Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa
File:                     d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa (raw, json)
Hash identifier:          TFBg2ueobDebzD73KJor5dH0DMfVlccPZwYkbZhrVtk=
Subject key identifier:   96:86:5A:32:67:7B:01:85:D3:2F:FD:17:59:1E:C2:9E:66:A3:F2:0D
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584D4D5A76D004FF166C4CDDDBC0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     11260
IP address blocks:        2607:fbd8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:76:d0:04:ff:16:6c:4c:dd:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=d81c12db-b511-4b51-a1fc-8080be64a461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:23:30:48:e8:8f:7b:93:50:1f:a0:12:4b:
                    71:25:7f:cf:f9:9b:84:29:d4:d0:4e:d6:ea:75:b9:
                    73:fb:29:fe:4b:4e:79:88:aa:21:1c:1f:a7:0d:4c:
                    39:6a:30:fe:a2:96:83:da:41:5a:f9:6d:63:d2:8f:
                    64:b7:7e:54:3f:65:ed:9e:ce:98:ec:ce:39:73:26:
                    e7:42:56:ab:b7:0e:5e:fe:a6:e5:d9:ee:1a:97:54:
                    27:53:f0:ff:9c:7e:a8:58:8f:5d:ad:b8:4a:6c:07:
                    ad:4f:e5:43:f0:c6:3a:86:89:9f:5b:ac:c3:91:ad:
                    7a:b6:1a:a4:81:e6:e7:23:39:5a:d6:8b:93:dd:0a:
                    4f:44:0e:42:fb:9f:71:b5:42:85:f3:b1:27:15:91:
                    a7:6e:bb:e4:60:19:ef:7b:39:7d:b2:a4:3a:5e:98:
                    77:57:f6:db:2b:6c:f5:76:f7:a1:36:39:cb:c8:9d:
                    75:3b:87:2b:e1:e7:c1:25:41:73:49:d8:30:90:24:
                    d2:bc:ae:46:d0:f5:9b:89:1b:6c:ab:e4:17:b5:62:
                    91:b4:8d:59:27:99:ef:e0:03:be:ec:d5:9f:02:47:
                    f7:9b:59:78:7e:60:c4:47:65:f4:d5:58:4d:4b:24:
                    99:0d:51:32:a8:1c:07:bf:23:89:77:10:da:36:ab:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:86:5A:32:67:7B:01:85:D3:2F:FD:17:59:1E:C2:9E:66:A3:F2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fbd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:19:58:d5:63:66:e6:ce:30:49:7b:19:f3:c3:2c:93:c8:4b:
         b0:5b:24:37:7e:d5:ee:5b:22:8d:95:58:cc:25:30:29:cd:dc:
         ad:15:15:fd:c8:b8:cd:40:55:60:ec:e4:70:38:f1:a3:21:83:
         3d:c2:75:65:3c:06:a3:3c:d5:86:4b:96:6f:f3:f4:2c:c7:38:
         02:b6:6f:7f:65:d4:d7:a3:7e:70:49:62:b2:bb:4d:b8:cf:5f:
         af:c3:3a:61:17:c1:c4:2f:4d:64:6f:57:71:a3:1a:20:a8:3c:
         4a:ca:f1:64:83:17:ff:78:c6:cc:72:bd:f7:c6:39:f6:a9:e4:
         de:7b:a2:be:c3:18:25:95:6d:99:e1:c2:fc:51:42:3c:41:d5:
         94:05:06:f2:ad:0f:6f:3e:9b:ae:7b:8e:97:aa:ce:84:02:58:
         28:ca:76:fa:3f:1c:0e:9c:48:2f:02:f9:bb:62:1f:fa:a9:b3:
         fc:13:d7:7b:89:d3:89:88:ba:45:ae:db:0e:38:61:20:c5:f6:
         f2:d0:64:f0:93:f4:ac:42:14:dd:2c:6e:d6:8f:5d:7e:c7:c0:
         6f:2a:cf:2e:cb:66:0a:f1:72:18:bd:65:00:2b:7e:73:fe:41:
         59:08:58:a2:27:57:04:c3:b2:63:a1:a4:2a:36:a2:3c:dc:f5:
         81:03:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:27 2026 by rpki-client