Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa
File:                     95a84b4d-a674-3f52-b01a-deae8cc47d84.roa (raw, json)
Hash identifier:          fwmyUuen4IzU4rObTjTLDaKa2oNouFJr8/M+zyEc0Nw=
Subject key identifier:   C5:65:D4:AD:6D:A3:4B:55:ED:27:8F:E6:03:EB:51:C0:43:3D:83:43
Certificate issuer:       /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
Certificate serial:       010D0C9F4328584D67DFFA075836D56C09D5C040
Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     14450
IP address blocks:        2620:111:84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:fa:07:58:36:d5:6c:09:d5:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=57442f7c-5b85-440a-8edf-922177e1dae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:f4:c0:62:57:4b:11:56:8f:e8:0a:b8:95:
                    39:9d:63:2d:9e:93:4f:c6:41:dc:78:51:6a:e8:82:
                    4c:c8:f9:0a:fa:ce:05:6d:0c:d5:92:9f:24:a9:9a:
                    dc:1e:2f:6a:1e:37:63:42:93:7c:60:6d:6c:9c:70:
                    c4:95:9f:db:67:c9:d2:8a:fc:c3:d7:cc:09:83:3d:
                    f5:19:77:6d:66:8c:16:c6:18:f1:80:ef:ba:c8:43:
                    b0:70:83:c4:b3:29:00:97:36:49:e0:c1:6b:50:22:
                    0c:91:be:75:b4:95:94:71:61:57:fb:af:ab:ab:5f:
                    7f:8f:f5:4f:8c:99:ab:1a:d8:0f:0f:14:4a:72:88:
                    1c:c3:50:c5:e0:5d:08:cd:20:4f:4a:38:94:d0:19:
                    c8:ea:6a:6a:cd:bb:e2:a3:c1:b4:71:88:e1:e5:0b:
                    0c:ad:54:9b:60:14:dd:85:d9:03:31:27:a3:c3:18:
                    9f:f1:d6:5d:c7:70:b4:a1:ac:73:4a:95:d9:64:89:
                    ef:b0:0e:f2:f0:2b:7e:69:c9:bd:c4:73:d8:0f:68:
                    02:e3:9b:5e:3f:74:d5:a4:9c:a8:7a:52:ce:dc:f5:
                    0b:18:d3:51:1c:62:c3:55:cc:71:5e:59:b5:8a:ab:
                    d2:6e:ed:16:f4:1a:5a:cc:90:6f:35:07:cd:2a:73:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:65:D4:AD:6D:A3:4B:55:ED:27:8F:E6:03:EB:51:C0:43:3D:83:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/95a84b4d-a674-3f52-b01a-deae8cc47d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl

            X509v3 Authority Key Identifier:
                keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:59:be:cf:ae:7c:6e:a6:d9:b8:6d:16:f7:1e:7e:61:7d:55:
         ad:87:fc:16:39:87:f6:dc:bd:e8:f1:93:0f:1f:2b:2f:ed:4c:
         e3:03:f7:03:fc:4e:da:44:cf:46:6f:c9:d7:7a:4a:d8:0f:60:
         4f:62:b3:62:e5:d8:33:78:09:61:b9:63:ae:f7:47:49:4a:55:
         f1:3d:89:a8:d8:1c:d0:c7:6e:68:20:8a:d2:a1:1a:11:7b:03:
         e2:70:c8:9b:ee:52:21:d7:ec:47:05:00:92:c4:d1:59:18:5b:
         fc:98:f5:7a:32:0f:fb:b4:51:e3:2a:b2:14:72:04:5d:03:41:
         f7:92:c3:e4:03:be:c1:47:a9:2f:22:38:97:a6:f5:37:54:11:
         b1:9b:b2:b5:7e:73:70:97:35:9a:61:27:0f:c2:6f:ee:9c:62:
         b7:c6:dc:2a:9c:f3:e8:6d:5c:af:5a:61:c3:f3:63:af:5b:c9:
         e5:b7:af:86:e7:c2:00:94:8b:3d:82:14:14:2c:b2:b5:aa:ea:
         37:89:b8:43:22:5a:b5:10:80:fe:6f:44:08:3b:e4:be:c1:dd:
         61:65:c0:a3:9c:2d:ec:ac:69:0f:f6:0c:03:3e:96:7f:1b:bf:
         38:4f:9c:73:ed:ba:10:9c:bb:62:e4:7e:bf:7a:cc:90:95:56:
         3a:e7:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:56 2026 by rpki-client