Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
File:                     84199ee8-6fc9-3f89-963a-d28f3a32d890.roa (raw, json)
Hash identifier:          ZsF97UiWP4pwbWBo5ZR7NHxCxvDGwsOkWQmnLixLfPI=
Subject key identifier:   06:98:CF:7B:2F:1F:BD:D1:13:5F:D6:F3:7D:9A:82:99:BD:25:53:60
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584D75D525B5A6A0064B4B541200
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     8038
IP address blocks:        2607:fae0::/36 maxlen: 36
                          2607:fae0:2000::/36 maxlen: 36
                          2607:fae0:3000::/36 maxlen: 36
                          2607:fae0:4000::/36 maxlen: 36
                          2607:fae0:5000::/36 maxlen: 36
                          2607:fae0:8000::/36 maxlen: 36
                          2607:fae0:a000::/36 maxlen: 36
                          2607:fae0:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:25:b5:a6:a0:06:4b:4b:54:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=5ffbe38c-70f6-4c77-8fb2-b79bb078d850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:64:86:54:81:fd:47:9a:e1:db:c8:fc:bc:
                    25:53:d0:39:5d:f2:91:05:0e:73:bb:32:48:7a:5f:
                    95:47:c4:92:19:7f:b9:35:b7:14:3b:1d:e7:5b:e8:
                    bd:47:4c:ff:e2:44:4b:15:82:92:4b:44:be:ba:a9:
                    11:85:66:87:9b:f8:54:5f:47:94:87:1a:71:52:99:
                    81:c8:39:80:6c:22:aa:85:78:52:c1:14:47:ea:9b:
                    d5:94:92:16:f5:18:b3:34:c5:bc:5f:f5:0a:b6:c2:
                    23:ae:9a:cc:76:d1:5e:7e:04:9c:c1:7f:fe:07:f5:
                    49:72:71:43:50:3c:14:1d:9f:7a:5a:ec:3f:2b:05:
                    1f:57:1a:f2:a4:55:e6:6e:c6:1a:c6:04:cc:51:28:
                    03:9e:7a:34:51:33:39:3d:f0:b5:49:51:0c:b4:be:
                    ea:2f:da:da:a6:09:e0:b7:9d:23:dd:01:72:56:e9:
                    cf:29:6c:bd:53:35:23:df:e5:1a:7c:6e:2b:2c:b5:
                    1d:10:d3:db:da:0b:ae:65:00:51:ab:6e:c6:bc:05:
                    09:51:68:2d:b6:69:25:9e:eb:54:0a:8e:f2:fa:6d:
                    28:97:03:3e:67:1c:46:18:ca:fe:0b:35:a8:a9:37:
                    f4:db:cf:8c:c2:2e:1e:6f:a2:04:8c:c0:a3:14:d3:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:98:CF:7B:2F:1F:BD:D1:13:5F:D6:F3:7D:9A:82:99:BD:25:53:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0::/36
                  2607:fae0:2000::-2607:fae0:5fff:ffff:ffff:ffff:ffff:ffff
                  2607:fae0:8000::/36
                  2607:fae0:a000::/36
                  2607:fae0:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:79:f8:4d:5b:37:78:04:bf:70:1f:c9:48:cc:b7:c1:96:
         75:20:38:f0:84:95:08:cc:e3:c2:ee:03:19:ae:0d:5e:e4:3d:
         7b:b8:84:5c:58:f9:29:4a:54:a3:d6:91:2f:4a:07:60:b2:d4:
         4e:60:96:ce:b7:bc:3a:9f:5d:c3:dd:51:43:d0:9b:b7:4f:a1:
         ef:c6:fa:b0:f7:20:24:f6:bc:cb:8e:ef:c6:dc:9a:ca:77:6d:
         fb:d1:a8:52:3e:27:f7:9a:9d:5a:f2:50:68:c3:03:d4:8a:e9:
         15:e4:78:3d:c3:05:ae:c1:1f:a3:df:0b:11:bb:50:79:c4:53:
         ab:22:2b:b7:09:13:b5:8a:06:63:0e:e9:3b:6a:c2:90:0f:7b:
         9c:63:db:1e:fd:41:79:45:b4:85:9e:29:77:0e:e3:c8:e8:a7:
         40:3c:f9:4c:a5:3b:89:e4:35:d3:15:39:e0:07:31:09:20:40:
         c0:41:a9:a5:01:26:9f:5a:ca:7c:36:0d:16:39:8f:a1:5a:26:
         7f:08:9d:06:b1:4a:10:20:2a:1c:43:d8:87:11:b6:d6:67:ec:
         12:23:73:aa:ba:c4:74:8d:34:1f:a9:56:c9:33:06:1f:b6:2a:
         a7:fc:4f:d9:23:2e:82:e2:02:e2:06:81:63:69:4d:1c:b5:14:
         1a:e7:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:48 2026 by rpki-client