Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa
File:                     32f15bc9-1c3d-3499-9769-540df2da6c5e.roa (raw, json)
Hash identifier:          jNTea7Bfz/Rd0WLYXvaOtu7MR3HmEY582uD/XYdMZb8=
Subject key identifier:   46:75:B3:FC:40:A3:AA:7D:0B:35:49:1C:92:32:8B:DA:6F:D8:F2:2A
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584D624A555399CFFF09522ECFC0
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     5400
IP address blocks:        2606:f100:d400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:55:53:99:cf:ff:09:52:2e:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=8ab57ba4-24ee-4d6d-9506-a8b6086a84cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:d1:07:f2:e6:89:d2:3c:25:70:4f:a9:76:
                    4c:73:c6:77:74:5e:df:98:b5:f8:af:b2:07:9d:d7:
                    fa:8f:b0:c9:4f:f4:e9:39:21:2d:2a:8a:2b:58:59:
                    f5:3b:a0:2d:85:a9:3f:e1:bf:98:4a:63:0d:30:a6:
                    44:ca:f6:11:36:52:77:8e:1b:a9:b7:e8:db:3e:f4:
                    e1:80:b6:34:77:f4:f9:59:20:f2:f7:99:cc:45:c7:
                    7b:58:f6:f3:d8:3b:40:6b:04:b6:ed:a0:98:e0:a3:
                    c4:8c:ca:5f:5e:41:78:7b:41:a3:6f:77:56:b5:64:
                    8c:70:64:24:87:2f:9d:2b:13:03:08:9f:21:83:ce:
                    9f:7a:f4:7f:92:03:e8:e7:75:4f:f9:9f:19:4d:18:
                    20:72:9c:a9:e3:b6:37:66:23:9b:16:5d:09:c7:81:
                    2f:74:51:19:d3:4d:23:4e:de:2e:b0:3e:2d:ec:5e:
                    50:d4:df:fd:13:48:9e:10:bd:35:d7:f7:35:91:3a:
                    30:d3:73:bb:6c:40:35:47:55:35:9b:05:fa:96:00:
                    6c:dd:b4:ee:3f:eb:10:dc:0d:97:89:ec:88:11:6c:
                    27:30:73:d2:01:07:d4:b7:16:ea:f5:b9:85:52:76:
                    b4:6a:9d:1d:fd:2c:0d:24:2d:85:f3:d5:fe:d0:2b:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:B3:FC:40:A3:AA:7D:0B:35:49:1C:92:32:8B:DA:6F:D8:F2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:d400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:99:76:98:7a:16:25:98:13:6f:71:2a:c8:0d:b2:33:08:
         8c:8f:bb:d6:a7:5b:a3:db:e4:9c:30:4b:6c:01:ce:b4:51:aa:
         12:64:32:65:00:55:4d:cf:9d:0e:7c:7b:3c:a0:3d:c9:e8:ca:
         61:4d:cf:6f:2c:09:dd:c6:92:d5:3a:2d:57:2a:66:bf:56:9c:
         2d:70:d4:8f:ad:84:db:52:47:f4:ea:8a:76:ca:18:a1:cf:c5:
         48:e8:d2:0a:62:14:37:b6:4a:86:2c:4f:96:4e:b9:2b:94:94:
         f7:d9:e4:97:c2:9d:46:02:c3:44:05:64:cb:a6:97:59:c0:ae:
         6a:0e:f7:fa:d8:8b:34:f9:8f:1e:5f:90:85:80:1a:2d:a8:0e:
         38:f5:47:98:7b:ce:f8:4b:1e:90:90:c1:c0:81:49:41:22:b3:
         3f:88:a2:e4:73:62:0c:0c:05:48:cd:16:f1:af:90:fa:79:f7:
         ab:30:35:4c:75:ad:98:e8:8c:a9:80:5c:a3:45:18:2e:bb:c1:
         f2:e1:19:7f:11:ef:7e:db:fb:bc:bc:e2:5b:ac:4b:18:c4:47:
         00:88:9d:00:cb:91:be:55:b9:0f:0f:e4:10:53:59:20:b4:74:
         67:27:30:b0:0f:7e:41:75:b5:40:8b:ea:f1:70:5a:cc:26:7a:
         46:58:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:40 2026 by rpki-client