Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa
File:                     b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa (raw, json)
Hash identifier:          n7pBQgVg6Gq1xarWNi2LDHu4mgEBi41Mi5uM4A/ne44=
Subject key identifier:   AE:7C:44:9F:85:6F:A3:B4:88:F2:76:98:6F:AC:F6:78:67:59:AE:AB
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584D67DFB5A2073117DEE66991C0
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     17390
IP address blocks:        2620:1f7:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:b5:a2:07:31:17:de:e6:69:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=8938db68-2dd9-4581-874c-bdc2aed99937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:8a:33:e1:53:4c:c5:c0:6d:c4:4f:8c:e8:
                    06:74:82:b3:38:24:2f:13:23:cf:89:67:f2:3a:b1:
                    a9:51:c1:c0:a1:8d:ee:cc:d0:1e:04:6d:3c:55:a1:
                    2f:15:c7:b6:b7:ef:d9:df:8c:03:d6:eb:1c:f1:37:
                    b5:d3:97:c0:b2:b0:26:83:e2:a8:a2:68:32:d6:39:
                    f0:f7:22:9d:85:b6:0e:14:e0:2e:67:a9:e4:21:74:
                    6e:73:15:eb:18:c1:46:11:e2:fd:63:42:5a:e7:7a:
                    7a:2b:31:ba:b5:4f:98:53:43:4e:49:56:37:69:4b:
                    7a:72:dc:8c:98:07:36:71:a5:65:ca:a3:06:6d:0c:
                    e3:c1:ff:1e:31:5d:23:7e:2c:d5:c7:6d:5e:a1:c2:
                    a2:d7:0c:94:ea:d2:5c:06:ad:c4:c1:eb:30:7b:98:
                    55:6f:64:de:06:9f:6d:87:35:f1:6d:5f:ee:3f:02:
                    b0:36:2a:af:e7:92:a7:98:43:0f:0c:82:a7:2c:04:
                    08:40:57:fe:2d:9b:42:56:d5:5b:e4:b3:6d:82:68:
                    34:b5:5d:17:4a:13:ae:f2:b5:2a:9e:71:d1:68:4f:
                    77:57:2b:30:51:ac:e7:73:5b:50:f9:0c:66:10:81:
                    86:95:70:1a:11:58:e7:2c:2d:07:70:07:31:47:12:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7C:44:9F:85:6F:A3:B4:88:F2:76:98:6F:AC:F6:78:67:59:AE:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:14:2d:75:4f:36:0a:89:ce:07:dd:28:98:54:10:64:fe:e9:
         76:48:4d:d0:61:05:da:22:8b:1a:57:e7:c7:37:a8:e3:3b:03:
         aa:6a:94:63:09:f1:53:2c:a8:3b:81:99:94:58:47:bf:00:bb:
         3e:7b:2b:eb:7f:bf:f2:c0:f2:9f:6c:48:a9:43:71:b8:31:c3:
         9e:5e:64:ca:6e:31:9b:79:51:b5:9a:af:b9:0b:8a:37:2d:fb:
         d6:b6:f0:5a:5a:4f:6d:d9:35:49:87:39:be:0a:ad:68:e0:38:
         cb:f3:99:14:1b:3a:d8:65:e6:1a:54:e4:5c:47:24:36:0a:c9:
         f7:98:9c:9d:9c:77:a9:44:93:8c:08:0e:29:f4:c8:1e:8c:52:
         39:37:3e:5b:1e:cb:d1:22:7c:68:f8:07:1e:ac:7d:84:21:25:
         09:7f:5e:17:37:dc:f3:c9:fd:79:28:70:be:67:e7:0b:33:c6:
         03:f7:35:4a:7c:4e:0b:fd:51:3d:7d:37:f6:00:30:d0:fb:7c:
         19:27:a2:e6:73:22:62:fe:28:ce:42:49:8a:ca:69:fe:eb:ba:
         99:5c:30:bd:36:a4:48:a5:22:07:58:16:e1:b4:39:b6:9a:ed:
         a7:ba:d0:02:5b:b3:0c:97:2f:4c:18:ef:f8:fc:2a:d9:6c:19:
         99:7d:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:17 2026 by rpki-client