Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be9d77c8-7575-3104-b42c-ad64c3542fd3.roa
File:                     be9d77c8-7575-3104-b42c-ad64c3542fd3.roa (raw, json)
Hash identifier:          lWE71bx8izLaTe5G9J7xHU4hPJWY3cThYhhyDONpWoo=
Subject key identifier:   5D:38:1B:65:6E:56:B5:B4:07:57:D6:88:C7:59:9C:8C:00:43:AF:40
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA879CC13F349EF038E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be9d77c8-7575-3104-b42c-ad64c3542fd3.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        2001:4958:1829::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a8:79:cc:13:f3:49:ef:03:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=6c91303e-3b93-4d42-b984-ea2cafbf44f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:de:fb:85:8e:fe:7f:03:43:c2:80:b7:b9:
                    2b:e3:d3:65:b8:e5:77:7f:7a:80:9e:b1:9a:38:8c:
                    a1:c9:79:d5:26:a5:8c:85:8c:14:b3:69:94:f1:22:
                    fc:2b:9a:b0:db:25:b5:5e:b9:bb:70:f7:aa:33:df:
                    5f:f1:44:97:25:32:0c:5a:e8:dd:5f:93:ce:c9:fd:
                    36:25:86:e7:14:7a:4d:e1:eb:aa:36:6e:b1:9f:50:
                    3e:ee:63:5a:31:93:82:0f:c3:17:29:f5:fe:14:72:
                    d1:83:2b:13:a4:e3:64:6d:98:e4:bd:c1:28:42:c8:
                    2b:31:25:d5:b1:34:6a:0a:8f:50:db:2f:60:96:a4:
                    38:1b:b1:74:6c:3a:65:b2:2e:84:3d:ea:d5:14:8c:
                    99:10:bc:ce:ff:65:65:d4:7f:51:f2:09:49:7c:44:
                    cf:85:d9:84:16:13:8b:44:e4:41:21:13:8e:0a:bf:
                    56:c0:28:76:d0:d1:71:81:7b:22:ce:5a:c0:28:35:
                    a0:64:5f:d6:1b:81:9e:0a:77:11:26:b2:b2:c7:6b:
                    0c:f3:2a:70:56:1b:b4:05:5f:9d:63:45:71:93:5e:
                    eb:03:ff:35:ed:12:e5:28:c2:2f:34:73:ef:b0:d6:
                    90:d9:d3:eb:f9:42:0c:25:8b:11:63:a0:fc:7c:91:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:1B:65:6E:56:B5:B4:07:57:D6:88:C7:59:9C:8C:00:43:AF:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be9d77c8-7575-3104-b42c-ad64c3542fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1829::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:c3:ee:75:2c:c8:ee:08:43:fa:ea:6b:73:7b:a5:2c:63:
         3a:6d:2f:b0:b3:1e:5a:52:29:28:53:4e:b9:b7:ab:e7:17:2c:
         b5:c5:85:20:83:f2:8f:b4:98:0d:20:a7:87:b3:2e:8e:bf:9e:
         12:96:c0:14:8b:81:26:ab:08:0b:58:fa:33:35:04:76:88:6b:
         f1:ee:7f:c5:a0:c9:6d:9d:91:d5:49:24:b9:29:95:e5:7b:d7:
         69:08:49:a5:93:39:b7:be:c6:50:cc:4e:3d:93:86:92:9d:bc:
         a3:c1:ad:0d:0d:e1:62:6a:05:55:bf:71:00:71:3f:88:75:d8:
         1c:07:a0:f3:b1:97:2e:25:6e:df:9c:82:21:14:8c:2c:0d:30:
         fc:ae:70:40:63:74:78:7f:15:dc:dc:08:66:68:8b:05:4c:13:
         1f:9a:71:11:4d:d5:da:ce:ae:c9:71:85:fb:52:84:6f:7b:32:
         7d:96:01:d5:4b:1b:98:d5:89:4e:8c:72:78:3e:66:83:81:1c:
         43:ee:e8:f0:23:75:11:08:b7:b5:ed:25:a6:4c:41:68:6a:5f:
         7a:61:c6:40:8a:b1:99:4a:ce:90:fd:cb:aa:99:d2:aa:31:a9:
         d4:79:33:ca:23:b4:b7:62:53:4f:4b:ce:90:c8:b5:ad:c5:ef:
         82:c4:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:22 2026 by rpki-client