Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa
File:                     988aced6-b287-30c3-a924-fbe4e2213e00.roa (raw, json)
Hash identifier:          1L1kB00JswEU40wka7nNcf7g3KlHMvfVRsRdncBUuOk=
Subject key identifier:   CD:8D:C9:67:6F:BF:C4:81:A0:EA:8F:5A:F9:48:86:BE:A0:7A:51:1F
Certificate issuer:       /CN=15da31d5-c163-4e2b-9bca-7534cb8229eb
Certificate serial:       010D0C9F4328584D59EA6FBFCC1E8BE1C7492980
Authority key identifier: 84:75:A9:CF:B4:CC:E9:E6:73:AA:9E:8F:45:CE:A7:F7:C1:C4:13:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     26227
IP address blocks:        2620:120:9000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6f:bf:cc:1e:8b:e1:c7:49:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15da31d5-c163-4e2b-9bca-7534cb8229eb
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=dc58af16-fa5f-43b7-ab98-d49017890628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:32:52:51:b1:15:71:fc:81:88:bc:e4:77:
                    9d:43:45:ea:1e:9b:ce:12:06:6a:61:15:00:5b:9c:
                    89:a4:0b:4d:b8:7d:49:22:5a:67:27:56:ff:be:3a:
                    2c:73:af:96:03:e4:28:2d:40:bd:cb:a8:13:ef:5f:
                    ce:9f:a5:ab:cc:9e:4e:0b:77:37:13:26:c5:19:ef:
                    8f:62:27:5a:10:a1:75:e6:77:86:b8:41:db:2e:d4:
                    13:83:62:68:4e:ec:33:1d:46:30:43:ea:13:28:58:
                    b8:0d:51:7f:c3:17:6d:32:93:86:2f:bd:47:d7:81:
                    68:29:b8:b4:52:64:c2:6e:06:33:c5:ac:76:b2:e0:
                    58:b7:1b:2f:a3:7d:75:ad:1c:fc:1d:d7:f5:d3:c0:
                    96:75:a2:fa:58:e9:93:da:84:63:ca:14:9e:34:1b:
                    8f:fb:63:a6:fe:5b:b0:11:9d:e0:67:f4:35:a3:13:
                    67:8e:97:e4:63:3f:b5:f0:1b:f1:2d:eb:42:43:c8:
                    a6:70:4e:0d:6e:d6:bd:e5:75:e2:0c:02:a8:9b:45:
                    6e:a0:48:c1:ab:e1:84:29:66:bc:02:14:c9:fc:27:
                    44:5f:21:64:39:aa:e9:93:99:69:ae:98:5b:d0:ed:
                    e0:03:34:95:c4:33:6d:61:e3:cc:b7:29:91:00:61:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8D:C9:67:6F:BF:C4:81:A0:EA:8F:5A:F9:48:86:BE:A0:7A:51:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:A9:CF:B4:CC:E9:E6:73:AA:9E:8F:45:CE:A7:F7:C1:C4:13:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:120:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:08:9d:99:7a:40:fd:aa:81:2d:05:cc:8a:2d:dc:b5:8a:
         ec:0a:03:3c:2e:6e:a9:30:3f:c4:48:e6:1f:7c:db:29:fe:71:
         15:80:39:24:a5:e4:95:f7:0f:b6:dd:45:c7:9d:2e:96:92:35:
         c0:7b:8a:ec:c2:d8:55:a5:00:7c:b2:01:82:5c:5c:fb:88:f8:
         10:dd:cd:b2:c8:1e:50:ae:57:40:d8:38:7c:0d:4e:64:81:91:
         23:d2:67:6b:ca:0a:19:33:b3:5d:6c:1b:0b:fe:b7:13:b2:8b:
         bb:b6:d1:a6:be:29:a9:7b:79:46:8f:82:e0:33:06:9c:95:52:
         5c:b2:6f:73:44:64:27:3b:f0:be:a8:21:9f:bb:c4:5c:79:fa:
         20:04:83:13:6e:f9:bf:a4:be:13:f3:8c:4b:3c:1e:d6:85:f9:
         4a:27:70:f4:6c:cc:9b:7a:72:49:31:38:fb:16:29:f6:16:2e:
         19:50:1d:39:91:bb:15:1f:1a:9b:7a:6c:5b:94:81:2c:be:20:
         6d:b6:bd:03:51:24:95:0a:82:3b:84:41:f9:1d:2c:70:45:45:
         2d:23:7a:8b:ed:83:38:e5:6f:ac:7c:58:b9:3c:5d:bf:ca:d5:
         62:0a:3f:39:d4:2e:55:ae:32:7a:b8:f6:aa:e9:e9:12:7a:63:
         ef:f3:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:02 2026 by rpki-client