Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa
File:                     899bf378-ed1a-35b3-890b-9f42089f212d.roa (raw, json)
Hash identifier:          lGrth9zr+FXtQaS2lWrrWav/jJwzsj3KTNBr5HCmDBo=
Subject key identifier:   2D:C3:32:F7:E1:1D:81:5E:09:8E:D0:F2:A0:4B:07:C6:95:D3:DB:F2
Certificate issuer:       /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial:       010D0C9F4328584D571FACB88EA65F83432FD060
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     395651
IP address blocks:        2620:13:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ac:b8:8e:a6:5f:83:43:2f:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=64f64789-58f1-4577-a6ae-dd765bfbbb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:6b:c4:f9:60:48:98:ba:14:77:e3:f6:0c:
                    8b:fb:c6:9c:1e:ac:0a:14:73:67:21:90:5c:c2:53:
                    60:d6:30:76:27:98:1d:d6:f5:c9:77:b2:46:26:d4:
                    fa:b8:41:26:01:4f:a2:6e:41:9e:98:ac:1b:e3:ec:
                    2a:db:cf:86:bc:dc:3e:08:2d:7c:41:46:a3:2b:4e:
                    dc:d0:d8:a2:92:f0:6a:da:cb:fc:45:d3:c7:e3:de:
                    fe:c8:d5:c3:16:85:c1:9c:73:2c:e0:1a:ad:36:1a:
                    15:0c:47:78:07:26:bb:56:7c:96:ac:b3:a9:71:09:
                    f0:3e:7b:cc:eb:6f:45:69:f3:a3:c6:29:59:10:2f:
                    cb:26:8a:10:b2:ef:fb:34:d4:87:15:34:65:f5:7a:
                    cf:2b:52:8d:a8:48:7b:86:56:8b:3f:d9:e4:29:83:
                    f4:c2:92:55:63:e4:6a:13:c0:64:8e:ea:b3:86:ee:
                    8d:50:88:9d:28:2f:2e:25:6d:dc:4c:dd:6a:83:84:
                    d0:91:fc:83:4e:8f:51:f6:dc:19:56:60:0b:81:25:
                    f0:92:bf:46:4b:ec:b3:26:4e:01:6c:67:88:d5:0d:
                    2f:96:c5:4d:5e:e4:2a:6f:65:08:d0:c1:f2:c4:aa:
                    29:3a:f1:48:62:56:d0:4a:da:f2:9c:b3:f7:df:0f:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:32:F7:E1:1D:81:5E:09:8E:D0:F2:A0:4B:07:C6:95:D3:DB:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl

            X509v3 Authority Key Identifier:
                keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:13:19:87:6c:19:f8:1d:93:1f:06:bc:d8:b7:ec:16:fa:c0:
         14:d5:75:e5:1a:54:ef:a5:be:b7:c1:ba:fe:de:07:e2:5f:4c:
         ee:66:15:89:b8:b1:1e:4e:dd:c0:7e:51:11:11:3e:29:92:eb:
         7b:51:44:37:8d:8a:93:81:89:4c:75:df:75:66:9f:7b:0b:c4:
         f5:99:86:3e:37:a2:58:a1:20:20:6e:32:5f:5b:8b:b7:c7:a1:
         eb:ff:27:70:02:13:36:c3:5b:f2:48:85:8a:91:d4:e6:a3:28:
         c1:73:34:46:57:49:b7:b6:34:15:c9:9d:88:c6:ac:2c:ae:c0:
         e0:fc:fd:73:6b:ab:b5:d8:87:98:f9:d8:fc:7a:ce:ef:3a:9f:
         cb:18:5f:a0:40:7f:9f:94:f1:5c:ff:41:03:4a:fb:56:1b:a1:
         8f:73:33:ad:45:36:1b:02:4c:e0:74:83:2d:32:61:24:25:82:
         f2:b2:c2:1a:df:33:cd:0c:18:5d:56:38:fe:78:ab:a4:7a:a5:
         76:4f:4d:81:9c:9f:26:af:84:98:02:8a:ff:36:04:e6:b0:44:
         b8:37:4f:8d:86:4e:3f:da:18:f4:1e:cf:7b:e3:16:c3:91:40:
         4d:d6:33:06:39:40:50:ef:30:7f:c6:81:b6:b2:ce:0d:d9:74:
         7b:ae:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:53:44 2026 by rpki-client