Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a4ca8f73-2f0e-3c0d-9673-3b63ab7a88e2.roa
File:                     a4ca8f73-2f0e-3c0d-9673-3b63ab7a88e2.roa (raw, json)
Hash identifier:          H2rJuwrXP0+hcp1oTNP9dzUVxedAqsT4s+yDV2ewJXA=
Subject key identifier:   54:2C:3A:6C:5F:95:5A:A1:6F:A8:9E:0F:8D:D8:6D:0A:4A:FD:EE:54
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D7CCFE1D1DE242ED42A7348D0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a4ca8f73-2f0e-3c0d-9673-3b63ab7a88e2.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2605:4300:3902::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e1:d1:de:24:2e:d4:2a:73:48:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=35c72a15-1292-4e17-9758-4919d1b4b60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:ee:2d:b7:bc:21:7e:33:de:e3:fc:eb:7c:
                    fc:66:92:22:4f:fa:e7:ed:a2:fb:67:e0:ff:2e:3a:
                    ae:54:92:d6:83:6b:03:1f:d3:82:46:20:5e:5f:5e:
                    98:e4:0e:28:5b:cc:1c:27:53:51:06:b6:26:c2:b4:
                    05:8f:b0:d2:89:77:19:93:3c:5a:08:9e:f8:f1:6b:
                    b9:e0:6b:5e:f6:c9:ad:25:8c:65:82:05:72:86:6b:
                    4f:fb:16:3d:62:90:1e:95:66:d0:eb:68:dd:88:a1:
                    d2:fe:f8:ca:7a:d7:b1:4a:f2:2f:a9:20:bd:a2:de:
                    06:1c:1e:ba:0d:7b:7f:dd:bc:dd:25:a1:7c:5a:cf:
                    c6:84:b6:51:cf:81:f7:e3:34:f8:85:63:34:19:3e:
                    a1:35:05:5f:56:0a:2a:bc:f6:24:18:44:72:2d:5f:
                    21:ba:b8:3b:b9:b2:c9:72:04:92:02:a8:ff:b5:0f:
                    89:32:3e:cb:a8:25:2f:ce:7b:9b:8f:1e:be:b1:6c:
                    b7:33:b3:4a:e0:e0:5f:4e:fe:ea:ce:43:79:98:30:
                    d9:20:04:c5:50:58:45:05:7f:ee:74:79:9c:73:cc:
                    48:a6:88:8f:a7:5d:71:1c:f3:04:dc:39:9d:87:4d:
                    1c:d8:13:98:a2:6f:f6:8a:8c:2c:d5:07:00:b3:c8:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2C:3A:6C:5F:95:5A:A1:6F:A8:9E:0F:8D:D8:6D:0A:4A:FD:EE:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a4ca8f73-2f0e-3c0d-9673-3b63ab7a88e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3902::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:96:f7:84:10:54:15:30:5e:93:97:ed:3e:87:ea:46:91:c8:
         9f:e9:8a:bc:b4:70:9b:06:2d:b0:2f:73:95:75:d2:30:ff:bd:
         10:98:20:81:e8:b3:54:68:03:38:12:b2:84:20:50:03:00:7b:
         e9:b4:82:70:2c:90:ae:45:fb:95:bb:fe:b3:cf:ed:fc:5f:ef:
         ea:27:08:fd:a0:0c:1b:34:1e:72:47:08:1e:c5:88:91:3d:0a:
         51:8a:e2:89:98:6a:39:ec:f4:19:85:bf:f5:3a:9e:f7:0a:fc:
         31:d4:cb:11:f0:d3:8b:f2:43:1d:c3:09:57:c7:b6:d0:c6:3c:
         95:8b:35:07:6c:c8:58:5e:9a:d7:1a:06:37:94:c3:5b:b6:b3:
         80:60:8a:41:3d:1a:8e:fb:c2:c5:02:b6:a3:e9:be:09:e4:68:
         96:26:b9:16:fb:3c:4b:39:ba:d7:43:ea:c9:d7:15:33:47:f2:
         0e:d6:4b:af:ab:99:31:ca:32:d4:e1:b8:f3:77:f2:4f:67:61:
         b0:ff:d6:86:71:d0:a9:ea:1d:3f:46:c4:d4:23:b6:c9:0b:97:
         0a:70:70:c9:d7:45:ea:1a:74:57:0b:db:75:02:e7:eb:b8:3d:
         f8:fd:3f:55:4d:f5:e7:06:90:17:e2:b1:fc:90:74:2f:48:8b:
         e8:9b:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:50 2026 by rpki-client