Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
File:                     2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa (raw, json)
Hash identifier:          62hGm05EZeAAsARDiGp8NHGRXuMm70vdU4PcjxYORKI=
Subject key identifier:   B2:0F:4C:D1:AC:DC:55:4F:03:E7:DF:5D:DA:9D:64:4C:42:D2:EF:A8
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584D59EA723E6D5E7E921EAAAB00
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14773
IP address blocks:        2620:1d5:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:72:3e:6d:5e:7e:92:1e:aa:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=1a0bb8e6-21c8-4637-addf-e1fba44dfe6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:43:4e:2d:c0:03:11:c1:d8:bd:58:a4:d7:
                    71:01:13:dd:97:be:fb:67:d3:a0:d2:90:ab:55:1b:
                    f7:c8:6a:1d:90:da:b1:a6:f3:00:8f:28:2c:c2:a6:
                    fd:51:9b:e2:b6:44:47:84:8c:b8:fb:9c:95:69:80:
                    a1:d5:f8:00:59:62:bb:ad:d1:7b:ef:65:e3:dc:e9:
                    23:75:ce:19:20:1c:37:ce:a7:a5:6f:91:45:9c:15:
                    98:ea:fb:07:76:45:15:84:4c:b1:7c:7d:d5:85:ff:
                    21:fc:fc:6c:a5:12:b3:bf:ad:ae:f8:5b:71:e1:d6:
                    eb:f9:37:9b:5b:52:24:e8:cb:45:f0:9f:ba:c3:bf:
                    86:a3:44:be:ac:b7:e8:d4:e4:c0:9f:bb:2f:03:65:
                    06:94:d1:5c:37:48:07:3d:a6:9b:84:33:6d:0f:fa:
                    0a:65:e3:51:84:2c:93:04:67:f6:34:10:82:52:21:
                    05:c3:08:60:02:af:98:f3:cb:24:dc:f4:0e:22:46:
                    92:7c:77:09:10:7c:d7:53:c8:8c:d9:ce:7e:e3:b7:
                    1d:b3:e4:11:67:16:4f:d1:49:48:f5:95:9a:19:89:
                    22:1a:01:54:09:ef:17:e7:11:e0:a1:c8:38:26:f3:
                    bd:51:7e:81:c8:f3:a4:8a:02:6b:97:7a:49:84:a2:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0F:4C:D1:AC:DC:55:4F:03:E7:DF:5D:DA:9D:64:4C:42:D2:EF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:43:67:90:89:5c:fa:29:50:d6:26:93:e0:07:11:56:3f:1b:
         bd:63:0b:8b:a4:b2:29:ef:3c:48:11:70:98:62:98:ef:15:35:
         98:1f:ac:30:69:4f:e7:d8:49:03:9a:c1:04:21:52:e7:e5:2e:
         40:54:9c:ad:3b:58:e2:83:09:ca:63:09:06:5a:24:42:f2:b9:
         9d:0f:8b:77:b1:6a:aa:d5:39:5b:ea:71:11:28:e8:84:fc:d6:
         9e:e6:9c:a8:85:0b:da:1f:94:1a:ab:e9:06:7f:70:1a:de:6f:
         a1:82:74:9f:50:24:85:4a:89:b7:11:1e:e2:2f:d5:fb:8d:a7:
         d6:bb:06:17:29:e1:19:72:41:4f:5c:c2:86:ec:f1:f5:22:13:
         0d:dc:24:52:78:ed:56:51:d1:0e:26:29:73:91:b4:16:1b:c4:
         b0:9e:cb:33:43:d0:fa:04:4f:e5:3c:66:22:ec:bf:13:47:4e:
         34:63:ab:24:c2:25:2a:5c:00:b3:cd:1d:ec:fc:32:c2:b0:ea:
         3b:a9:19:ec:13:d1:12:7a:5c:f4:7f:63:45:ae:f7:bd:fc:c2:
         67:9a:cb:5f:86:d2:6d:93:d4:65:bd:8c:88:ac:9c:48:d2:b0:
         bb:76:22:d8:20:63:4f:56:9e:7d:6e:4b:a5:cb:bd:f9:b2:6f:
         98:32:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:07:09 2026 by rpki-client