Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa
File:                     de7bd649-b19a-3283-9c2c-13c94d00554e.roa (raw, json)
Hash identifier:          EVuQKR4pSh6sKP7UJ+J7k3pJ3rx2voHN4emPgJFpd1c=
Subject key identifier:   80:34:D7:80:14:7A:71:24:18:F8:16:8A:7A:F6:1B:C0:5C:0B:D6:C9
Certificate issuer:       /CN=3d318897-eed6-4fd9-a18c-91026968b3e2
Certificate serial:       010D0C9F4328584D091261D9152EEBBF718E7A80
Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     800
IP address blocks:        2604:fdc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:61:d9:15:2e:eb:bf:71:8e:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=8a368fca-c748-4e4c-92a7-442a10484df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:ac:34:f6:99:d6:6e:00:36:22:44:ae:21:
                    ba:b7:03:92:f2:6e:e4:ad:18:4f:95:a2:c1:6c:f3:
                    01:8f:57:a5:0d:a8:2d:f0:35:10:5c:2d:1a:4c:98:
                    a6:6d:48:61:2e:e8:cb:b9:00:58:40:a3:38:0a:ca:
                    8b:dd:83:a4:84:09:74:df:35:71:f5:a9:e4:33:2f:
                    8a:49:f3:e4:8d:a0:9c:66:88:b8:39:0d:06:9e:f1:
                    05:42:2b:37:ef:43:9f:89:d9:f8:8a:b4:49:14:b1:
                    97:17:19:11:58:91:71:f9:9e:93:82:03:c5:40:c3:
                    c7:9b:e6:05:76:a8:0e:da:7e:7b:84:57:8b:37:ca:
                    2d:18:50:e5:11:03:ed:d5:bc:20:dc:2a:4a:65:f9:
                    9a:1c:e1:a6:dd:0a:fe:3f:39:0d:22:32:e2:34:24:
                    20:6d:a7:c3:bc:73:18:28:10:8d:11:51:43:6c:e8:
                    76:ff:dd:37:2c:64:75:b5:a0:e1:34:49:7f:e7:87:
                    1f:3b:87:07:b0:46:9c:77:f2:0e:00:c1:53:2a:87:
                    ac:6b:88:1b:7d:62:ea:65:8f:36:5f:c3:a9:b0:83:
                    7d:b3:ea:ed:34:83:8e:e2:49:3c:8a:55:47:e6:f1:
                    b1:9c:8d:13:6e:48:a7:e4:70:7c:a3:63:47:47:6a:
                    3a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:D7:80:14:7A:71:24:18:F8:16:8A:7A:F6:1B:C0:5C:0B:D6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl

            X509v3 Authority Key Identifier:
                keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:82:fd:d8:37:46:80:63:c3:12:e1:6a:77:9f:b3:b4:0a:
         fd:61:72:e7:a9:1c:4f:ec:71:8d:f4:2a:c5:7d:4f:35:4a:fe:
         b7:10:78:14:1f:0e:6c:63:e7:0a:1b:c9:56:d0:f0:97:2b:62:
         66:33:e5:5a:f9:9b:f6:a5:70:c3:5c:aa:de:9d:84:c0:fe:8f:
         e3:85:49:0a:b5:9a:2c:15:0e:b2:53:f1:e0:9a:4e:5e:6e:1c:
         59:f4:47:49:e7:66:47:16:73:5e:e6:c8:17:cf:b3:b8:06:73:
         9f:b5:7b:2c:0e:48:f0:28:4b:f1:49:be:4e:31:8e:cd:ea:08:
         7d:58:9d:53:53:e8:47:77:4b:bd:97:bc:6e:b7:72:73:02:a1:
         9b:94:3e:5f:c3:5a:fe:87:17:fe:d3:29:64:a3:39:8f:22:43:
         68:a7:1c:e2:87:7b:d0:35:3f:00:59:5d:8c:2a:82:c6:e4:95:
         b0:ce:8d:7d:19:66:5f:6b:be:0c:ad:97:2a:88:0d:9f:54:25:
         bb:68:c8:b7:af:2d:3b:7e:26:47:ad:20:e8:d8:46:f0:52:27:
         85:eb:93:34:5c:10:fb:72:6d:ba:a5:16:18:c7:70:a5:85:10:
         20:8d:04:7b:ba:b4:6c:48:80:3b:85:76:dd:17:1b:9b:22:e9:
         b2:c4:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:38 2026 by rpki-client