Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d70fe469-47c8-33c2-ada8-08649ce9f7a2.roa
File:                     d70fe469-47c8-33c2-ada8-08649ce9f7a2.roa (raw, json)
Hash identifier:          VBfeERgNMbQvzkoFlq9TB962x56CpjM6ItvSOPNhRgE=
Subject key identifier:   F8:F4:71:F8:83:CD:EF:F6:E6:45:FF:F0:35:80:14:E0:0A:AB:C6:98
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D7CCFD26D5EA30788C1663180
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d70fe469-47c8-33c2-ada8-08649ce9f7a2.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2605:4300:3904::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d2:6d:5e:a3:07:88:c1:66:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=afd663a8-fa33-4efa-8b9d-71a34e3f9076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:f9:d4:52:84:b6:05:db:2d:c5:f4:cf:ac:
                    de:53:3d:4e:25:7d:c7:7c:84:5a:06:8d:3d:05:b6:
                    7f:2e:dd:a1:91:16:c4:20:ad:70:92:b3:d6:33:f2:
                    ba:93:98:e0:60:62:a9:51:2e:98:24:64:c0:8e:a0:
                    8f:95:4d:92:97:04:c5:54:fc:aa:60:7e:40:e9:07:
                    d9:78:4e:40:bc:39:1b:61:bc:f8:9d:c2:3f:d1:b4:
                    28:5b:f0:47:76:81:27:44:39:07:d2:3b:dd:c7:fc:
                    74:73:c7:7d:b6:3f:87:b5:db:64:06:55:2c:21:ab:
                    8a:ff:96:8b:f3:fb:f4:bd:ff:ad:72:12:02:03:dd:
                    84:1c:56:5a:cd:38:54:ac:79:bf:23:ea:49:79:ae:
                    c8:9d:ca:54:13:35:d1:f1:ef:e6:6d:08:06:3d:67:
                    be:5c:fb:ef:06:d6:e4:02:32:b5:06:db:4c:39:e5:
                    61:4a:1e:53:4d:40:05:1b:24:18:4c:ee:50:28:dc:
                    c5:13:65:62:97:ce:bb:64:60:62:c3:7f:d0:41:25:
                    c0:46:53:6f:2b:20:ec:52:d3:0a:d1:78:e3:01:19:
                    41:6f:5a:c6:50:0b:45:e0:89:bf:c6:6b:98:09:b4:
                    48:2b:24:9d:34:36:99:93:31:e8:72:c1:01:28:32:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:71:F8:83:CD:EF:F6:E6:45:FF:F0:35:80:14:E0:0A:AB:C6:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d70fe469-47c8-33c2-ada8-08649ce9f7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3904::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:61:18:8c:d8:13:7c:b6:00:b1:4f:31:f2:c2:a0:fc:22:e0:
         d0:c5:bf:30:15:c4:99:bf:9e:9f:6a:e1:0b:46:b2:76:93:c3:
         ee:f7:af:74:c1:ec:2a:cc:1c:23:eb:f1:cf:79:b9:8a:4b:18:
         b5:37:3e:8c:88:14:28:26:5a:cc:52:23:9c:30:49:c9:00:b3:
         15:d5:35:ef:57:c4:b8:9a:68:6b:e9:db:28:b8:c4:9c:71:1d:
         c0:f7:20:74:af:f1:6c:79:e7:fc:6d:4f:3f:3f:f9:00:74:eb:
         b2:76:e6:73:5d:1d:07:71:0a:d1:9f:9d:06:93:20:4d:d9:0f:
         9e:45:50:04:1f:39:90:83:1f:87:8a:51:b3:de:a1:1e:1e:84:
         64:69:98:b7:95:80:7b:94:2c:a7:09:03:6a:da:1d:12:92:0f:
         5b:d2:46:13:29:d2:7c:95:34:1a:b8:7f:20:ad:3c:e3:3b:31:
         2f:83:8b:b4:bd:d1:39:9c:4d:5e:8d:fe:3e:de:35:17:96:e5:
         72:44:41:4d:39:de:a3:1c:f5:e6:42:d2:ce:41:00:d2:39:6d:
         3f:8b:d6:f5:f2:e5:38:a4:be:d3:10:b9:c0:46:cd:be:20:9a:
         2e:8e:45:72:0e:9a:8d:68:c4:74:b8:78:a0:e5:14:eb:24:5b:
         74:a1:96:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:27 2026 by rpki-client