Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa
File:                     30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa (raw, json)
Hash identifier:          BF75GlNLd77S+QJzAVuT9ga6gCEH5Ee3Y+1SZUcy31M=
Subject key identifier:   39:3E:97:1F:04:4E:1E:48:2A:31:2E:19:D4:9B:73:D5:61:6E:BA:3E
Certificate issuer:       /CN=d60903a0-a127-4c7f-a403-6a3d8817015e
Certificate serial:       010D0C9F4328584CAE570FA5E44FA93C0E4CA9C0
Authority key identifier: 77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     40267
IP address blocks:        2620:121:6000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:0f:a5:e4:4f:a9:3c:0e:4c:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60903a0-a127-4c7f-a403-6a3d8817015e
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=cb91a107-225d-45a2-9814-ef6ecfaf2131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:ce:07:7f:ff:37:c9:84:a8:68:52:9a:ef:
                    f2:82:47:a1:66:19:a3:7e:50:31:35:9d:40:8b:bb:
                    bd:37:c1:7e:cf:95:1e:00:9b:f9:19:e2:ee:4c:68:
                    b9:af:56:6a:d5:85:54:48:4a:ed:2c:6b:f1:40:ef:
                    48:2d:f7:0b:f5:3c:47:47:cd:bd:89:39:62:27:d7:
                    f4:16:22:5a:fc:0a:1c:0e:22:84:bd:10:f8:d6:a9:
                    de:26:e1:8e:cd:0d:32:ab:ff:ab:86:b5:3a:89:10:
                    47:ab:70:13:94:0a:6a:1c:c0:c8:68:be:55:29:6d:
                    34:eb:bb:fd:20:a2:7c:15:f5:5c:48:13:90:dc:d0:
                    45:d3:3f:13:a9:a0:33:3b:94:de:83:3b:61:8f:35:
                    da:fd:39:f3:30:1c:63:50:f0:75:8c:05:97:bc:ce:
                    d2:f1:0b:2b:eb:f4:de:0e:86:4a:c0:cc:b1:a1:e8:
                    74:8c:fc:bb:79:c1:e3:3b:3c:f2:af:d3:76:74:2d:
                    29:54:aa:ca:ce:43:96:c8:df:b1:c8:c4:e5:b9:b5:
                    e7:94:9a:56:e0:47:cb:b9:68:00:9f:80:2f:fc:10:
                    d5:34:57:f4:68:8b:f9:74:f4:1a:68:0b:e7:41:52:
                    83:4c:28:3f:aa:79:78:91:18:8a:30:c4:a2:01:12:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3E:97:1F:04:4E:1E:48:2A:31:2E:19:D4:9B:73:D5:61:6E:BA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl

            X509v3 Authority Key Identifier:
                keyid:77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:4c:d9:47:7c:87:aa:52:31:ed:f4:be:94:8e:e6:b6:06:
         d0:67:6a:4b:24:1d:5a:6e:62:a3:a1:36:bb:d3:67:90:3e:7c:
         f6:f0:f2:4f:d9:1f:f2:4c:62:a9:65:80:a4:ef:80:cc:98:eb:
         fe:1d:45:8b:28:c9:67:98:a7:89:e8:12:90:28:e4:da:d0:a0:
         0d:5e:c7:22:53:6c:fb:db:a0:c7:3b:95:0e:bc:86:55:58:bc:
         07:eb:b3:3f:ac:51:42:27:bc:79:56:69:f4:bb:eb:94:43:da:
         b4:43:31:ba:65:57:af:0c:63:be:ff:1b:21:d1:dc:cc:36:4b:
         1e:7d:a0:bf:13:08:60:c5:18:17:b4:ed:98:15:c1:bb:f9:fe:
         27:49:2d:35:b6:c2:59:3f:95:46:0a:03:fc:5f:ef:d6:8b:47:
         b9:e1:77:d9:17:33:b1:c9:c3:a1:da:b8:da:e7:12:d0:17:43:
         76:b6:43:30:57:56:42:14:0d:37:03:36:8e:cf:2c:01:ad:86:
         43:76:e5:ca:59:0c:15:32:51:d8:ba:f1:0d:df:8c:34:43:66:
         c9:5f:0e:84:d0:b8:38:05:1a:3a:31:11:26:b0:7d:74:cc:b9:
         9a:3a:4e:94:ee:11:02:46:9a:9e:00:0e:8d:89:7a:ff:3a:32:
         82:74:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:13 2026 by rpki-client