Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
File:                     c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa (raw, json)
Hash identifier:          4/fZuNvftehLDinTJ0ToIrHoj0xchegG8o3HqfCdsJM=
Subject key identifier:   E8:38:D9:A3:94:87:39:59:B5:9B:07:52:8D:0C:D6:9F:EA:D1:C8:F7
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584D5234FDA2A84F6DAD05CFF680
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
Signing time:             Sat 28 Mar 2026 18:44:38 +0000
ROA not before:           Sat 28 Mar 2026 18:44:38 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     3477
IP address blocks:        2607:9bc0:1010::/44 maxlen: 44
                          2607:9bc0:1020::/44 maxlen: 44
                          2607:9bc0:1030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fd:a2:a8:4f:6d:ad:05:cf:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Mar 28 18:44:38 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=a0575afa-08b3-436f-a70b-b72592ea292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:d5:cb:6e:39:d0:51:c9:14:e1:b4:f3:0b:
                    91:57:40:dc:c3:fb:b1:cb:b8:84:09:7b:34:51:42:
                    ec:eb:5d:51:3b:4b:59:99:3f:41:47:0b:60:8a:19:
                    9b:c4:08:0c:06:48:f4:73:0c:bf:b1:4b:dc:8c:16:
                    a5:0e:46:21:77:6e:23:32:a4:97:20:6c:0b:74:e5:
                    8b:4e:ee:00:67:34:54:cc:5d:dd:05:81:5e:ee:c7:
                    e7:25:5b:e0:18:9e:6c:32:07:c5:a4:a4:ab:32:85:
                    37:e8:ec:6d:dd:67:2e:24:fa:57:81:c1:a0:c1:db:
                    d4:d7:76:06:0e:49:c8:b2:d6:31:f5:4e:4d:c4:68:
                    b4:6b:5d:e6:76:76:c7:10:a4:dc:48:32:3e:eb:00:
                    2f:5f:df:7c:6d:e1:65:51:b1:22:fa:91:f3:b1:5d:
                    c2:1b:53:d7:db:a6:cd:12:8b:dc:b9:0a:bf:46:55:
                    b7:13:c9:d2:a6:4c:36:8e:a3:6f:49:f1:40:a1:08:
                    bd:df:e3:4e:fb:dc:9d:e7:88:ee:de:34:47:ed:81:
                    a7:3c:6e:07:fd:d8:d6:ef:4e:89:52:bb:4c:13:43:
                    48:e8:43:41:0f:6d:22:89:27:ec:05:99:1c:fb:7f:
                    1a:a3:0c:8b:35:13:3a:d8:60:78:79:15:f7:e3:c7:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:D9:A3:94:87:39:59:B5:9B:07:52:8D:0C:D6:9F:EA:D1:C8:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1010::-2607:9bc0:103f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:37:6c:50:0d:39:0a:ee:4c:cc:73:be:21:da:40:5a:1a:72:
         d1:f4:52:a8:a5:54:02:f8:47:c0:7d:0c:bd:79:d9:a8:84:91:
         5d:85:4a:27:95:0a:2f:7f:fc:6d:33:c6:cf:ff:89:2a:67:6c:
         d9:8f:80:9c:f6:ae:ec:a7:89:59:f6:c0:a3:e1:16:ea:e6:40:
         b7:cc:2a:da:fc:5e:91:a2:ba:64:63:6f:c6:22:06:3a:f7:73:
         d2:e5:23:2e:da:da:f1:83:01:16:6f:df:c3:4d:ed:77:eb:df:
         8f:a4:52:0d:7f:0b:5d:90:50:f7:77:72:75:46:75:d6:d0:de:
         30:09:b9:b3:32:05:e5:5d:44:c6:7f:ec:5c:b8:f0:65:d4:16:
         3d:8b:7b:82:28:bf:84:9d:87:17:d7:c5:6f:d5:f9:0f:49:f0:
         66:b4:1c:92:59:c4:86:a5:41:c9:1b:bf:28:60:d0:ca:88:76:
         16:de:30:40:71:86:e3:02:e2:a0:dc:07:88:8b:4b:18:79:99:
         78:12:2b:e3:05:e5:37:6c:f6:3c:97:ba:8f:d6:12:9f:70:02:
         32:e5:30:65:a9:ac:0e:cd:3c:bb:3b:00:6b:ad:96:eb:eb:c1:
         b4:20:09:96:e8:bd:3f:b7:c0:c1:4e:5f:3c:00:23:a6:f6:28:
         db:ea:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:03 2026 by rpki-client