Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/45b67b9c-3141-3ab2-af88-4a716c51accf.roa
File:                     45b67b9c-3141-3ab2-af88-4a716c51accf.roa (raw, json)
Hash identifier:          BzbtGSgyVpSl8HLecSGq6e82DSAtXc1RAVdq0A5AMLA=
Subject key identifier:   8E:01:AB:33:A1:78:04:23:2B:4A:F1:D5:D4:B9:52:0C:CE:ED:85:10
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584CCA41F2CB9BA10801557BE480
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/45b67b9c-3141-3ab2-af88-4a716c51accf.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     393885
IP address blocks:        2604:4a00:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f2:cb:9b:a1:08:01:55:7b:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=f3d9198f-ffb2-4074-ab6a-d325a6cac09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:75:64:50:a4:70:90:60:87:ab:c9:66:6a:
                    96:5a:6a:c6:29:f0:b3:fe:cb:10:10:47:2f:35:da:
                    9b:c1:cf:07:cc:a3:32:e6:cb:c9:08:17:27:42:d1:
                    68:06:d9:6a:87:77:7b:04:4e:d6:53:77:9e:7e:e1:
                    fa:98:e9:38:e9:9d:aa:3b:77:56:25:a9:f1:ff:31:
                    12:39:9a:10:a3:db:cf:44:a3:22:d6:c9:0b:73:ae:
                    2e:b3:39:8d:34:ec:9b:12:8e:56:ec:fa:18:2f:fe:
                    8e:3b:30:1f:77:b0:a2:dd:2e:84:47:85:3b:71:0c:
                    bc:a1:37:4a:8b:a4:ff:f1:9b:64:e5:b9:6a:20:bf:
                    85:5c:91:18:8a:47:7e:de:4d:bd:cc:63:08:48:c6:
                    bd:2d:2a:53:8a:01:5a:08:89:f8:4f:c9:3e:5a:db:
                    f3:69:31:fe:a1:74:e0:45:07:3b:46:f6:84:21:46:
                    9e:10:ad:4d:c6:a5:34:e6:6c:6d:61:c1:0a:79:fd:
                    66:49:18:3d:1c:34:90:c6:f6:89:b7:27:17:b1:4b:
                    43:f5:d8:0f:73:9a:83:d0:b9:7a:41:5a:f0:0d:3c:
                    8a:bc:72:67:eb:4c:61:c4:3f:0a:61:a7:e5:62:82:
                    49:08:99:7d:a8:54:d1:35:53:eb:21:d2:47:ed:8c:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:01:AB:33:A1:78:04:23:2B:4A:F1:D5:D4:B9:52:0C:CE:ED:85:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/45b67b9c-3141-3ab2-af88-4a716c51accf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:47:32:04:55:8c:80:c6:82:5e:36:d4:0d:50:44:4c:2e:82:
         c0:9c:b6:23:0d:e3:28:5e:29:c3:44:4d:e3:2b:9b:c1:e4:6b:
         66:b2:f5:8f:b0:32:e9:fd:13:43:9c:e0:73:e1:98:35:dd:a8:
         a7:6c:cd:e3:09:0c:85:4b:ef:cf:21:12:a4:fa:13:63:c8:66:
         af:6b:fa:16:f7:71:ca:44:ea:32:ab:8e:07:6f:8f:6e:80:a7:
         a0:4c:1d:4f:bd:77:70:ac:4e:42:bd:e0:c9:a6:a3:2d:c0:33:
         e6:54:f6:af:9b:2a:e4:6f:11:c8:fe:c1:73:60:68:73:b4:0b:
         87:16:99:e0:35:34:98:09:8a:bc:7c:69:42:d1:4f:cd:9a:89:
         32:d8:77:cd:97:20:8e:4c:83:44:9c:cb:ce:20:f7:fc:68:d0:
         85:ae:40:a9:2b:47:63:89:04:0d:2c:50:2d:28:39:12:36:99:
         29:56:07:ea:1e:5b:20:92:d0:f5:b5:68:c7:8a:47:a9:e9:be:
         b0:2e:d6:7e:9f:97:73:09:7e:1c:27:41:4f:de:15:9b:ce:23:
         53:4a:63:65:eb:33:0a:34:08:13:54:1b:0b:06:57:4a:e5:77:
         bd:75:f7:a0:60:31:a3:95:ef:39:2f:54:e4:3e:ce:59:d7:76:
         d5:41:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:08:04 2026 by rpki-client