Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
File:                     c983825e-c67d-363b-8674-4ab78008496c.roa (raw, json)
Hash identifier:          ya24jB+fxaxc6WqcesrWlp5OPFXPHIvkOU7o+Xa4/bU=
Subject key identifier:   F7:25:A3:78:16:32:FB:EC:C2:9D:FE:2E:13:84:D1:02:29:6F:D8:95
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584D7B6A7DC5AAC2F12A97ED1880
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     20205
IP address blocks:        2001:4950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7d:c5:aa:c2:f1:2a:97:ed:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=859e545b-09f9-48f7-9776-58864fbd5bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:fb:1d:06:11:08:af:e9:64:09:da:db:ea:
                    a3:36:97:30:d9:ca:a5:9b:c6:2f:6f:8e:ee:7c:ca:
                    39:6c:92:a6:3c:93:c8:75:4a:f3:67:52:34:f2:57:
                    a9:c3:61:1e:ad:fc:cd:6b:52:0f:c0:32:d6:6a:5a:
                    1d:fe:e7:ff:75:87:7b:cc:16:3f:d1:8e:fa:d1:4f:
                    e5:a0:34:e6:0e:24:99:78:1b:9b:d4:74:07:5c:38:
                    3f:92:5c:ca:ed:57:32:cb:f5:79:3a:b0:64:39:e0:
                    e8:46:2b:8b:45:03:b6:61:d7:84:10:ce:9c:85:f7:
                    8b:22:62:59:64:35:70:a1:6f:88:82:9a:fe:88:f0:
                    44:7f:26:2d:c1:f2:cf:e0:b9:35:a3:5e:bb:09:99:
                    48:1a:bc:df:d4:de:8a:ed:f8:05:69:f9:01:24:91:
                    f8:6c:fa:70:85:ca:a4:4c:a2:7a:1d:01:49:e9:f3:
                    8c:ed:6d:81:fe:2f:92:57:62:2b:ef:de:d1:4a:34:
                    b3:4d:8c:53:4c:3e:3e:9c:44:2b:7c:e6:8a:9f:74:
                    1b:84:92:fb:b7:16:2d:94:98:b4:5e:41:02:97:ad:
                    7d:de:4c:3b:6a:3e:70:1f:ca:3d:ea:0f:33:fc:c0:
                    17:c7:f4:a7:48:b0:8b:58:1e:94:e6:c6:fa:60:41:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:A3:78:16:32:FB:EC:C2:9D:FE:2E:13:84:D1:02:29:6F:D8:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4950::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:14:b3:6b:57:8f:5c:ce:e4:df:96:cb:0f:3b:57:18:fa:13:
         97:61:ca:db:e5:d0:a3:12:03:3e:21:34:67:8f:b6:70:ea:ce:
         d5:a6:b2:f2:57:3c:86:43:40:49:dc:12:d1:24:7b:46:00:9a:
         9e:0b:5e:4d:1d:e6:3c:e5:d9:e1:0d:16:83:18:15:87:fb:cd:
         0f:c5:08:65:26:e3:20:10:ce:68:80:10:11:48:88:d3:d0:cc:
         31:15:b0:93:35:df:de:cd:43:c3:22:c1:e4:2f:49:52:46:03:
         65:ce:1e:cc:8f:07:5d:74:5a:43:7a:8f:07:60:c7:59:5a:08:
         49:94:6a:3b:3b:ba:b2:20:26:f5:50:f3:87:ba:d4:05:e7:a2:
         db:d1:69:d8:70:c8:d4:3f:5f:2f:3c:36:34:ed:76:d0:8b:0d:
         69:34:43:89:da:58:3a:51:38:0e:17:29:bc:11:4d:3f:3c:53:
         ba:68:77:ee:5b:03:fd:0b:89:a0:05:72:fd:7d:ea:3e:a2:61:
         43:5c:1c:14:59:1b:e9:bf:77:1c:75:f2:8d:33:2a:be:57:1d:
         00:80:34:ca:f6:81:e8:47:f7:e6:49:43:34:94:18:64:8a:a3:
         65:d5:96:25:1a:e3:27:d0:5f:65:67:08:68:52:aa:1a:ef:ec:
         48:0c:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:35 2026 by rpki-client