Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/7622d590-23ad-37c9-8623-8e96859d19db.roa
File:                     7622d590-23ad-37c9-8623-8e96859d19db.roa (raw, json)
Hash identifier:          81JVHS+0ovp3yi+pPJuJtm3F4a6KH2maE6SE5COghnI=
Subject key identifier:   24:9E:FF:06:2E:4D:41:E9:43:7C:DF:8A:1B:A3:FB:A9:2B:E0:66:77
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584D07ACED0F82B07AAFBCCE1540
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/7622d590-23ad-37c9-8623-8e96859d19db.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     36734
IP address blocks:        2604:4780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ed:0f:82:b0:7a:af:bc:ce:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=db5fd925-c20b-43f3-bef9-cfb02d63446a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:57:74:75:fb:ed:6e:48:77:06:b1:5a:20:9f:
                    77:3d:c5:df:7c:9f:7e:d5:77:ac:3c:b9:c4:d2:df:
                    c0:0a:53:70:ed:4a:8d:62:81:7e:63:aa:3b:34:ff:
                    8c:37:9b:ba:1d:ca:5b:5c:76:8a:d6:13:60:38:6e:
                    c5:11:d4:85:c4:fe:40:69:7d:f4:df:3c:e2:fb:f2:
                    8d:e0:81:74:af:63:a5:49:70:b4:cf:e2:c9:a5:4a:
                    89:a6:17:9f:b1:cd:7c:75:e6:62:d6:9b:b6:54:22:
                    b8:16:3c:37:78:f2:2e:54:69:4d:88:59:3b:ca:d2:
                    03:08:3d:da:a4:ed:18:bf:b8:fb:2f:17:88:43:f2:
                    6f:bc:3b:74:a1:fc:ae:c0:8a:4f:40:00:58:7e:6e:
                    d8:7b:b4:3d:30:96:30:54:63:45:70:b6:6e:83:81:
                    f3:ac:fe:02:7e:0b:63:ac:25:14:b5:17:f4:42:16:
                    7c:20:12:82:29:80:2f:8e:d7:a1:06:4d:95:c4:c4:
                    76:f5:d2:1f:5a:ce:6c:e9:7f:53:c9:4d:00:10:12:
                    be:dc:b2:f7:79:e0:48:dc:06:28:4f:4d:dc:fc:83:
                    44:0b:43:03:e3:fd:8b:15:65:58:72:7a:fe:c7:7a:
                    9d:e5:28:2f:db:d2:9e:0b:5a:f6:f8:e4:34:39:41:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9E:FF:06:2E:4D:41:E9:43:7C:DF:8A:1B:A3:FB:A9:2B:E0:66:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/7622d590-23ad-37c9-8623-8e96859d19db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4f:33:1b:86:72:a7:4e:7c:fb:f3:9c:89:cc:57:8f:33:9a:
         10:22:b0:69:82:ab:36:aa:d8:a3:d0:8c:5a:2c:b3:7f:87:01:
         b8:d2:7e:04:8f:c8:50:ff:12:b3:e7:ac:e2:80:d7:8a:83:82:
         fa:6e:f6:1d:7e:2a:b1:c2:ac:54:56:8d:b2:a4:75:a7:5c:ce:
         0a:c2:f6:bd:4b:02:9c:69:60:5f:7f:aa:26:6c:55:33:aa:c4:
         f4:15:1e:af:c9:91:c4:10:b0:fe:03:85:a1:78:89:91:8e:45:
         1d:1a:0c:c2:dd:6c:4a:ce:21:c9:54:72:e9:91:6d:bf:5b:24:
         a7:2e:09:95:e0:3d:87:be:9d:46:6f:c4:c8:78:cb:f2:9a:7e:
         3a:e6:dd:36:f2:83:f5:b2:b1:84:f2:96:9e:ec:70:e7:5c:84:
         84:89:68:de:46:71:77:d1:c1:72:0c:b8:d9:75:93:64:6a:6b:
         82:fc:16:06:74:36:8a:d4:88:c3:e6:ac:35:fc:75:b4:45:99:
         57:18:20:6a:83:25:5b:f0:e4:a8:3e:e5:54:fd:e7:91:7e:1c:
         3e:8d:83:c0:fe:88:3f:21:28:ce:74:bf:da:ac:ff:04:16:83:
         a3:93:f3:15:9f:24:64:7a:49:d9:e0:93:94:af:10:16:ad:82:
         74:02:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:27 2026 by rpki-client