Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
File:                     8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa (raw, json)
Hash identifier:          Po2em7S/BV+DEsUKSSEyaVRaJZNGqiZvIlU0/qi7Hls=
Subject key identifier:   8B:BB:5D:F2:8C:1E:E6:81:D2:5B:80:94:7F:BC:15:DD:EF:BB:50:03
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584D746FC1A3719273A1BDB74D80
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     20454
IP address blocks:        2607:fe80:1000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c1:a3:71:92:73:a1:bd:b7:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=9aec0c47-c5f5-4403-8f21-c60122533a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dc:e2:26:bc:00:d6:98:c6:7b:56:f3:eb:e7:
                    63:c5:c2:bf:f8:c2:9e:99:90:9b:a6:0e:3a:d3:94:
                    ba:ab:c1:56:fd:b7:78:73:97:b1:47:f6:aa:b3:b6:
                    cb:5a:d7:91:68:06:64:77:e2:e0:c4:59:fd:b9:14:
                    fa:f7:78:3c:f4:a8:b4:58:4c:42:c2:54:af:db:7d:
                    fb:49:9d:f4:ba:d8:28:77:81:91:a1:df:d8:a8:94:
                    d5:81:d0:3a:7f:57:64:7c:83:8c:e8:5c:61:8e:a3:
                    6e:42:69:7c:05:17:0c:11:9d:a7:96:f1:51:25:f5:
                    ee:78:ab:27:68:9d:e7:50:c8:b5:f6:39:2f:0e:01:
                    f6:4f:d3:ab:40:b8:f5:69:de:84:6c:9b:e8:f6:a6:
                    75:59:45:80:07:bc:7f:de:5c:2f:c6:1b:78:37:72:
                    30:ac:b0:ed:51:cc:67:14:59:84:fe:bd:7a:08:2e:
                    72:64:8d:f8:92:81:10:70:49:c1:b6:6c:b4:6b:6f:
                    2e:69:ce:9d:69:e4:d6:5e:83:36:8f:28:72:48:52:
                    75:e3:ce:32:81:d4:92:87:1f:9d:8b:33:3a:5c:b5:
                    94:a0:f3:be:3e:9b:cf:97:e7:dc:36:10:22:ee:1e:
                    56:bb:7d:6a:1b:dc:7c:0d:7f:4e:21:97:1c:66:7e:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BB:5D:F2:8C:1E:E6:81:D2:5B:80:94:7F:BC:15:DD:EF:BB:50:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe80:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:01:1a:d1:5a:2d:98:ee:ef:3a:95:e0:6c:f9:07:8a:0b:11:
         e6:8a:dd:a8:9b:18:61:46:6f:5a:31:76:0d:5e:7c:8b:78:1d:
         61:7a:22:23:70:d6:88:6e:67:2c:a5:bd:f5:03:ea:73:4c:d4:
         d7:f4:a9:06:fb:8c:04:6a:3a:4c:30:0c:56:c8:5f:c8:4c:13:
         cf:a5:48:d4:17:69:10:fc:b6:51:f1:29:cf:ed:c5:f5:69:da:
         23:d5:e8:49:8d:1c:16:16:59:ff:31:ce:a5:e5:30:a3:98:3f:
         47:04:87:d1:b5:0b:62:1f:43:27:9e:ec:64:6e:75:bf:4a:f4:
         f1:d8:ec:a2:00:0c:29:7a:3c:1f:e5:e0:9c:ae:fa:62:4b:db:
         99:0c:da:51:3a:6f:56:de:c5:0e:a0:eb:fd:4b:ce:7a:cd:06:
         81:55:6f:86:d8:16:7a:73:24:72:6b:68:bc:d0:e1:c8:63:03:
         58:60:7e:2f:b6:d4:0f:c6:5b:51:72:b9:4c:6e:4f:b3:c9:1c:
         7f:d8:91:1e:90:2c:f2:0d:c6:36:8b:1f:0b:d1:ec:6b:e6:87:
         ad:21:2c:6f:b8:84:b2:74:60:f0:9f:85:72:5e:b2:14:9d:61:
         88:ae:5b:e2:e5:cb:d4:91:65:b4:b4:64:68:92:bc:90:ab:b0:
         9f:20:61:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:43 2026 by rpki-client