Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
File:                     82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (raw, json)
Hash identifier:          ZxF2mZEr8yAK8/E3SSB0FdL1sw6sQooipC3Qia8bBQM=
Subject key identifier:   DB:C9:BB:3F:8B:A7:12:55:C1:2F:3C:96:6F:3F:8E:B5:61:2A:65:D9
Certificate issuer:       /CN=b824dfb2-be33-4946-af95-2296acd823af
Certificate serial:       010D0C9F4328584D6AAA8BD68CCBB22F48864500
Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     10737
IP address blocks:        2607:4940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:8b:d6:8c:cb:b2:2f:48:86:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=3e311434-92ad-4ac9-bd8f-344427cba6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:ff:54:64:15:37:5d:ba:2f:ec:5b:b9:9d:
                    1b:54:f7:5d:92:dc:cb:84:6d:6a:c2:bc:a4:68:85:
                    ac:70:37:66:ed:77:47:38:a1:c8:6b:18:9e:c6:fc:
                    6f:f5:e5:4f:35:d1:a5:5a:48:61:72:bc:ee:62:e9:
                    de:19:68:66:5c:b9:27:c1:70:3a:1a:1b:e7:71:31:
                    1c:e8:cf:ff:5d:44:bd:df:6c:ad:9d:cb:01:81:0a:
                    a4:e6:6d:94:b6:17:cd:14:80:c0:11:89:bd:67:9a:
                    25:a5:46:35:8c:27:41:4d:38:2c:25:e1:48:bd:e9:
                    72:c5:b4:42:9f:31:33:cb:29:14:12:e6:2b:35:02:
                    a9:14:bc:92:8a:dd:32:ae:b4:03:df:80:72:50:03:
                    af:49:43:66:69:14:ce:eb:22:77:cf:40:25:77:be:
                    9d:12:cf:77:e2:f4:90:0a:c5:f2:a0:bd:b7:c8:a1:
                    bb:73:b6:f0:b6:bc:4d:a2:58:0d:98:89:a4:27:e2:
                    3a:3d:fe:53:9c:1d:c3:06:19:d5:09:04:02:d1:00:
                    3a:8f:11:58:aa:cd:91:ce:a6:77:c3:e3:ec:bf:88:
                    ce:33:5a:a1:f1:15:d2:cc:bf:29:90:05:d1:75:84:
                    7b:13:89:db:96:53:53:0e:f3:61:31:07:07:1c:ed:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:BB:3F:8B:A7:12:55:C1:2F:3C:96:6F:3F:8E:B5:61:2A:65:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl

            X509v3 Authority Key Identifier:
                keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:72:20:52:73:bb:44:18:3b:a0:92:87:04:33:92:a7:26:90:
         ee:ea:25:40:51:85:d9:e7:a4:e6:40:25:a9:09:03:81:58:d1:
         87:46:67:37:2a:a7:9a:21:a9:cb:0d:7f:59:29:a2:ca:ca:6c:
         5b:5b:e1:a3:0f:2d:9c:be:50:d4:7a:60:81:ca:46:3e:92:2b:
         ce:25:f5:65:bc:61:52:b6:2d:1e:a9:55:f5:da:f3:8a:98:65:
         a7:01:d5:b3:47:10:0d:55:68:26:5c:80:3d:cc:f7:12:4e:52:
         3c:d7:21:3d:c4:f9:02:92:48:c9:7a:c3:97:56:70:c0:e7:4a:
         89:2a:8f:19:8c:16:3d:ff:72:96:d8:d3:21:31:9b:81:01:ba:
         39:14:be:60:0f:d2:10:97:c3:f6:17:58:03:79:8d:40:28:85:
         35:b6:83:63:c1:85:d4:72:a4:90:c6:f2:39:ae:5b:b1:9a:8f:
         72:e5:aa:57:f3:8e:d0:b9:f2:de:c6:b5:0e:13:7d:f5:4c:bc:
         57:08:18:2b:62:41:d3:8c:be:a6:65:13:a9:02:7b:33:c7:fa:
         4b:93:7a:fe:be:eb:6d:0b:6d:bb:11:07:b9:cd:93:2b:0e:5d:
         7b:4f:f4:dd:69:ec:29:a7:b9:a5:84:c7:af:b4:53:91:75:0e:
         bd:22:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:40 2026 by rpki-client