Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
File:                     fd3aebe3-a766-37fe-998a-845bb98c23a7.roa (raw, json)
Hash identifier:          ATLIJccD/uiTss/JFQxJSAWhZeyO+UqEfCFFBu0Xlro=
Subject key identifier:   C2:DD:B2:31:91:A9:27:68:AF:76:17:2D:EB:3B:EB:E4:22:59:7B:AA
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F4328584C6E2179AEB21D7EA0A9C87880
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     40555
IP address blocks:        2607:b100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:79:ae:b2:1d:7e:a0:a9:c8:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=cceb8f84-0b76-4f17-a1f6-9524a05f3e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:3d:c5:35:ec:ed:2d:49:1b:fd:f9:67:f8:
                    5b:f4:a3:58:97:44:0d:3a:96:9b:7b:66:ce:2b:59:
                    7d:78:93:28:cb:4f:a1:25:c2:3b:76:62:b0:92:0e:
                    52:3e:d2:38:b0:66:d4:56:2e:6b:02:b1:43:c6:a1:
                    e2:e0:1f:29:c0:e2:e7:9a:9f:b4:5f:40:53:2b:ce:
                    4f:df:b9:6b:8c:8d:b1:be:2e:ee:b3:38:88:9c:16:
                    9d:de:82:6b:84:62:bb:31:7a:0e:ef:dc:c6:17:2d:
                    80:61:e0:00:af:63:1d:1b:1b:28:54:cf:c6:d6:a5:
                    96:2f:e9:90:b1:6d:d5:f1:be:fc:43:e3:df:b3:32:
                    76:f4:d8:fa:0a:a4:bc:c6:d0:90:11:49:cb:2c:67:
                    35:03:75:fb:1c:17:06:e2:0f:85:54:8c:c5:13:a8:
                    60:74:42:4a:5b:1e:11:7a:36:00:86:6e:6b:53:dc:
                    0f:f7:56:a6:4f:fb:88:89:f7:9a:ef:f2:88:db:32:
                    16:5d:10:ff:d2:cd:bd:4a:8c:bc:35:3f:cd:7e:b4:
                    76:b9:dc:d0:e5:f3:11:8b:df:97:bc:0c:e9:e8:f9:
                    1e:a6:38:22:a7:31:a7:44:95:56:de:a4:61:ef:5f:
                    51:af:17:d2:d1:a8:29:cb:f6:77:00:0c:50:f1:59:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DD:B2:31:91:A9:27:68:AF:76:17:2D:EB:3B:EB:E4:22:59:7B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:7b:90:08:d2:9c:cf:ad:e0:8e:1a:8c:a0:87:1a:f9:cc:
         80:1f:90:e5:56:f8:8a:82:2d:2c:21:62:90:23:98:84:ab:68:
         73:e2:3c:e0:26:66:24:d2:eb:6d:00:27:34:de:8f:8e:7f:8c:
         c9:15:97:b4:b2:45:6d:20:e8:e6:d1:de:cc:58:55:34:06:0a:
         9f:fb:2d:4b:97:e0:d2:cc:d5:e8:b1:28:28:3d:8f:c0:5d:9d:
         41:35:16:e1:54:10:e5:dc:c9:97:55:ec:73:a5:05:1b:9c:40:
         0b:3d:f4:19:a2:f8:83:b9:dc:95:50:21:7b:6f:7b:ac:e9:19:
         aa:c1:21:03:bb:92:0f:c2:9a:16:5d:8d:b3:b4:23:47:ef:06:
         5f:5f:bb:ec:39:01:89:1d:99:f9:90:02:a8:39:6c:17:ef:ee:
         65:e4:6b:c0:24:d5:d2:c5:ac:1b:02:d2:db:ec:5e:a1:50:cc:
         5f:d3:32:d4:17:8f:09:59:3c:c5:79:10:77:c3:a1:3b:28:c3:
         2a:19:54:37:b0:1c:b2:4f:4d:f8:d1:1a:05:a7:e1:7d:cb:8a:
         67:3a:8a:df:58:38:7b:34:9e:c3:8a:0f:8c:be:de:80:2a:02:
         ad:b0:94:95:eb:79:fd:ca:76:5e:79:b0:77:06:0c:3d:4b:11:
         47:2c:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:17 2026 by rpki-client