Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa
File:                     28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa (raw, json)
Hash identifier:          1CJ9ZQBhSoOuWcD56P1H5LfsFnjrqLPjFfKAUpgUD5Q=
Subject key identifier:   A9:44:14:B8:A6:8D:41:2E:F0:45:20:85:83:66:C8:8C:12:1C:89:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D5E1A4F9816C9CF13683CF600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     12222
IP address blocks:        2001:4878:4027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4f:98:16:c9:cf:13:68:3c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=a6959e2f-a07a-40d2-a46f-54603d68505e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:58:6f:86:fd:1a:21:41:c3:57:f8:de:9e:
                    e2:5d:da:0a:e6:52:a5:1a:7b:10:d8:77:7c:f2:46:
                    5a:b7:42:ed:7b:89:0e:bd:c4:1b:ad:a7:23:58:96:
                    23:9e:13:37:4d:f1:c6:6a:44:a2:9f:10:6a:ef:9a:
                    96:bc:95:80:60:6d:9c:b9:45:ec:5e:75:47:73:d5:
                    d1:3b:bb:52:9d:26:e1:a2:ed:cb:b7:20:a4:46:2b:
                    75:fc:48:0c:ae:88:32:76:ca:d1:bb:52:2f:49:c8:
                    59:cf:40:16:28:d9:8c:4c:3f:2c:24:01:08:f3:09:
                    b6:29:75:07:98:b6:72:79:76:1a:87:7e:a2:e1:cb:
                    47:f2:45:7a:a3:57:6b:44:0d:7c:11:35:57:38:21:
                    01:5a:87:4a:ab:f1:67:4d:6c:89:5d:0f:d4:26:b5:
                    ed:42:cd:61:f1:c1:f9:91:06:5f:a3:cd:bc:09:36:
                    42:5b:75:23:17:cb:c8:df:9a:7d:e2:55:f2:5a:fa:
                    9b:68:08:b3:20:04:86:a7:c1:de:5b:55:25:1c:26:
                    81:70:c6:27:ba:79:3d:4a:b4:d7:28:c7:4f:0f:e8:
                    a7:c2:42:8d:7a:df:3b:10:d9:50:04:7a:75:17:b4:
                    68:64:2b:a9:35:af:d0:16:d6:bc:2d:44:57:50:11:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:14:B8:A6:8D:41:2E:F0:45:20:85:83:66:C8:8C:12:1C:89:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:50:f3:f1:5f:04:ad:72:f3:bf:5c:66:03:b4:e9:83:d3:64:
         4d:1e:32:37:d4:2d:d3:65:a3:77:64:42:ff:dd:29:4e:e3:cb:
         54:d2:31:e4:c2:8d:2e:5d:ac:5e:c7:4f:3e:36:33:1a:fd:ed:
         b8:c8:6a:e2:82:53:12:6b:c0:5f:ce:cd:d4:b4:aa:ba:16:25:
         20:40:de:af:21:b2:6c:b0:82:33:e7:0e:b9:df:65:27:b6:f2:
         39:a0:31:6c:35:9a:a0:a0:85:ff:91:97:f5:73:23:3e:99:15:
         37:25:14:59:5b:da:4b:e4:56:b5:c4:32:dc:32:32:d2:dd:62:
         b0:4a:8f:1d:40:de:49:ca:22:39:25:78:79:6a:d6:6c:92:79:
         72:a7:45:32:32:d5:ef:d8:5a:01:a1:44:45:71:4b:94:82:e1:
         58:85:a3:b7:b1:72:85:40:95:4f:46:71:47:de:0c:f7:9d:b8:
         82:43:42:8d:78:4e:23:75:83:0f:bc:c1:6f:56:83:87:af:9c:
         8c:3e:72:5a:f1:84:e5:fb:13:cd:01:f1:46:68:39:d6:ac:a7:
         65:13:b5:4b:8a:70:04:bb:32:ed:94:b9:39:60:d4:70:36:cb:
         c5:90:90:dc:81:50:25:7b:72:33:e3:80:e6:37:94:10:ec:2b:
         53:03:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:04 2026 by rpki-client