Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
File:                     46e2c153-590d-39ff-8e1c-3e16eabe188f.roa (raw, json)
Hash identifier:          zxw05Nqu0rR1QW/Lxy4uPXwkzd1D4BKPtJf1GzYJxQA=
Subject key identifier:   AE:7B:8E:CF:BD:34:05:87:8C:B2:E8:19:DA:A1:42:92:FA:44:4A:1E
Certificate issuer:       /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial:       010D0C9F4328584D6515247E2EA22FFB8523E400
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     394177
IP address blocks:        2607:29c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:24:7e:2e:a2:2f:fb:85:23:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=3c6bc9b6-ab81-4410-b368-4ff2848707c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:3d:e2:be:6b:9e:05:bb:7d:76:90:c2:40:
                    a3:cd:00:f3:3b:9f:ea:59:67:ac:c7:4a:33:d0:16:
                    d8:6d:ee:bd:bc:38:92:08:28:f5:6a:c6:cb:99:48:
                    11:f9:a7:20:b1:63:6c:7a:ff:7b:45:32:cb:5d:b2:
                    77:cd:17:ad:e1:6e:6b:e0:66:fe:95:b2:2b:83:fe:
                    7f:ab:f8:b6:8c:42:6f:72:01:6c:f5:92:5c:56:63:
                    7a:cd:ee:a7:f7:b0:98:37:5c:c5:82:ab:8a:df:37:
                    13:9a:dc:25:7b:2c:70:3b:a6:6f:5c:b4:ae:42:2b:
                    07:73:df:3b:27:e5:92:41:e9:2b:97:66:bf:0c:b6:
                    54:57:65:a8:c2:bb:17:29:af:cc:eb:d2:95:f2:09:
                    36:21:2d:0a:d9:11:52:a0:d2:77:0a:3c:2c:f9:77:
                    8d:50:09:ef:70:8e:51:23:ee:be:1f:19:67:60:c5:
                    21:f8:82:61:70:06:cf:cd:3a:91:43:84:40:43:a1:
                    bb:6c:51:7c:a9:78:df:c5:40:ae:13:0e:b4:e5:aa:
                    46:23:c3:2f:13:63:33:98:75:68:5a:48:f1:e4:a8:
                    cc:07:a1:d5:2d:36:b9:d8:cf:fe:a4:90:a2:31:70:
                    e5:92:72:18:a1:c7:f2:fa:11:f0:86:61:e9:f9:b1:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:8E:CF:BD:34:05:87:8C:B2:E8:19:DA:A1:42:92:FA:44:4A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl

            X509v3 Authority Key Identifier:
                keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:29c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:92:93:b7:88:fa:62:f5:50:c9:07:33:73:a6:d0:31:c5:
         b2:49:e8:fd:40:32:75:cf:06:bd:93:31:53:71:d3:1c:83:3f:
         e4:a3:c4:56:78:48:ff:d6:f5:aa:23:91:f2:28:88:14:d7:58:
         3b:45:56:fb:04:c8:f2:25:40:ef:18:1b:a7:58:4d:61:5e:a9:
         c7:ee:49:9e:f7:7d:81:87:6c:a4:83:28:0d:d1:6c:4c:d9:25:
         73:0e:b1:b7:5f:7b:5b:69:98:c7:24:1a:b2:c5:20:02:8e:e8:
         2a:fb:81:2f:bf:93:0d:b1:a4:59:18:74:51:5c:2d:89:ae:e1:
         0d:5b:25:ba:4d:95:c8:94:17:95:68:77:31:0d:e1:f8:9c:ae:
         ef:9b:e3:1b:85:54:1f:9a:27:c8:8a:a5:c4:ec:b5:89:df:80:
         25:29:25:45:60:36:bd:3d:ce:57:6d:e2:77:26:62:63:a3:4f:
         db:99:d7:67:54:a9:b9:2d:7b:fc:c2:fd:5a:d9:d1:38:51:c7:
         a8:ba:1e:58:d0:20:a9:5b:0d:c0:3b:5c:d9:dc:f1:3e:3b:3d:
         08:a0:4d:1a:fa:77:be:39:91:44:9b:46:13:79:37:47:44:4a:
         35:28:33:94:58:d6:a1:b5:82:23:0d:09:42:ba:be:9c:43:10:
         a6:27:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:38 2026 by rpki-client