Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa
File:                     c30fd692-555a-30f5-ae22-c5c6ecece012.roa (raw, json)
Hash identifier:          fTn6PXtRy7DcXIUz08s79lVvQ/nGm5nq0iz1CwR/1i0=
Subject key identifier:   20:8B:B4:49:CE:A1:78:F7:4E:A2:91:00:B4:A3:37:CC:C5:5B:15:7B
Certificate issuer:       /CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
Certificate serial:       010D0C9F4328584D6EDA67A8468ED5F1611B1380
Authority key identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     401529
IP address blocks:        2607:e440::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:67:a8:46:8e:d5:f1:61:1b:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=43999863-6f73-4940-ab60-44ea8af06503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:0c:6e:cd:fe:fb:73:68:c3:ef:68:1e:95:
                    f0:33:7e:f6:88:83:af:71:c4:aa:15:fc:8b:89:29:
                    c5:3b:c9:5d:9d:6d:6d:e1:be:90:3f:5e:c3:08:61:
                    00:5e:28:38:8d:c2:62:ee:fd:ce:cc:14:57:65:9a:
                    c1:e1:bf:e9:74:07:73:84:ce:44:78:9c:56:b0:43:
                    9f:70:43:30:fa:eb:f8:f3:c3:17:98:98:12:e4:79:
                    9b:da:bd:2f:fa:e8:8f:19:ff:64:5e:3b:2e:63:23:
                    ce:ed:b5:61:b6:ef:3b:f9:fb:79:b3:22:74:c9:3e:
                    f9:a8:0d:ba:99:32:6e:03:07:e6:b0:04:0c:b7:ac:
                    ca:ed:6c:a7:b7:95:5c:9b:87:53:ae:d8:7b:92:6d:
                    fe:97:28:97:4a:a1:5c:24:9c:8d:ed:8b:0e:82:ee:
                    b5:52:25:44:57:a5:7d:3a:08:12:2e:ee:75:2c:f3:
                    08:0f:5d:bb:b0:8e:9d:38:1a:93:6f:c1:8f:a4:ec:
                    cc:56:ab:3f:08:ab:6d:aa:8d:e4:62:44:20:3d:35:
                    6a:65:87:32:85:a4:99:9b:a9:d1:33:3a:41:34:a3:
                    ef:39:74:77:93:26:e8:4b:2c:74:c0:33:96:89:3c:
                    7f:f2:e7:60:24:70:2f:4a:90:29:c6:6e:52:c8:95:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8B:B4:49:CE:A1:78:F7:4E:A2:91:00:B4:A3:37:CC:C5:5B:15:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/c30fd692-555a-30f5-ae22-c5c6ecece012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e440::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:78:43:68:e8:39:b5:c4:2b:b8:b8:01:e8:d0:9d:cd:fc:
         1f:38:ad:b2:f3:50:f4:c2:4f:4f:a6:c9:e8:fd:0b:0c:38:d3:
         dd:88:33:6f:b4:34:b4:ba:b3:92:66:1c:e1:eb:f7:05:ac:34:
         e2:28:15:6d:04:7d:1c:fb:3b:39:50:d0:a8:79:13:ed:42:de:
         67:37:96:12:61:fd:61:a5:dc:93:31:2f:9b:2d:d1:7f:b6:d2:
         78:42:85:61:aa:40:49:30:2e:96:03:14:38:4a:68:7b:e1:f3:
         58:63:a0:5f:af:cf:72:bc:26:03:c1:da:8d:72:41:53:36:5a:
         d6:b6:25:5d:8c:9b:d4:0a:cf:1a:9b:2c:c4:e6:14:46:20:d5:
         c0:4f:9d:5c:91:1a:a5:03:f4:8b:e0:1f:dc:42:5f:61:e7:ff:
         64:08:68:8f:76:2d:a3:80:d3:cc:ac:54:df:c0:a2:c7:a0:8b:
         81:a4:d4:99:c9:48:ba:ba:18:7e:5c:1f:7f:e3:fb:ea:33:70:
         b2:d5:91:01:96:6f:f3:a5:e4:de:ca:4f:d1:ba:2d:0c:56:16:
         67:fc:f4:f1:93:f8:51:c0:30:c9:22:70:af:a8:b1:b3:3f:7e:
         20:39:09:55:27:02:3d:e4:dc:6d:42:f3:0c:d2:ec:6c:dd:68:
         60:f3:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:18 2026 by rpki-client