Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa
File:                     698433db-e2ac-3ad0-8d1a-70743069e6d5.roa (raw, json)
Hash identifier:          zTgurVh2wSnU/dsslMCWlVGSapukeBPMOuCRVBLKWic=
Subject key identifier:   FF:22:D3:A2:15:C5:DC:71:C2:64:18:95:14:5E:A7:8F:A4:17:BC:D5
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584D59EA74ABA2653198FE832F20
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     399077
IP address blocks:        2606:4dc0:2200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:74:ab:a2:65:31:98:fe:83:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=28b8fd55-dc8e-4139-b2b1-4de7d8261555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:df:9a:44:1e:9b:7f:68:2b:f1:bd:9c:db:
                    b5:50:88:60:21:8b:c9:3c:35:0c:17:93:c9:c0:fd:
                    89:8f:d7:b3:23:5c:24:d0:fa:61:42:47:c9:a3:9c:
                    cc:53:ca:6e:1f:c9:18:44:31:ce:01:69:c7:fe:b8:
                    1c:47:57:5b:fd:2b:38:48:59:49:9d:6e:df:a7:3f:
                    56:24:44:cc:5c:35:9f:2e:20:35:fb:0f:74:9a:35:
                    74:3a:09:85:a5:97:3c:f2:14:e3:a3:1a:82:68:c3:
                    eb:22:23:81:8d:d8:e0:aa:0e:b9:9b:60:5e:76:db:
                    74:88:7a:e6:bd:43:75:c1:e8:13:01:9d:46:6b:aa:
                    bf:cd:ea:19:a5:f0:30:39:aa:6f:71:15:24:11:b2:
                    77:d1:21:df:5b:2d:d9:8d:06:c3:09:d2:c8:41:63:
                    55:ed:40:1e:10:77:30:2e:fa:6f:bd:18:6e:8d:a5:
                    cc:b0:1b:21:23:ed:63:28:4b:33:b9:0b:47:5c:d0:
                    66:27:ff:aa:82:90:87:f4:ea:cf:57:1a:20:1c:3b:
                    9b:84:a4:56:fe:88:26:84:d7:05:8a:82:3e:3f:6a:
                    27:e6:d8:a9:3f:7c:5c:e3:c4:39:1c:db:c9:75:7b:
                    8e:98:5a:62:eb:cf:18:b2:71:c3:fd:ca:c1:ca:d3:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:22:D3:A2:15:C5:DC:71:C2:64:18:95:14:5E:A7:8F:A4:17:BC:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:2200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:60:4f:e5:1e:ae:81:0f:ab:25:d7:fb:69:40:97:c3:35:ef:
         ce:e1:bd:62:b2:7f:6e:1e:99:45:8f:fd:43:28:08:4a:93:e0:
         cc:5c:5d:01:1f:de:66:cf:b7:12:1f:b6:77:dd:08:28:a9:2f:
         00:71:37:f6:3d:d3:ce:62:bb:2c:2e:ad:49:47:85:f2:47:21:
         fb:89:f7:7b:82:82:37:dc:9c:a4:3c:be:60:a5:3c:98:93:42:
         43:c9:a6:7f:bd:3e:00:91:14:8e:47:6c:a5:ee:e6:1c:d5:30:
         f4:01:ac:4a:0e:cf:5e:2f:2d:d7:bf:4d:27:b0:e5:04:3b:92:
         e3:60:5f:63:6f:69:64:79:6e:b1:47:2a:2d:b7:b8:a9:fc:6d:
         37:61:23:7a:b8:9e:6e:77:68:76:ea:76:54:0e:80:57:45:a2:
         b8:31:cb:ca:f7:aa:35:5b:4d:27:f3:f8:3c:4d:1d:66:43:93:
         e4:2c:fa:1f:e6:aa:2c:74:1f:85:7c:7a:5a:90:89:4d:60:61:
         12:42:1b:a9:af:7b:d4:53:cb:93:80:f2:39:81:89:45:af:21:
         d8:01:05:e6:d5:30:45:0a:80:f6:49:bd:fe:55:ee:b5:75:3f:
         e9:91:7b:bf:54:dd:a6:8f:b5:d6:a6:1b:b3:08:71:c2:ad:ce:
         c4:a5:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:05 2026 by rpki-client