Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
File:                     803c99b8-f23c-355a-bcca-59b3fa52407e.roa (raw, json)
Hash identifier:          DtAhSJ1LQuWhGN55aUiQM/xsv02dPrynj6YEp/1fokk=
Subject key identifier:   CF:6A:94:4F:C3:04:D8:DA:8C:A8:A5:6F:DE:68:DB:11:45:89:1E:BD
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584D4D5A4B19FE24E587C3CD5F80
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     21928
IP address blocks:        2607:fb90::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:4b:19:fe:24:e5:87:c3:cd:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=b53b75f7-9ff5-49e2-a42f-081baa7bcea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:a3:7d:1a:0e:2a:cd:5d:54:67:96:8d:53:
                    7b:3c:63:44:73:88:bc:71:cf:22:b9:18:78:17:22:
                    88:0f:ff:48:38:d2:4e:b2:36:dc:2b:6c:10:e1:00:
                    da:32:25:71:eb:ae:f4:c3:4c:70:3e:45:05:8c:72:
                    99:ef:a9:b1:7a:f5:ae:c2:66:1e:e6:9e:25:31:1e:
                    54:aa:68:3f:23:a1:e2:2a:44:38:ba:92:a5:c2:44:
                    6b:32:fa:cc:8a:90:0b:1b:ec:6a:05:df:9f:de:d9:
                    d7:7a:e4:e9:46:3e:43:ab:46:12:02:93:32:82:ba:
                    f8:39:74:70:ab:d2:50:d6:fc:db:bb:98:0a:af:10:
                    d4:c8:9a:f3:8b:2e:a4:17:95:03:5a:ab:52:e3:c1:
                    79:07:d5:33:64:57:1b:fd:91:ca:a7:3d:6e:6b:f9:
                    c0:02:28:33:18:e8:a3:c1:00:8b:95:8d:32:6c:d0:
                    50:72:e8:7c:57:4b:0c:c8:ba:89:4b:32:a3:6a:9a:
                    bf:97:7a:b2:23:d5:d2:1e:09:6e:8f:4c:48:6e:a1:
                    34:66:94:76:52:9c:1a:34:63:52:79:ec:bb:d8:6a:
                    b2:4c:23:5c:d5:73:b0:3b:7f:4a:f1:0b:c4:53:f1:
                    df:de:9b:9a:c1:d6:1c:fa:fc:20:fe:77:b7:3a:bf:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:94:4F:C3:04:D8:DA:8C:A8:A5:6F:DE:68:DB:11:45:89:1E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/803c99b8-f23c-355a-bcca-59b3fa52407e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb90::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:53:99:f6:18:f9:17:a0:6f:96:74:95:d5:08:29:b7:a5:18:
         29:b8:57:43:83:66:a9:5b:34:61:19:79:e3:91:c0:e2:a0:32:
         28:ad:d8:63:2e:31:24:82:73:b7:11:a7:ef:7a:ba:22:01:a0:
         09:8d:a7:f7:ee:ba:89:06:e0:c1:8c:3b:c5:de:b3:f1:03:41:
         a3:67:d3:e9:e9:54:7e:90:14:35:57:a7:df:84:86:03:3a:75:
         df:40:19:7c:6f:be:19:23:2c:1c:fa:16:f7:ae:69:8d:b2:79:
         28:bb:8f:c1:de:a9:53:1b:26:51:de:8e:d5:c1:0c:51:bc:ff:
         49:81:0c:de:4a:95:e1:75:ce:75:56:4c:5b:c7:ae:55:03:05:
         01:01:ac:33:8c:fa:ce:82:f5:91:8f:e7:27:18:85:57:f0:6a:
         ad:38:8f:7c:18:25:de:aa:08:f3:83:41:79:04:a3:43:ab:ae:
         08:5d:97:0a:61:e4:fe:ff:b3:af:0d:37:1d:d4:eb:7f:ab:14:
         1b:4a:3a:2c:00:0e:f4:da:ad:98:7c:4a:20:f0:1e:77:8e:82:
         26:a5:26:01:68:f1:ec:8b:89:96:c4:4f:8c:b1:75:6c:9e:38:
         a7:39:a3:66:81:14:33:9a:d1:26:d1:bb:b0:35:04:1a:d5:d9:
         36:fa:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:42 2026 by rpki-client