:65:98:D7:D9:59:06:DE:A8:CD:6F:E2:A1:A4:59:D4:1B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:5d01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c3:31:0d:77:76:bf:ae:70:d8:aa:12:db:ff:86:a5:df:d3:
         26:13:c2:ad:56:9e:44:bc:1a:01:5f:11:97:b9:74:a7:b8:a2:
         db:08:ec:2c:df:75:f2:38:38:01:eb:c0:e5:d1:1b:fc:4d:ee:
         e7:81:77:44:6e:12:d5:aa:1d:e8:80:01:e5:88:2e:11:36:01:
         0f:c3:82:14:39:1d:86:42:fb:4f:31:f2:21:20:5b:b8:36:e5:
         fb:ba:a7:10:d7:f2:87:48:bd:d6:3f:6a:67:d4:a6:66:9e:69:
         d5:f7:20:9d:4c:f2:b4:ae:0b:b9:64:de:ba:fb:6c:27:94:09:
         c0:de:fb:ca:d0:94:7f:b7:f1:ee:c7:e4:a8:0a:49:20:c0:01:
         25:f4:2c:04:37:71:31:90:5d:aa:ca:03:26:bd:ca:e5:b7:ce:
         a4:9c:a0:aa:65:18:af:86:8f:d0:7c:7f:ef:8e:be:cb:43:0c:
         ad:63:4e:94:e1:de:28:df:4e:c6:a9:da:ca:7e:1d:bc:b8:f8:
         1b:9e:62:22:3e:c4:8a:09:a3:b8:76:7c:fd:f3:dd:34:03:06:
         69:65:4e:91:39:1a:6d:a8:08:7a:35:6d:59:75:76:8c:15:64:
         bb:26:11:e9:9f:c4:96:f0:7d:1b:4e:51:c8:02:a1:eb:78:c3:
         7c:4b:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:02 2026 by rpki-client