Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
File:                     705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa (raw, json)
Hash identifier:          F1ps8ii6ET2h3HxvjJxMIWYTtGhkziW2eJRs+42jF6Y=
Subject key identifier:   C3:DC:C1:23:B5:8D:DE:1A:E7:BE:52:84:61:09:3A:EF:63:A3:0E:A2
Certificate issuer:       /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial:       010D0C9F4328584D703FE3A2C6E1B116DCFB0F60
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     23467
IP address blocks:        2602:816:5000::/48 maxlen: 48
                          2602:816:5002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e3:a2:c6:e1:b1:16:dc:fb:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=b1277ea9-ca59-434e-b72b-79c4dc118cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:55:6d:96:41:28:4c:26:6b:b4:6a:6a:9e:
                    d1:c6:ab:35:36:c6:1e:72:7c:b9:9a:75:02:6b:4c:
                    52:79:9f:10:fa:1a:36:6a:1a:36:4a:77:c3:ac:b2:
                    b3:05:b8:c3:ee:f9:a2:ee:6c:45:08:3f:62:33:24:
                    6b:4f:7d:69:61:0a:05:b5:20:6c:20:5e:22:ab:98:
                    ce:a5:fe:42:89:5f:e3:e8:18:cc:de:81:20:d7:87:
                    5b:04:76:9f:2d:6e:74:ca:c0:ba:80:af:62:3e:7d:
                    10:22:80:df:07:f3:c0:d8:f7:90:fc:78:2b:8e:b6:
                    18:11:55:6c:61:fd:2e:5d:dd:43:85:b5:d2:01:a0:
                    d3:08:99:7c:6b:a6:89:44:e8:5b:ae:3a:6f:88:9b:
                    0f:83:aa:a2:be:3a:52:2c:f6:3a:c6:09:3a:60:9b:
                    63:3e:95:86:e4:a5:57:a8:03:01:c7:8b:28:4b:94:
                    1d:cc:66:97:7a:b5:36:5c:ba:44:5c:f6:54:70:3c:
                    29:dd:62:d2:95:19:f9:ff:4f:a3:7a:c8:fc:95:73:
                    1c:86:90:15:d7:db:36:02:0b:17:f6:77:5c:9d:0b:
                    bc:7d:db:70:b3:95:65:9e:bf:fd:1a:2a:ef:c8:a7:
                    f4:8a:6d:e0:dc:db:6e:f2:4a:f7:61:b3:d1:a2:19:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DC:C1:23:B5:8D:DE:1A:E7:BE:52:84:61:09:3A:EF:63:A3:0E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl

            X509v3 Authority Key Identifier:
                keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:5000::/48
                  2602:816:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:ca:e6:c2:7c:26:dc:a1:88:9b:f6:e9:c3:1b:fe:c6:bb:
         bd:d0:92:f5:64:11:5d:7b:ba:79:e6:b7:ae:d5:55:71:1f:b5:
         2b:7b:23:c8:ad:2b:22:0a:8b:62:f4:69:41:58:0c:57:86:a7:
         74:95:e6:41:3c:78:48:b6:58:8a:0c:91:32:b8:e0:c1:a9:d0:
         38:33:45:65:ad:95:4a:a4:56:70:7d:02:d9:7a:01:6e:9a:3a:
         d5:12:96:35:68:89:96:d9:83:59:37:89:0d:bc:f4:1a:31:3f:
         3f:07:3a:ed:fe:d6:2e:9d:07:d4:7c:85:40:3d:bd:5c:2f:5c:
         3d:e0:ab:4d:0e:c6:7f:9d:b4:39:c8:df:2e:2e:9a:9f:02:59:
         5e:63:5a:4f:b7:07:11:0d:d2:2a:bb:5b:1d:85:15:d1:84:2d:
         d3:02:09:48:3d:0d:09:6e:12:37:b5:5d:d5:fc:3f:b7:fe:1c:
         51:4b:5d:3c:ea:47:85:08:e4:53:73:9b:8b:45:f3:d9:49:8a:
         42:f6:79:1d:96:f9:75:39:62:d1:2f:91:e3:10:85:5b:9e:26:
         22:cc:f1:fc:48:15:56:64:a8:16:50:be:bb:52:dc:f2:29:c6:
         94:38:1c:fd:3b:f3:ef:51:b0:c7:39:c4:f3:a9:e1:1b:8b:02:
         87:1f:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:13 2026 by rpki-client