Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa
File:                     03233396-7373-36cb-ab6f-70f08e11bdb8.roa (raw, json)
Hash identifier:          r4hrDJaiK5z5PaggTAg/ys7OyE2uwg/ZcWzjxYxZD10=
Subject key identifier:   79:FC:D8:1D:23:2F:36:BC:B0:98:E0:88:E2:A7:7B:1F:6E:34:08:F5
Certificate issuer:       /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507
Certificate serial:       010D0C9F4328584D07ACEF468BB2AC4912275F40
Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     22280
IP address blocks:        2607:1940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ef:46:8b:b2:ac:49:12:27:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=f80040b1-cc78-4f28-9f36-c9e6aa4d109f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:7c:bd:65:7c:e4:ef:f0:f8:de:ea:73:89:
                    ae:19:d3:bc:c9:70:15:1c:d3:86:27:93:44:97:2f:
                    80:37:8e:c3:7e:f8:c3:65:e2:b5:76:b8:5e:74:70:
                    21:61:de:a7:95:43:b6:51:f1:44:3c:33:73:f4:e4:
                    e1:fa:c8:2a:03:0b:d8:a2:bc:ae:cf:c2:7e:b6:36:
                    cc:cd:06:7d:73:7a:5b:9a:c3:2f:e4:8e:dd:41:20:
                    06:f2:f1:26:87:d1:1d:38:6d:c0:cc:66:d6:3f:94:
                    51:2e:f1:68:ff:18:5e:a7:81:11:d5:a8:ac:a1:3b:
                    a7:68:c4:ec:e2:f0:5d:b6:21:06:04:8e:85:2d:66:
                    09:2f:7d:f1:16:91:79:76:17:1f:92:3d:27:09:46:
                    22:ae:27:5b:24:f9:6c:7b:e5:d6:70:23:4d:10:2e:
                    28:97:3d:94:47:3f:93:35:ef:b1:7a:3c:6e:29:b5:
                    d4:77:09:dd:96:99:95:04:4e:45:61:4e:50:d8:72:
                    a0:cf:ff:eb:2f:db:d7:37:96:f4:bd:1e:7b:00:4a:
                    a0:6f:d1:e5:5f:b4:13:60:82:16:30:df:64:a8:21:
                    26:83:94:8f:88:20:54:09:df:17:98:55:75:9d:e9:
                    f8:24:6b:04:8e:3e:c4:23:22:90:22:e0:98:b9:fb:
                    e2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:D8:1D:23:2F:36:BC:B0:98:E0:88:E2:A7:7B:1F:6E:34:08:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:bb:7f:40:08:19:f9:b3:9b:36:df:8a:35:ee:3f:06:b6:
         37:b4:43:7b:b0:21:eb:8d:aa:0c:de:6d:e5:7c:c8:35:35:e4:
         1e:cb:e0:b9:a2:ea:9d:01:24:32:e8:73:cd:81:b5:67:1b:bd:
         47:af:80:1b:2b:cd:1c:c2:a4:55:7c:5e:19:59:ec:e2:1b:74:
         e8:62:6a:b1:40:de:7c:5c:74:4b:e5:0e:b3:6c:43:de:36:73:
         54:19:2e:3d:aa:3e:b4:25:e4:98:07:5c:54:2d:f6:87:af:e8:
         04:5b:0c:b6:93:3e:f8:74:44:b6:82:1d:b6:4d:d7:ff:aa:a5:
         a3:2b:5b:84:58:f2:4e:43:99:6c:e9:fb:be:62:f3:72:0e:22:
         fe:e2:72:df:71:0a:2d:10:6f:28:d9:f7:c2:56:16:3c:97:e6:
         b2:1a:f2:e5:13:24:ba:5a:d6:67:81:bd:cc:36:c6:b2:31:13:
         5f:57:3c:12:34:f6:60:84:0e:aa:44:66:3e:05:48:74:d9:d9:
         f1:c7:75:5f:62:e3:32:7a:34:47:ed:2b:24:6f:be:e5:ee:9f:
         51:cf:34:67:8a:ad:d2:26:d7:8e:15:58:21:d1:21:e0:34:4b:
         5d:f0:20:af:66:0a:88:c7:57:ce:e9:f5:d7:62:3d:a4:60:6c:
         df:21:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:58 2026 by rpki-client