Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/fa635a2e-b015-3188-9acf-3185a86f5477.roa
File:                     fa635a2e-b015-3188-9acf-3185a86f5477.roa (raw, json)
Hash identifier:          DV+KTGEM+nqiC47K9tG4A9NIDRhf7ZE3D+oz03qPd9U=
Subject key identifier:   CD:2A:3E:46:C8:C8:77:C8:86:D8:D3:1D:BB:EF:9F:68:E4:8A:1E:4E
Certificate issuer:       /CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
Certificate serial:       010D0C9F4328584D59EAB160963A244739CE9D20
Authority key identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/fa635a2e-b015-3188-9acf-3185a86f5477.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        2620:31:8004::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:b1:60:96:3a:24:47:39:ce:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=93328593-ca61-47e1-8ed7-7fbbfcf46cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:a6:b4:e9:0c:8d:df:6f:57:0e:a9:59:8f:
                    08:e7:f2:4c:01:58:4e:0b:c9:31:4a:00:e9:d8:d8:
                    e0:05:8d:81:ce:89:89:6a:33:33:98:7a:88:bd:79:
                    55:0d:17:0d:2b:92:ae:64:77:d1:f5:f6:74:87:40:
                    e2:11:82:69:d8:27:02:e4:97:a6:37:16:fe:0a:63:
                    30:69:33:01:4c:ad:47:32:9f:ae:d0:91:70:24:76:
                    2b:8a:f8:0c:c7:c8:97:a4:00:fd:75:85:dd:65:8f:
                    9b:cd:90:9c:0a:ba:bd:98:63:cf:13:2c:0d:f2:9b:
                    43:62:52:4e:35:75:5c:d8:a4:33:d4:19:4f:ef:c7:
                    de:13:2c:bf:52:67:48:47:e0:90:a9:d7:87:f6:33:
                    98:fb:6a:52:57:ea:61:94:ca:b2:77:31:96:c9:a1:
                    c6:4f:ea:aa:cf:00:de:f2:6c:32:b0:41:c4:dd:2a:
                    b6:83:d5:be:c6:10:8a:23:62:59:d3:b2:9b:6e:e9:
                    99:69:73:1c:4a:6f:95:2b:38:bf:55:02:a9:b9:c5:
                    0e:9e:a8:ef:82:32:13:9e:1b:41:ca:7a:48:6b:90:
                    9b:d0:78:19:40:e3:18:f6:52:01:7f:6c:25:3f:94:
                    5c:fe:e0:17:44:85:2b:49:ba:d7:1b:e5:ab:d1:ef:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2A:3E:46:C8:C8:77:C8:86:D8:D3:1D:BB:EF:9F:68:E4:8A:1E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/fa635a2e-b015-3188-9acf-3185a86f5477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl

            X509v3 Authority Key Identifier:
                keyid:7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:31:8004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:76:48:1c:96:aa:fc:3d:69:c5:f2:3f:e2:70:b9:c9:b5:ac:
         48:18:b1:61:05:60:dc:91:ec:ee:a9:8d:7c:90:b8:ec:96:49:
         be:1c:21:1d:0f:f3:ba:a1:79:41:db:1d:c7:15:83:d6:7e:19:
         e4:ed:e0:fc:7a:ea:48:94:60:10:36:b1:25:25:7a:8e:2e:3a:
         52:c6:29:19:c0:e3:a2:ca:29:0c:d2:27:50:4e:53:b1:ad:c2:
         b7:bb:06:10:51:fc:94:fd:65:77:36:2c:23:ca:36:40:c9:5b:
         74:80:83:18:80:7c:3a:56:c6:f6:cf:8b:91:ab:c7:7e:6f:72:
         18:cf:67:a8:12:57:5a:61:4f:95:09:cc:e7:a1:0c:ec:48:b4:
         85:1f:99:dd:3a:1a:73:d4:65:e5:dc:8e:06:53:e8:d3:26:df:
         6f:42:63:b1:07:4c:d1:9d:ba:8d:83:0d:8a:c0:8e:55:7f:9b:
         30:87:35:e5:0d:3a:96:6a:be:03:7f:68:55:fd:67:f8:6e:7c:
         d1:6f:52:6a:9e:4f:88:35:27:9c:3f:62:c1:69:ce:6d:f6:64:
         87:62:37:c2:d3:28:47:b2:ad:5d:09:c4:44:a1:05:c2:c5:86:
         18:61:18:17:e2:c3:ae:2e:cb:e1:4e:eb:53:14:5e:d9:54:e9:
         88:7a:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:28 2026 by rpki-client