Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
File:                     b573f29f-c08e-304d-92b2-cd55eb7addda.roa (raw, json)
Hash identifier:          cJrBKy1DCs8Rom89dnYB4h4ujbgth5XiAf4oV6oVHyY=
Subject key identifier:   A4:69:E9:35:DA:06:71:D8:EA:57:56:D2:15:D4:C7:2C:E5:F5:3B:55
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F4328584D80FFF95C850BE93ABFAEEA00
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     40244
IP address blocks:        2604:7c00:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f9:5c:85:0b:e9:3a:bf:ae:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=5fbc91ef-86f1-4947-afb7-92e27c43b34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:13:e1:97:e7:7d:99:92:0b:a3:ab:a0:ad:
                    cf:6c:eb:26:14:a8:ce:12:d7:52:9f:35:ec:93:b7:
                    dc:40:31:e6:66:4a:41:19:ec:5b:bc:1f:44:14:02:
                    93:0f:cd:24:29:6c:b5:0d:3f:25:a5:bd:12:92:ed:
                    9a:74:f6:71:14:25:30:50:3b:4b:f3:ee:68:38:d2:
                    2a:57:55:ee:ac:19:87:e6:ac:cf:f1:af:ce:67:db:
                    6f:bb:b8:3e:97:f9:03:95:49:d7:f4:8b:07:3f:47:
                    cc:6d:c0:a6:73:e9:d6:e3:bc:8c:c4:19:b3:b2:57:
                    e1:a5:92:a9:9b:45:30:69:75:f2:8b:47:3c:f0:be:
                    5b:c2:95:cd:ad:8a:eb:03:9e:e1:af:37:7d:05:cf:
                    cb:17:da:96:d7:16:76:8f:e3:66:3e:d9:6b:e5:23:
                    98:9a:99:99:2e:ac:86:2a:ed:dd:aa:9c:19:46:47:
                    29:c6:01:e8:3c:a8:a4:d8:79:b9:3f:73:9b:0d:63:
                    ad:57:2f:c9:cf:97:aa:46:fb:86:8e:26:75:18:92:
                    6b:30:8f:17:4c:53:f3:37:99:8c:3a:7d:f5:1f:6a:
                    40:0e:0b:07:e3:f9:ba:28:90:6b:6b:d2:b3:5f:0d:
                    ed:c1:85:24:c3:4d:3a:39:be:d7:45:b9:a3:be:82:
                    82:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:E9:35:DA:06:71:D8:EA:57:56:D2:15:D4:C7:2C:E5:F5:3B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7c00:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:5b:2a:8a:59:10:a1:d0:77:3f:0d:e5:df:80:51:c6:b8:
         dd:e3:5e:8b:59:8b:b8:c5:8f:10:77:ff:92:c9:e5:e0:3d:c8:
         b3:ea:dd:d7:f2:62:00:0c:f6:4b:07:20:7a:fc:c6:01:d9:d9:
         49:9d:d9:b8:b8:00:9b:9a:e1:5d:7f:1d:09:e5:d7:a3:4b:15:
         18:5a:6f:41:d6:5c:95:fd:33:c7:4c:f7:5c:d2:3e:bf:d7:89:
         b3:44:ed:69:8d:2b:fe:47:00:73:ea:5c:ec:14:c2:84:7f:c7:
         0b:68:8f:0d:82:ea:a7:6e:52:1b:c9:f7:30:2c:a9:55:9d:f1:
         c4:5f:9f:1a:dc:2d:99:41:5f:88:ca:49:09:16:aa:01:1a:54:
         fe:8c:0b:a4:7e:37:6c:ac:25:d4:75:26:ff:1f:21:76:d7:57:
         d0:6c:ff:a5:34:2e:34:99:de:3f:22:ac:7d:8f:4f:e6:ea:20:
         b1:9c:7a:1b:e0:f4:72:09:c0:2f:8a:8a:26:b9:c8:4f:f0:8a:
         40:de:59:ea:ee:b9:32:55:83:7a:0e:92:cc:48:74:fd:95:b9:
         db:a7:f5:06:50:81:3d:49:45:95:14:ea:95:50:e6:fc:2b:a6:
         ae:ab:34:0d:44:3d:9d:12:eb:21:5b:a8:76:8c:55:4e:ed:c4:
         d4:d1:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:33 2026 by rpki-client