Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa
File:                     47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa (raw, json)
Hash identifier:          HDD4krRCumQy4iKkOhZkYqiv1XVrjqTxwb2az0+jYK8=
Subject key identifier:   2D:95:16:C0:FD:85:CE:5F:B5:F8:FD:53:FB:EF:C0:C4:15:02:E4:83
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584D7CCFDEE0EE89D58EA7640980
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     49
IP address blocks:        2610:20:6fce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:de:e0:ee:89:d5:8e:a7:64:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=13e5b3b1-d325-44d2-923c-8f759023b3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:59:97:51:30:55:4b:95:86:d6:3f:a8:73:
                    83:d6:42:1f:ee:82:a8:4d:89:0f:89:ea:28:76:db:
                    42:45:02:97:68:98:24:f4:5b:cd:06:09:fa:4d:0f:
                    9a:62:d2:5c:11:73:c7:eb:4f:b2:c7:43:f2:43:dc:
                    37:e9:e4:cc:a0:50:a0:1d:df:d7:20:d7:fa:0e:af:
                    ef:ed:08:b5:86:37:c5:3d:35:3a:b3:2c:ff:9d:85:
                    11:61:8e:9b:45:df:ef:c0:ad:4a:88:03:f5:ef:35:
                    ed:90:9d:ce:98:de:fc:c2:5c:d4:2e:b6:16:d7:3c:
                    1d:47:ff:47:11:c4:68:91:a9:6d:96:b2:1f:9b:26:
                    10:85:83:1c:5a:44:6a:93:28:14:19:36:91:dd:dd:
                    ee:c9:bb:d7:94:7e:7b:28:c3:f4:2f:3f:17:df:aa:
                    92:6d:cd:e0:a9:a5:b3:3b:e6:59:b3:0b:01:75:1c:
                    cc:2b:6f:c1:71:12:45:44:06:b3:f3:0b:7a:f5:1a:
                    3a:09:05:07:db:b4:92:e2:5d:b9:ed:91:63:ee:de:
                    58:90:b3:ad:0e:a1:3b:9f:31:80:2b:90:c4:74:2d:
                    ac:f7:f9:74:20:ca:4f:09:b3:8f:7e:0a:3c:2f:4a:
                    39:6c:06:01:79:c3:34:bc:38:6c:14:58:9d:3f:98:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:16:C0:FD:85:CE:5F:B5:F8:FD:53:FB:EF:C0:C4:15:02:E4:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:0d:50:95:65:3f:1f:ef:ef:d6:33:de:48:57:ef:ea:be:
         30:7a:cf:ff:ca:47:78:ef:09:44:a5:c1:e8:a9:9c:7f:03:6c:
         54:93:50:0a:0d:ad:26:60:b9:55:d8:49:df:1f:5f:cb:93:ab:
         de:57:6c:f8:06:4a:be:cd:4c:df:a7:a3:43:11:b6:cd:a8:88:
         18:2c:1f:fa:77:e0:44:0a:e8:48:c5:4d:d1:9b:0b:8e:37:04:
         5c:38:8b:e2:01:e0:ea:3e:f8:54:a4:02:eb:68:10:6f:1d:f3:
         d8:24:2e:df:09:54:3c:88:c2:94:63:dd:9d:f8:53:c6:8f:9c:
         a5:4a:50:e8:aa:3c:77:25:18:89:6f:1f:85:4a:3c:92:2a:92:
         59:b9:0c:a4:ef:b2:74:fc:52:94:c0:45:a7:09:7f:2f:69:bc:
         31:1b:49:35:3c:93:28:31:a3:87:54:84:44:0e:d6:a0:bd:2d:
         12:a5:0a:f6:03:34:9d:2f:6d:7c:8c:c1:d0:cc:3c:92:50:f4:
         ae:63:42:b7:b4:19:14:db:49:62:22:08:8f:a0:de:d9:7f:64:
         c9:af:8d:94:64:a4:f9:c9:55:df:da:f4:15:c1:f7:c8:83:2e:
         f2:29:6f:da:3c:04:47:40:35:80:63:ee:5f:e4:04:e5:00:e8:
         89:de:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:26 2026 by rpki-client