Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa
File:                     af9a9b5b-da9e-3336-9702-74ff3b725355.roa (raw, json)
Hash identifier:          FYdhsCbB+fxyyznoa9kDV0XDKvK6G58tWqtli5+aUl0=
Subject key identifier:   A9:CF:3A:E8:D2:5A:09:2C:5F:07:79:C8:4A:A0:2F:B0:70:25:D0:B6
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584D83CAAB39FDEEBC6D6E509600
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     7065
IP address blocks:        2607:43c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ab:39:fd:ee:bc:6d:6e:50:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d3cbc2f9-991d-4962-aa30-afd8db8443cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:00:73:25:15:4e:60:fe:44:82:e9:e9:58:
                    30:fd:7d:65:1f:51:77:4e:db:d7:64:6b:45:36:ec:
                    d7:a4:95:1b:c4:59:af:7a:7f:76:a9:c1:9d:74:a6:
                    5a:e1:a1:92:79:81:a3:67:c7:db:e3:bd:16:83:53:
                    9c:1c:ce:b2:df:9e:73:b1:75:c3:ba:e3:e3:ab:3a:
                    92:4c:c0:17:45:86:2b:fd:59:e9:6d:06:7e:94:e7:
                    5d:ce:82:49:df:8e:fb:44:50:26:b2:0b:0d:8b:8a:
                    7b:e7:fd:34:d4:33:ca:ab:e2:e7:b4:93:39:a3:0b:
                    ec:2e:b5:f5:75:25:2f:53:31:c0:5e:1d:78:b4:54:
                    68:a9:1a:3a:2f:1d:b3:96:fd:cd:77:82:26:8e:90:
                    ac:cb:83:6e:37:36:4a:c2:23:00:43:dd:aa:ad:34:
                    d6:92:be:99:1b:a4:43:ff:1b:40:57:9a:6b:a5:77:
                    f5:56:5c:1c:f6:d0:62:fc:1d:b5:df:50:b7:b1:e5:
                    91:94:e1:5c:4c:a4:ef:14:e7:b1:0c:90:35:b6:32:
                    d3:b7:25:31:45:77:a2:dd:c4:37:d1:52:29:7f:5c:
                    98:1f:ee:c3:8b:3f:e1:23:4a:27:b6:d0:9f:c6:c4:
                    6e:ce:5e:5c:36:09:25:db:a3:1d:61:62:b0:de:9c:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CF:3A:E8:D2:5A:09:2C:5F:07:79:C8:4A:A0:2F:B0:70:25:D0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/af9a9b5b-da9e-3336-9702-74ff3b725355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:43c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b8:53:eb:6e:bb:57:9f:ef:7a:67:42:97:f3:6e:0d:ae:37:
         b0:f9:08:dd:57:1d:4a:47:56:ad:dc:f2:c7:d8:6f:f9:9c:45:
         00:c3:9d:f1:45:5c:98:66:16:58:53:7d:47:81:36:8d:b6:f8:
         32:3a:2f:bb:73:60:84:0c:6d:ef:cb:8c:18:16:28:f5:22:55:
         30:98:a0:82:ea:4e:47:9f:af:aa:f7:d6:7a:99:56:18:2c:3d:
         05:45:bd:38:94:6a:f5:9b:f7:e6:73:0f:e2:b2:6f:3c:23:56:
         c4:df:6a:74:2a:54:84:6f:c5:07:9c:09:ea:5f:eb:11:4f:33:
         60:8b:fc:5b:3c:f5:02:10:0e:22:91:0d:06:ff:59:9e:7f:c2:
         f7:b4:69:86:b7:7b:79:59:5a:76:55:8d:ec:73:6e:8d:71:64:
         73:8f:82:bf:a4:6a:42:1a:38:cb:4c:6b:6f:0e:d5:df:f3:3f:
         47:58:e6:b3:9a:a7:f3:99:ad:13:b5:f1:72:a8:55:cf:33:d5:
         ef:f9:33:12:69:05:63:6e:2c:ed:e3:76:14:d1:08:d4:15:ff:
         8b:a1:14:ce:e3:84:41:68:aa:68:86:db:cb:8f:c2:c4:57:8e:
         60:e3:ba:15:38:88:0e:f8:18:77:c8:00:6a:b0:ff:1b:31:26:
         49:9a:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:19 2026 by rpki-client