Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a81433d8-133e-3df2-a702-ef8477e6f8ea.roa
File:                     a81433d8-133e-3df2-a702-ef8477e6f8ea.roa (raw, json)
Hash identifier:          JoLAnm8Y+wFvMrgw2I3uGQvO0+A07p/lWebfZNF3ivQ=
Subject key identifier:   DF:42:EE:06:9E:4B:AB:DC:E3:65:46:8C:99:86:25:A8:F4:5B:37:0C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB0CB73F23FC58FB0F0140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a81433d8-133e-3df2-a702-ef8477e6f8ea.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     7122
IP address blocks:        2607:ca00:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0c:b7:3f:23:fc:58:fb:0f:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=c1c5f001-6a0d-4e20-ad2e-dbeac66f2f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:31:bb:da:84:0e:6b:ba:d2:a4:3b:4a:ff:
                    bc:75:1f:48:1d:57:0f:71:ef:54:c5:20:2a:dd:25:
                    4a:ad:6a:bf:b2:d5:4b:8c:6b:6c:1b:90:79:25:df:
                    db:c4:09:74:b3:43:15:9e:39:de:1d:7e:37:fe:f7:
                    c3:13:3c:25:0f:ed:1d:b0:08:ae:71:d0:fc:9d:95:
                    fa:71:ad:35:f9:50:60:c0:74:77:45:42:bc:69:c2:
                    e7:c4:7e:a9:c1:dc:83:f5:63:88:71:cb:c9:e0:c5:
                    6f:c5:bf:59:e5:ce:79:fb:f4:5d:7b:3e:b1:ae:f0:
                    ba:ed:f8:f2:fd:56:69:c9:a6:70:9b:ac:8d:e5:0e:
                    6b:63:9d:64:4e:cc:1d:6f:f8:78:15:14:e3:b7:23:
                    9e:a1:8b:26:7e:b3:59:19:df:55:e8:ae:a9:50:5a:
                    84:f9:64:c1:9e:3b:52:4b:7e:48:b0:ce:27:b5:17:
                    ed:68:01:0f:39:98:b4:4e:cb:bf:30:66:5d:b8:6d:
                    6e:2b:ae:32:ed:1b:3c:94:f6:0b:21:b0:2b:55:e3:
                    d3:5e:ca:68:f2:45:8c:50:90:ce:ff:25:8f:50:29:
                    74:bd:96:67:6f:ce:38:00:4b:29:b1:97:24:48:7a:
                    59:f7:99:7b:b1:1d:7c:a1:c3:d1:51:80:d0:e2:87:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:EE:06:9E:4B:AB:DC:E3:65:46:8C:99:86:25:A8:F4:5B:37:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a81433d8-133e-3df2-a702-ef8477e6f8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca00:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:99:3d:66:74:5f:83:c9:97:9d:a1:8b:a2:c3:8a:be:77:
         c2:ea:df:02:85:dc:1a:1d:5e:9f:1f:a3:67:c4:33:e3:34:4f:
         9b:a6:82:3a:b1:09:b0:1a:70:6b:fd:b3:64:a1:08:4c:c2:f8:
         64:49:19:8b:03:9f:79:8b:51:f3:36:53:38:f2:69:b4:02:88:
         83:27:0e:05:a5:b5:4a:bc:9d:a4:12:b1:ed:23:d1:13:a5:7b:
         4a:70:b3:e7:da:95:66:6d:45:d2:6b:aa:65:37:93:8c:16:36:
         c6:b2:06:81:4d:d6:f5:11:10:c1:58:b0:7a:1a:d0:1d:9a:66:
         03:22:da:6d:5b:0d:6e:5c:c9:e0:21:0d:0e:dd:f7:2a:88:af:
         66:b2:9b:bf:8b:6b:c1:8f:86:27:4d:6e:18:76:8d:11:cd:62:
         de:28:d0:f8:9b:86:25:e6:6d:94:20:30:b6:51:13:65:8f:ab:
         d3:5c:37:91:79:b1:a0:49:b4:09:23:f2:2d:92:a5:70:c1:9e:
         13:22:be:fb:7f:ca:f6:f2:ac:fc:ca:dd:28:89:2b:77:a7:73:
         a5:18:28:26:09:5e:4b:38:33:f8:93:cf:2e:75:8b:04:db:6e:
         ae:c2:eb:51:dc:ee:dd:8d:4d:24:12:28:54:32:a1:2d:b8:7b:
         c3:26:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:08 2026 by rpki-client