Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
File:                     b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json)
Hash identifier:          tN+kGRdHD/cU7UpNSIxrwUK5r563qzNPN4FIusNktww=
Subject key identifier:   5B:8F:97:05:F7:18:70:D6:29:5E:AE:11:0C:BD:C0:10:9D:C8:0F:50
Certificate issuer:       /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
Certificate serial:       010D0C9F4328584D75D52D400C38BCD84433CF80
Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     53507
IP address blocks:        2604:56c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:2d:40:0c:38:bc:d8:44:33:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=cd7b68cd-7f26-4b79-9c3d-84b3107af240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:69:10:5f:c8:0c:38:9e:64:a0:48:75:b9:
                    d5:de:23:af:21:e3:df:bb:60:bd:6c:21:16:3f:4e:
                    2d:10:9a:5d:ff:b2:58:c4:c4:c4:28:55:2f:f5:63:
                    8c:74:3c:c6:8e:f3:92:1e:77:c6:13:73:b6:b5:ec:
                    0e:b6:17:50:6d:b1:9f:1c:fc:9e:0e:87:1c:a8:64:
                    33:2e:00:a5:60:de:2a:b1:c4:47:77:7e:48:a5:70:
                    c2:fe:7f:9d:48:1b:d0:cd:4f:8d:3e:43:5f:3f:81:
                    b5:39:48:14:35:13:86:1b:da:9d:7b:84:60:51:00:
                    cb:72:23:28:77:b5:0f:b2:c7:45:81:c8:68:5f:62:
                    fc:76:3d:44:bc:d4:74:4a:21:42:60:58:67:fd:5a:
                    21:27:bc:1a:b8:65:13:fa:ce:87:8d:86:8c:4b:9c:
                    24:7b:e9:c3:86:fe:b4:39:10:e3:dc:dc:b2:ac:a2:
                    f5:79:0e:27:cd:81:5a:8d:0a:50:a1:c2:e1:61:bf:
                    52:2e:cc:18:7c:1a:8b:8a:9b:f9:0f:ea:5d:4d:e4:
                    cf:5e:83:39:f7:18:04:e5:f5:9f:de:dc:b4:7f:8b:
                    3f:62:e1:49:6e:1b:9c:89:de:91:48:12:7d:b8:53:
                    f7:fb:55:ab:e1:4a:f9:0e:34:7a:54:07:c6:aa:4c:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:97:05:F7:18:70:D6:29:5E:AE:11:0C:BD:C0:10:9D:C8:0F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl

            X509v3 Authority Key Identifier:
                keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:56c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:46:a1:a4:bd:c9:5f:6f:ec:c5:67:6c:ee:1f:53:6a:ca:
         57:b7:3f:eb:34:61:e9:d8:55:b7:90:b3:dd:d7:1c:2e:a3:14:
         f1:2b:fa:b9:df:ef:7e:a8:a7:01:67:6a:54:1f:9e:ae:3f:ec:
         1d:38:80:45:7a:74:22:59:c3:86:49:e1:0d:cc:bf:66:f1:4a:
         22:5f:20:02:cd:7e:b1:d2:86:0f:58:56:61:19:a8:5f:49:56:
         5e:59:6f:0b:c5:f5:60:45:53:41:41:97:0b:de:7e:c6:a8:14:
         22:34:49:7e:2f:da:5e:9b:0b:82:ed:bb:4b:69:a8:55:85:52:
         13:dc:86:3d:aa:67:51:d1:3f:7f:21:4f:55:5f:17:c2:25:d4:
         79:61:12:93:de:59:32:90:0c:37:f8:52:1a:7b:9d:22:42:52:
         17:82:f5:4e:dd:c6:81:17:66:54:92:5a:d3:47:be:9c:e7:77:
         76:01:e1:b7:64:85:7b:f2:f3:23:58:17:3d:df:ac:94:93:2a:
         78:52:7f:4a:2b:80:5b:00:93:8e:a0:f3:63:84:e9:c4:8b:4e:
         9b:5c:fc:84:c3:e5:67:eb:3f:4f:02:39:54:70:d8:fb:90:1d:
         3b:c1:0d:c0:ee:9f:84:ef:40:73:b0:1d:f7:ac:41:d5:f8:0a:
         ba:09:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:34 2026 by rpki-client