Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa
File:                     c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa (raw, json)
Hash identifier:          3PCln84Zruh5OP9KY5qjrHM/m1YLw9ondK9uWt1ZfZU=
Subject key identifier:   B3:2F:A2:BE:87:8F:69:D1:0F:2D:7E:50:7E:9D:64:35:89:BF:1D:6F
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F4328584D7F9A7C0A45F1164D1548DE20
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     6939
IP address blocks:        2604:ebc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:7c:0a:45:f1:16:4d:15:48:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=ac93c217-a0df-4e0d-9aab-8dcee9e97711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:23:c9:d8:0b:15:35:6b:42:88:ea:7a:5c:
                    bd:30:62:98:2e:8a:72:84:ce:29:3d:aa:d8:cf:7a:
                    c3:8e:b2:87:cd:b7:69:61:68:eb:be:82:47:c8:78:
                    99:26:87:80:14:1c:a3:6f:23:d7:6f:73:2b:34:f6:
                    e4:b2:c4:b9:58:7a:0c:6c:d7:f8:69:7e:af:d1:7d:
                    97:39:cc:a6:ef:17:1d:21:1f:13:7e:63:d2:43:1e:
                    85:e9:8d:28:2e:f1:da:5b:63:4a:b3:25:cd:45:20:
                    15:2f:90:2f:08:12:13:ec:45:4a:a9:a8:fc:13:c8:
                    d7:a6:c5:71:a2:b4:f3:cf:2c:74:cd:d9:2c:22:01:
                    df:1c:f0:6a:14:a7:37:4b:c4:bc:d7:ec:0d:f0:20:
                    cf:76:05:e5:04:20:ba:49:1f:73:f3:78:a5:14:4c:
                    82:dc:1e:5e:60:42:1f:ae:41:22:35:66:83:82:47:
                    a6:72:25:e1:8b:43:d3:bc:80:95:37:3d:a5:93:a7:
                    7d:79:70:61:51:8c:ec:bb:06:d5:69:49:3a:57:52:
                    2f:75:5c:a8:08:90:e0:85:bb:47:1c:42:84:a5:b4:
                    62:e8:0b:90:3c:6e:ca:d9:f2:c2:f2:91:3a:cd:6e:
                    4f:9b:29:db:a7:86:4c:8c:85:d5:5e:a0:9d:ec:46:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2F:A2:BE:87:8F:69:D1:0F:2D:7E:50:7E:9D:64:35:89:BF:1D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ebc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:8a:0e:26:b5:61:30:cf:82:a1:1d:db:c3:12:09:70:92:
         cf:bf:b1:f7:68:33:6a:7a:4f:e5:dc:aa:59:da:5c:ae:5e:df:
         55:00:0f:ca:b5:70:c7:ed:b5:d0:ad:17:03:2c:3c:fd:25:71:
         53:9c:ef:ee:c2:fd:42:a1:2c:ae:68:fe:45:85:17:13:46:28:
         54:36:a3:89:9d:74:bb:98:22:df:f0:c2:c8:07:18:08:bc:2f:
         22:d7:b8:6a:e7:d6:58:30:6e:50:03:b6:6e:db:11:a5:38:e2:
         be:d7:8c:14:0c:5f:d8:6e:55:e9:31:b3:98:ab:84:46:6b:e8:
         9e:c5:33:e6:af:9d:c4:1a:e8:ad:20:4c:3f:7e:69:cb:25:56:
         1c:65:ab:4a:5c:e3:c3:0d:fd:c7:0c:8d:13:cd:9c:7f:af:85:
         0a:c6:82:1c:53:87:d8:e4:61:ad:90:b0:8a:9a:c6:4c:39:f3:
         ed:08:83:5e:d1:d5:8c:86:b2:f6:61:ea:06:86:d2:a3:1c:f8:
         8d:a1:2c:c8:78:3d:93:50:ec:30:da:9c:d8:d6:b1:15:b1:18:
         87:f9:fd:4a:5e:87:61:4e:66:b6:80:d8:90:96:ff:9c:68:24:
         49:86:60:99:78:c5:41:b3:5f:a6:f9:46:cb:2d:f1:4f:58:23:
         75:fb:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:56:21 2026 by rpki-client