Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa
File:                     af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa (raw, json)
Hash identifier:          EMqFn8gFYsGJN5G2FZOCW2t4YTZW8v097sdDJXnuOmk=
Subject key identifier:   C7:A9:7A:5B:CD:46:6A:3F:5C:71:9B:18:63:70:89:5C:77:6A:4C:10
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F4328584D67DFC314632F71EB02EB1000
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     16276
IP address blocks:        2604:2dc0:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c3:14:63:2f:71:eb:02:eb:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=e677f3c6-44d2-4093-8e8d-00b94e27b910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:ff:06:11:0d:34:d8:01:e6:33:5a:f1:97:
                    40:13:16:68:13:30:cc:76:73:cb:62:ce:ba:14:f6:
                    84:af:4d:af:da:89:3d:1e:ac:c9:38:73:bb:a0:74:
                    da:5b:5e:7a:3a:2d:aa:ab:ba:fc:2c:09:23:e0:8e:
                    d2:6e:94:cb:64:f7:94:a8:6b:44:69:92:f7:bf:8d:
                    44:5f:32:07:10:55:d1:1a:fa:0c:47:e2:20:43:b3:
                    05:dd:9f:da:ee:2a:bb:86:55:cb:5b:41:e2:1b:26:
                    5a:9b:ba:c7:e7:6d:00:85:9a:e0:a7:3d:72:15:08:
                    d3:6b:d0:18:b5:88:db:77:73:ce:38:65:27:bc:5f:
                    3f:23:0d:c4:e1:59:d5:9a:02:4f:c6:79:a8:19:40:
                    e5:ca:13:d8:58:a8:1b:12:ce:8a:e9:a3:6f:ef:56:
                    97:19:69:e4:e2:7d:d5:24:23:5e:75:c4:ac:f3:e1:
                    8c:4a:fa:4e:2d:3b:a0:0b:5b:bf:14:95:3d:8c:9c:
                    dd:87:63:1e:87:24:d4:9e:39:83:03:a7:77:41:c5:
                    60:10:e8:bb:0c:e7:06:04:d5:70:82:67:16:8b:2d:
                    b9:0a:73:e3:2d:9c:9e:d0:1b:36:de:12:98:a2:4a:
                    3d:cf:05:4a:23:3e:ff:ea:5d:13:e7:a4:d0:d2:f9:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:7A:5B:CD:46:6A:3F:5C:71:9B:18:63:70:89:5C:77:6A:4C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2dc0:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2a:32:1b:11:cc:ec:43:c6:7e:6f:19:45:1b:84:69:f6:13:
         79:a7:e1:6d:b8:5d:5c:6e:42:64:4e:bf:4c:0b:fb:75:6a:6f:
         fc:68:51:a6:9c:2e:e3:2c:bd:0e:f9:a4:87:05:d2:c2:6e:ba:
         c4:d2:12:95:2f:6c:46:e8:25:d4:c3:b2:a4:0f:fb:a3:1e:14:
         05:50:a7:28:ff:c7:d4:26:c8:1d:3d:5e:4f:12:e8:11:b7:74:
         c3:bf:90:85:13:6c:b1:7c:9c:a5:cf:83:a4:05:5c:c2:e1:ba:
         2f:61:77:e7:c1:50:ad:d1:b8:eb:21:34:61:08:7b:17:0c:d5:
         d7:de:45:89:6e:95:15:d5:0b:1d:48:f0:ae:40:3b:33:13:09:
         aa:60:9b:ac:9c:05:03:62:4d:7d:06:d0:4e:73:aa:89:66:eb:
         43:b8:ca:b3:fe:ba:81:3b:f6:31:f8:df:7d:71:43:e0:77:70:
         c5:e2:da:e0:15:b3:8c:8a:fc:40:69:bb:f0:d9:5d:d0:30:81:
         89:bc:7f:b6:ab:9b:49:ad:09:c9:e8:7e:27:72:0e:d3:7c:20:
         84:c0:61:90:3e:88:e5:49:1a:91:ff:c0:a8:6b:5d:37:32:be:
         88:cb:cc:d6:c5:2d:a9:5c:cc:8f:4e:fb:7b:bb:28:db:1b:1d:
         a3:cf:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:42 2026 by rpki-client