Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa
File:                     61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa (raw, json)
Hash identifier:          i6Q+mwyyNtAAYq9tTBBPXEzrrr4hNZFGKrh/7MECvFE=
Subject key identifier:   EA:EB:DE:93:97:00:12:CF:7E:7E:53:F8:50:49:58:EF:BF:D0:0C:FE
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D87FA96937B79CFC1C411B7B0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     3209
IP address blocks:        2620:11a:a055::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:96:93:7b:79:cf:c1:c4:11:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=45749a31-fd85-4f53-a483-710892b93f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:7c:c4:bf:3f:86:f3:7c:1a:fc:03:84:82:
                    8a:ba:f1:aa:93:aa:11:4f:df:14:61:54:f1:20:dc:
                    54:80:72:0c:67:16:e6:16:13:8d:85:96:81:47:85:
                    95:95:40:67:a2:a8:9a:79:ae:fb:14:6a:12:37:8e:
                    b9:09:77:ce:8b:f2:77:5b:c2:98:4e:97:9b:41:30:
                    a7:62:86:09:b4:c7:9c:16:d7:2b:1b:89:f8:45:ce:
                    a7:60:28:f2:b8:92:ea:15:a7:45:bc:79:d3:90:19:
                    92:ad:67:af:74:10:17:2e:ca:1a:39:5f:1d:18:a6:
                    c6:88:ea:3d:9f:3d:2e:d3:27:a7:d2:e9:9b:9c:bd:
                    5b:d2:b7:03:03:6a:30:75:c5:8d:41:8a:77:3b:a2:
                    ea:9e:0f:5b:88:92:cf:8b:ef:ed:17:7c:1e:ce:84:
                    3a:19:bc:d7:1f:ad:58:5d:dc:25:b7:9c:76:8a:54:
                    e4:ff:c7:46:9f:d8:96:be:87:7e:6b:53:74:c9:d3:
                    bd:8c:83:66:6c:ee:e6:30:aa:0f:84:61:f6:d9:e7:
                    4c:fc:0b:7d:0f:89:b3:95:45:a8:22:ee:5f:81:e8:
                    59:bf:ca:1f:49:2f:19:aa:f8:26:58:6a:74:87:6e:
                    56:38:df:cd:8c:fd:5e:18:ab:84:de:72:6d:f4:df:
                    e4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:DE:93:97:00:12:CF:7E:7E:53:F8:50:49:58:EF:BF:D0:0C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a055::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e3:ce:7f:0e:f9:47:b7:bc:c8:2b:00:11:f7:a1:1f:e2:79:
         ae:30:a4:40:56:bd:b8:f6:4a:8c:3b:ab:a3:96:47:5a:50:5f:
         f9:7a:86:04:0a:09:f4:9a:b1:ae:47:e6:ea:c1:e5:da:fa:b9:
         0a:2e:a0:04:c6:12:33:92:35:4d:7c:ff:d2:45:b4:68:b6:1c:
         5c:cb:7f:78:c1:cb:6b:0e:3c:c1:8c:40:29:ad:90:ec:79:d0:
         ef:95:b4:9e:87:da:fe:a5:a4:49:33:ce:0c:8e:33:54:99:23:
         05:1f:8f:3d:aa:3a:90:a2:b4:a8:f5:c7:da:e1:36:99:99:12:
         f6:0e:ad:2d:f3:b7:e4:18:6c:4b:64:ab:7d:c5:3a:2f:52:f0:
         3f:0e:61:93:33:82:ec:fd:db:28:8b:eb:3c:97:c7:5b:1b:d5:
         42:48:7b:98:4e:00:77:9f:27:8e:6f:ee:27:05:bf:65:e9:23:
         2d:85:dc:78:77:d2:f6:ec:55:a2:26:3e:86:68:0d:8d:a2:1b:
         0b:fa:99:cd:f8:20:51:ea:f1:12:cb:c9:d3:91:bf:08:48:84:
         4a:ce:41:52:fd:6a:bc:70:3a:5e:81:3a:7c:68:0d:31:76:10:
         32:b9:74:73:08:4d:7d:df:b8:a9:ff:3f:1a:ec:1c:56:1b:6d:
         1d:e3:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:33:51 2026 by rpki-client