Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa
File:                     dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa (raw, json)
Hash identifier:          kvV/MG4W8rLoLB4ar0bJYpEb464XCjOFwq5fMOZTTAE=
Subject key identifier:   7C:B6:56:6C:F0:E5:BB:F1:E7:19:F5:27:E1:31:84:D4:55:4E:06:60
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584D6AAA7BBCF2756E451CCBE400
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     43181
IP address blocks:        2604:28c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7b:bc:f2:75:6e:45:1c:cb:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a207f6bf-c03d-4a37-8cbb-8c6097d3fdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:19:16:23:f5:0d:04:95:1d:de:e9:90:40:
                    b7:db:7d:05:ea:c6:2b:d0:c1:ee:c2:e1:6c:fe:33:
                    a6:f1:2f:b6:dc:c5:8c:35:30:b4:df:03:51:d9:2d:
                    96:11:98:1e:56:96:34:b1:93:5f:78:7b:df:40:d6:
                    fc:f9:cc:d2:40:b5:b9:39:a4:b7:95:1f:1b:d6:c5:
                    32:30:19:70:4e:7e:39:3a:0b:c3:19:14:f5:09:d3:
                    aa:43:da:2f:76:38:22:06:a1:32:23:c6:f7:b7:7b:
                    71:45:98:c1:d1:3a:e2:79:c4:20:9f:8c:3e:47:84:
                    a7:fa:6b:7b:1f:ec:e6:e6:bc:96:65:33:d5:d8:11:
                    b0:e8:b1:26:17:9c:8f:14:50:34:eb:f9:4e:7a:d3:
                    0d:ab:c9:fc:26:6a:7c:79:25:07:6f:97:e0:cb:1d:
                    e5:28:5e:69:0d:03:49:17:a1:54:db:db:dc:9f:2f:
                    71:68:ac:72:47:a7:ec:d9:c7:84:ad:5e:df:76:3c:
                    af:d9:11:05:12:aa:a2:a4:c1:a1:38:ab:ce:14:b8:
                    52:b6:39:0a:e7:aa:81:55:82:0e:e2:b1:45:e3:f4:
                    ba:fb:b6:81:22:5f:61:cd:ef:e1:9f:0c:f4:47:b8:
                    72:a1:00:7e:6a:d5:1a:eb:fb:0b:68:70:9d:bb:52:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B6:56:6C:F0:E5:BB:F1:E7:19:F5:27:E1:31:84:D4:55:4E:06:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:28c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:0c:b2:dc:d6:7e:dd:a4:c7:da:a3:20:39:a9:30:e4:a5:
         e0:f2:c5:c7:25:b2:dc:21:bc:d4:b8:82:5d:8d:5c:a8:ac:44:
         26:78:ca:ef:78:a1:4b:e9:43:e1:aa:8e:e3:ca:42:c5:a2:c5:
         60:58:65:00:97:b4:6b:50:76:b2:c9:ae:4a:76:fa:a5:a7:44:
         49:a7:d5:34:32:69:b8:23:62:21:36:e1:72:49:76:ae:26:5e:
         c7:38:4d:f1:a6:35:a1:50:22:0f:fb:b8:80:96:76:28:10:8b:
         89:16:ba:50:87:66:bd:3c:75:48:c5:ea:1c:03:5e:64:ae:5d:
         14:29:4e:07:0b:a3:fb:27:58:21:3b:eb:bc:f0:19:28:a8:04:
         53:63:09:94:e8:c3:73:d8:e5:0a:ed:53:1e:bf:c3:25:ac:cc:
         e6:66:57:e7:ea:9e:9e:f1:15:db:c9:53:0b:72:8b:15:de:e9:
         20:80:43:4d:da:0b:97:f1:7e:49:ec:12:68:79:f6:8e:8a:a4:
         4b:14:a6:37:28:6f:74:6a:82:f7:17:2d:0c:b2:3d:af:f0:34:
         87:03:db:27:e3:65:5d:71:02:12:64:db:37:e1:33:6a:24:da:
         d3:f2:6e:c5:f1:c2:df:04:46:de:9a:dd:ce:df:ec:d6:18:8b:
         68:4d:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:19 2026 by rpki-client