Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa
File:                     c9de73e4-ff6f-3544-9755-08941b2cafbb.roa (raw, json)
Hash identifier:          OJSM6kCWUDgkFGeSd2VD7h/1BAETQn8tm+zIkBqmt/o=
Subject key identifier:   55:40:70:5F:DF:49:5C:45:84:72:E5:6F:18:99:61:01:79:A4:F1:F2
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584D04E23FD7EE7B93CC33085B00
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     7764
IP address blocks:        2610:20:2020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:3f:d7:ee:7b:93:cc:33:08:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=d19596bd-2d8a-4f88-b755-6419201412b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:a2:8f:a0:2e:d7:f5:50:fe:4d:dd:1d:08:
                    b2:83:14:b9:15:f5:02:01:df:78:0a:14:6c:59:25:
                    7a:6d:a5:14:ee:65:ef:50:66:c1:ec:f6:4b:a5:b9:
                    d7:7d:5a:d3:43:01:a0:dc:1b:23:d6:8b:55:ce:34:
                    d3:1f:92:74:8a:0c:04:39:45:6c:4d:fe:b3:48:57:
                    8d:57:a9:98:71:14:6e:a8:f3:26:86:b4:2a:26:99:
                    98:da:32:32:11:de:a5:db:62:3c:bd:18:27:05:aa:
                    ff:79:06:02:42:0e:1c:8e:d5:07:99:31:b9:2c:90:
                    a7:3c:1e:e3:4b:e7:c9:90:af:c8:d7:33:ed:90:7b:
                    25:c7:bf:e6:ea:be:55:90:47:f0:e3:0e:17:13:71:
                    d8:2e:0c:e9:84:16:8e:95:53:cd:2c:64:55:10:8a:
                    78:e9:3e:4c:5e:a6:02:6f:cb:ad:8e:38:e2:52:a9:
                    f3:d2:e5:12:c9:f9:b2:63:d5:fe:af:d0:27:7a:86:
                    77:92:f0:29:65:15:cf:b7:21:ff:9c:da:28:fc:7e:
                    e6:f8:54:36:4d:47:d1:05:65:17:d9:ab:9d:7a:63:
                    2e:36:43:8e:20:8a:f3:7d:7f:d5:1c:1c:95:90:78:
                    c1:e8:41:04:72:df:0d:26:da:0a:1b:40:bc:86:48:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:70:5F:DF:49:5C:45:84:72:E5:6F:18:99:61:01:79:A4:F1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:2020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d7:52:35:78:03:7b:2c:a4:f3:3c:d0:47:1d:1a:57:a3:02:
         b6:a6:14:83:0b:ac:dd:2e:33:c9:ad:5f:8d:16:08:98:80:ba:
         78:74:a4:bf:4c:e1:8d:10:67:bb:ba:e9:91:db:68:dc:8d:15:
         f0:a5:7f:26:4b:5b:c7:4c:bb:d1:28:43:58:d8:35:ac:28:90:
         78:e2:6a:fa:ef:15:09:c1:6d:11:2a:1d:10:13:7f:5d:38:5e:
         91:f1:26:63:30:e0:18:49:9b:b7:25:06:38:d8:0d:c3:3b:4f:
         ca:d3:8e:26:58:03:da:d6:70:40:35:be:30:77:b1:89:3d:cc:
         a5:79:a5:2f:8b:be:14:57:86:c5:16:a1:15:dd:08:5d:a9:d8:
         1d:bc:e6:67:eb:36:6b:54:43:84:61:6a:70:44:ae:3c:5e:39:
         3a:2f:0f:22:4a:05:73:e7:d7:b2:2e:e1:b4:79:b0:61:41:fb:
         44:9f:04:95:6a:23:d5:38:95:e7:cc:ff:cc:c7:11:6a:27:0d:
         e3:d4:bf:5d:c4:65:ba:31:27:f6:9f:59:cf:a3:49:b5:b0:66:
         f9:e5:38:d9:79:12:4e:b9:b5:87:27:14:c5:e7:43:4a:a9:c2:
         7e:42:af:1f:c5:b3:b3:8f:33:d9:cd:73:e5:e4:6b:48:d8:56:
         f8:61:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:22 2026 by rpki-client