Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/1830d782-64ca-3a50-8614-c6840f83b8f8.roa
File:                     1830d782-64ca-3a50-8614-c6840f83b8f8.roa (raw, json)
Hash identifier:          l8/6oUatquDhmBIvC2Lqh1f/U9Vp0P7YZN0yfe8Equc=
Subject key identifier:   06:A5:03:7C:AA:D4:43:6E:84:C7:7D:28:E1:D0:79:A8:CB:59:C5:A4
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584D624A5177ECBF541E84580400
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/1830d782-64ca-3a50-8614-c6840f83b8f8.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        2620:7d:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:51:77:ec:bf:54:1e:84:58:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=3d545914-6cb7-41ee-ac18-8dad8208668e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:b0:8b:56:1c:e4:de:10:5c:f2:3e:25:98:
                    78:10:2d:7a:f8:1c:fc:4e:77:1c:4a:82:ae:64:ff:
                    83:5a:16:79:1f:60:9d:17:4b:42:c6:4c:0f:3b:76:
                    53:47:ba:79:b6:58:20:15:4e:1f:00:d4:ef:51:c7:
                    f4:6c:4d:7f:f3:ed:7e:14:20:a8:3a:58:f2:0f:6e:
                    95:bb:37:fc:60:bf:2c:8d:bb:5c:ea:bb:c5:75:67:
                    22:09:26:a8:ad:5a:a3:62:36:1e:24:01:e8:0d:4d:
                    fb:a7:c9:f6:2c:bb:a2:32:a9:f1:f1:2b:75:db:ba:
                    a6:d1:60:2d:cc:b3:8c:df:6e:0e:4a:59:cd:f9:db:
                    86:fb:cd:54:2e:85:b6:98:b3:76:9a:9e:8c:e2:9c:
                    53:09:e8:1b:0a:3b:f7:19:38:11:d4:46:93:e9:b4:
                    b4:04:59:9c:75:40:17:cc:5b:98:a8:0d:c7:c3:2a:
                    ef:c9:62:0d:39:f9:c9:8a:83:2a:ed:88:5a:15:b7:
                    a8:1e:10:87:5b:7a:e0:11:b3:0f:8b:7a:6c:f5:49:
                    54:d5:e8:2d:57:dc:44:7f:4a:b8:5e:b4:42:c7:83:
                    ae:71:6b:44:6b:3f:8e:5f:3f:48:1e:aa:1e:61:d8:
                    23:48:09:10:bc:5b:17:d2:4c:67:56:83:87:21:eb:
                    d7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A5:03:7C:AA:D4:43:6E:84:C7:7D:28:E1:D0:79:A8:CB:59:C5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/1830d782-64ca-3a50-8614-c6840f83b8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7d:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:0e:71:21:c5:a0:1c:dd:70:72:de:4d:9e:a4:40:37:76:
         83:89:c2:90:0c:f3:b9:da:ce:b1:ca:7b:04:82:a5:d6:94:8f:
         54:a7:93:3f:9c:5f:3b:a6:ac:19:a5:af:75:7d:26:95:a4:c0:
         22:fe:b2:c4:68:39:39:be:0b:09:93:54:1c:5c:03:a5:a8:a5:
         81:a4:63:28:ed:1e:21:d5:d1:02:72:5f:60:a7:75:fa:af:3e:
         63:e4:32:6e:7e:11:aa:f4:f0:da:6c:82:48:0c:ac:cb:cb:70:
         95:c0:ed:08:3f:f1:96:a6:f3:1d:1f:af:12:02:d0:65:58:2f:
         86:08:db:15:df:49:26:53:2e:35:d7:44:3e:2a:43:58:ea:6c:
         aa:6b:bd:c1:c0:14:95:97:0f:5f:36:97:89:8b:45:91:ed:8b:
         27:e6:83:e4:cd:5d:c7:59:b7:ac:0e:f7:92:a9:47:12:e6:7e:
         c6:b5:f5:20:16:cf:f7:a6:e6:96:f2:f3:c2:24:d4:ab:cd:c9:
         0a:2f:7c:44:3e:ef:49:33:65:22:d0:00:e0:94:14:be:06:29:
         21:25:02:4d:5a:77:10:ad:8b:2f:79:1f:16:36:9f:fa:5a:54:
         4f:e5:8b:2c:91:1a:c8:19:3d:ef:1b:1f:92:d9:c6:ac:30:3d:
         7d:be:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:02 2026 by rpki-client