Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/20a33a85-4e35-3679-9268-4da82cc7e935.roa
File:                     20a33a85-4e35-3679-9268-4da82cc7e935.roa (raw, json)
Hash identifier:          OgVK0gMmDhD3qKRVpCVXvUatsWfJDYiFitLtMS4LAHs=
Subject key identifier:   52:6E:D8:0D:D6:94:95:20:C0:CD:C4:A9:E1:A7:06:9F:89:EF:F2:55
Certificate issuer:       /CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
Certificate serial:       010D0C9F4328584D746FC3419F19286954B95780
Authority key identifier: D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/20a33a85-4e35-3679-9268-4da82cc7e935.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     23026
IP address blocks:        2607:6100:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c3:41:9f:19:28:69:54:b9:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=c4fc5bc0-8464-4331-b6d5-f3e2fbcadd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:73:8d:cd:c4:10:cc:f0:1c:4e:04:b1:91:
                    f1:f8:db:eb:96:4b:4d:2e:07:05:3d:46:18:0d:8e:
                    61:0d:92:7e:e8:ed:79:3b:fe:46:c0:04:94:fe:64:
                    1d:74:4a:45:e4:81:30:25:bd:cf:45:8c:fc:b7:d1:
                    6d:fd:53:3b:ee:f2:cb:81:13:a8:c6:82:e3:ca:b7:
                    d0:3b:88:d6:77:9d:1c:53:bf:17:01:f4:09:11:15:
                    0c:8a:b7:cb:df:32:a3:dd:3c:4b:49:de:0a:14:2e:
                    b8:50:9b:ad:bf:61:ef:6e:d4:7d:e5:43:d6:79:9f:
                    e1:6b:5d:62:7a:00:9a:59:17:eb:cf:15:fb:a9:a8:
                    61:93:6d:61:6e:38:92:54:1f:63:b5:f9:09:9e:28:
                    a1:2b:dc:3a:f2:90:cf:85:f4:36:f0:31:93:3f:99:
                    21:65:8e:26:4a:e7:63:96:d4:9f:b5:f2:a4:fa:6c:
                    67:d3:a2:76:f6:65:33:92:78:59:9e:f4:e6:20:af:
                    0d:51:74:99:7e:c1:92:c6:89:90:e0:21:d8:21:10:
                    e8:7e:c6:da:18:65:dd:a3:3b:1d:36:df:0c:7a:60:
                    cf:6f:b3:a8:27:7c:04:dd:4f:30:9a:6b:52:43:a3:
                    18:6d:05:06:f0:b1:91:f3:dd:2e:e7:00:6c:22:e6:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:D8:0D:D6:94:95:20:C0:CD:C4:A9:E1:A7:06:9F:89:EF:F2:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/20a33a85-4e35-3679-9268-4da82cc7e935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6100:1005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:8b:19:28:81:a5:16:b7:b0:c8:31:71:52:5b:cf:5e:7c:
         36:4d:43:f4:0d:ff:07:f1:f7:90:46:95:ca:cc:01:2a:de:62:
         68:ff:b0:4e:45:99:9e:3c:bd:fa:7b:4d:0a:49:d9:d5:d6:98:
         20:08:e0:22:a7:94:ff:4c:a0:f7:8c:b7:7d:d2:2f:75:40:f7:
         d6:98:13:8e:09:a7:00:c9:ce:74:11:dc:c9:a6:50:60:90:8c:
         cc:b3:ab:4b:48:9b:8d:7d:93:0a:55:60:10:99:e5:80:fd:31:
         c9:9f:23:4e:68:c0:8f:16:8a:1a:6c:63:58:fc:49:7d:08:cf:
         b3:1e:d4:e9:8b:de:6c:04:78:ab:12:d9:03:a1:00:d8:93:fd:
         8c:d1:0d:ce:5b:33:87:35:99:d6:81:7b:cd:ea:d1:3b:96:79:
         e3:5e:7a:53:91:e3:d0:d4:88:47:fa:d6:7b:eb:f2:b0:61:99:
         c7:3f:01:91:f6:e4:41:7f:98:d1:53:a7:54:54:d3:35:20:4b:
         5b:80:80:a7:f3:b9:25:75:e1:fd:8e:6c:98:14:89:aa:d2:34:
         3a:b8:5c:64:4a:6a:3c:86:7e:d7:55:ca:f2:2c:6d:66:ed:df:
         fa:33:b6:19:52:cc:b0:98:34:17:40:8a:c4:a6:e7:4e:80:a4:
         95:8d:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:29 2026 by rpki-client