Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/41e335ec-6d27-399b-bc57-8668d6df9bda.roa
File:                     41e335ec-6d27-399b-bc57-8668d6df9bda.roa (raw, json)
Hash identifier:          kIyVeuSR6QD7Aql8Dn6dKiYqnR80EeOVhBDOZLaIpF8=
Subject key identifier:   2A:DC:3D:D9:92:89:AE:A0:31:E4:0D:ED:33:74:11:0D:F6:EF:54:E3
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584D703FF97386EB9E541F8C5D80
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/41e335ec-6d27-399b-bc57-8668d6df9bda.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     398090
IP address blocks:        2631:4000::/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f9:73:86:eb:9e:54:1f:8c:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=b86ae6ee-373d-4a1a-a7c8-63c15ada9887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a7:39:2b:1f:01:21:cc:30:e4:b9:0f:0f:07:
                    da:be:50:74:c6:e2:77:65:a7:49:71:77:a2:5b:cf:
                    05:a9:1f:b4:38:da:22:0b:0d:6f:76:63:de:04:f9:
                    e5:51:f4:aa:38:2f:50:ec:02:76:16:fe:4a:1b:f2:
                    87:7a:1d:d3:1f:8b:30:b8:6e:2f:64:ef:8d:bf:54:
                    89:20:90:aa:3e:4c:66:21:c4:ef:dd:6c:b8:9b:36:
                    3d:bb:c1:c1:b2:2a:cb:e3:09:30:9d:91:d2:a5:aa:
                    da:11:a6:fb:96:7a:75:f8:c9:8f:f4:a2:f1:e5:3c:
                    39:d1:1d:0c:6a:39:ad:68:c3:94:51:4b:48:7f:52:
                    23:25:47:56:f4:22:4b:04:16:97:ed:6a:a9:f1:ce:
                    5c:a5:1b:e9:b1:3c:c4:8d:06:8d:82:ae:54:53:c7:
                    fd:03:b9:c1:19:29:1d:12:cc:4b:bd:0a:03:17:3d:
                    14:d7:d8:b0:92:91:b1:44:06:0c:a1:06:05:a7:ea:
                    16:9f:e8:6c:9f:7b:ef:63:fc:8d:a5:d8:69:11:55:
                    b7:1d:21:53:ce:6b:d3:64:f6:3e:a2:f1:cd:c5:b7:
                    66:d5:2c:49:61:2f:08:3c:6c:04:f0:b0:58:29:ea:
                    39:de:39:b3:a5:71:5e:43:12:a9:36:f5:28:e6:06:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:3D:D9:92:89:AE:A0:31:E4:0D:ED:33:74:11:0D:F6:EF:54:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/41e335ec-6d27-399b-bc57-8668d6df9bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:4000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:11:b2:26:28:a4:fa:3c:8e:5b:4a:57:d1:05:57:4d:0c:25:
         4c:f6:09:93:88:28:f2:17:4a:43:3f:2f:f4:6a:19:14:84:ec:
         32:df:38:e7:2e:05:10:c9:a7:b6:5d:17:9c:55:f3:4e:f5:9a:
         6d:23:19:a2:01:a2:15:99:ea:70:04:99:7f:01:a0:d6:2f:3e:
         40:bf:c3:55:45:c6:a1:42:b3:3c:1a:dd:33:2b:c4:a3:ff:85:
         b3:89:72:1c:bd:fe:9a:c9:af:12:fd:12:80:6d:29:76:c4:af:
         de:10:6e:22:71:c4:4f:46:18:02:e6:6a:a7:7b:17:44:7e:6e:
         3e:8c:e4:35:49:80:7b:7f:89:ee:fa:cf:3c:68:e2:55:ea:77:
         14:1d:90:e6:d7:57:12:e6:98:9c:b2:a5:77:92:3f:09:d5:e6:
         22:d6:cd:83:e7:4c:89:4d:24:84:98:80:73:03:a6:3f:c5:43:
         53:dc:e8:47:c8:45:cb:47:b4:41:e4:e6:b2:5b:09:54:2e:7b:
         90:a1:07:3d:5a:ad:ba:08:05:d4:a0:cc:f3:fb:67:d8:ba:d5:
         0c:f3:32:34:5c:dc:8a:28:13:5b:16:df:0b:8f:63:37:40:a0:
         b5:d5:73:7c:07:29:88:8d:83:3d:a6:c0:68:41:6b:78:50:80:
         0d:67:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:11 2026 by rpki-client