Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa
File:                     40449c0b-7967-3ad1-800d-976492202fef.roa (raw, json)
Hash identifier:          wa4JBwsCd5JMr3I9woCBDJc2St0PR4/IOf/mqypg3S0=
Subject key identifier:   BC:B2:A6:71:85:18:68:9B:4F:FD:BA:CF:01:7D:ED:31:95:35:D7:E7
Certificate issuer:       /CN=d714f85c-7c5b-49fe-8910-f5b808ebb556
Certificate serial:       010D0C9F4328584D67DFC9A5FD321B7C7CFB2100
Authority key identifier: 27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     18646
IP address blocks:        2620:be:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c9:a5:fd:32:1b:7c:7c:fb:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d714f85c-7c5b-49fe-8910-f5b808ebb556
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=ac3b9e7d-cdd8-49cf-8334-af2335ddf98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:32:f6:0f:7c:cc:e3:36:23:0a:24:71:7f:
                    ce:e6:f9:22:b1:a4:24:39:d1:a2:d7:04:0d:a3:e3:
                    ab:4b:3a:48:03:52:78:56:ad:62:af:ae:e6:f3:07:
                    9d:80:dc:7f:9b:ef:82:07:fd:ea:c4:62:19:a0:8c:
                    de:a4:39:5e:de:cc:56:25:d2:76:47:56:9b:1e:77:
                    24:2a:81:ad:6b:1f:e0:58:69:79:4e:ca:72:b0:45:
                    c9:b1:a6:7c:79:bd:75:80:09:0e:1b:81:18:d9:b8:
                    f2:aa:f4:d9:eb:d0:05:59:57:4a:85:1c:7c:30:a6:
                    a8:9a:13:7c:49:6e:43:fa:3e:ee:5f:13:87:86:3d:
                    b1:f9:7a:cd:e0:ad:4e:e0:19:7f:24:94:c5:68:68:
                    a9:1d:7d:21:c4:5a:45:80:22:6e:da:0b:86:04:2c:
                    a4:0b:d8:35:45:95:dd:49:32:02:85:14:f9:84:7a:
                    15:c3:ce:b6:ad:fa:32:a6:16:45:4a:3e:7d:5c:b0:
                    f6:ee:85:b2:74:22:df:2a:69:bc:36:91:81:0a:55:
                    68:4f:1a:4e:d5:a4:ed:ee:55:9b:ad:48:23:f1:ba:
                    c1:6c:74:17:13:b1:c5:98:d7:53:b4:eb:26:1c:e9:
                    9e:30:d8:84:32:b0:cc:56:0c:30:a4:ea:ee:75:1d:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B2:A6:71:85:18:68:9B:4F:FD:BA:CF:01:7D:ED:31:95:35:D7:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl

            X509v3 Authority Key Identifier:
                keyid:27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:be:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:6c:33:c9:7f:b7:a0:f1:ab:44:21:41:c0:1f:c9:bc:89:
         e0:08:00:1d:a7:ab:df:53:ec:00:8a:a7:3e:5c:54:74:a0:f0:
         f0:92:40:c0:03:c6:89:a7:97:c5:a5:1d:6a:ee:ca:0d:90:82:
         c1:91:f4:9d:95:29:9d:96:0b:86:c3:05:85:dc:02:62:c5:98:
         f2:47:4f:54:7b:52:4e:4e:e6:c6:81:ac:09:c4:98:20:77:81:
         83:51:5d:b1:c0:fb:fc:c1:e6:b9:07:af:66:75:64:dd:e4:e6:
         a1:13:e5:ad:0b:21:48:d8:ea:ff:ff:1d:88:1b:01:81:f7:66:
         e3:61:9f:88:9e:e9:e4:1d:25:1b:a4:2f:9f:db:9e:9e:4c:ed:
         17:de:61:39:d4:82:1c:31:e6:c3:34:96:8e:30:47:ae:91:7e:
         3e:02:69:da:69:cb:51:b7:93:b7:64:7a:de:51:79:f1:1a:b7:
         71:d4:2c:b0:50:a8:17:23:9b:41:e8:b6:f7:64:3d:88:b0:90:
         5e:f3:f4:cb:59:6b:6c:2f:e4:f7:77:41:08:24:1e:dd:be:1a:
         03:06:d9:bc:81:8c:54:55:17:42:cb:c4:af:17:13:d2:18:72:
         ec:d7:28:8f:bf:e0:72:f8:03:51:8a:0e:16:fc:5e:64:db:dd:
         06:6e:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:58 2026 by rpki-client