Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326e93aa-2335-3091-bace-98721e04b8a4.roa
File:                     326e93aa-2335-3091-bace-98721e04b8a4.roa (raw, json)
Hash identifier:          +Qc+97a0m+QkzqOvhBHkPr8U0pQuSSfjKbTbw3QqkvA=
Subject key identifier:   EB:A9:18:36:02:9C:67:EB:62:07:CF:24:54:1B:13:07:38:E6:28:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D65151D014C2A9EDE96396880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326e93aa-2335-3091-bace-98721e04b8a4.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     12222
IP address blocks:        2001:4878:c102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:1d:01:4c:2a:9e:de:96:39:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=bf116519-7f4e-4fea-9d70-f51dfd614bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:a9:b7:59:cb:1e:05:62:50:4f:da:3a:1e:
                    62:f2:a0:36:03:e9:1b:5d:15:68:aa:d1:91:1e:24:
                    c2:2b:df:46:4a:f4:00:85:1c:a2:19:17:1d:08:eb:
                    0b:03:6e:ed:af:ee:93:59:34:52:a9:b6:9c:43:b0:
                    de:ac:53:a5:4a:16:f6:f7:d3:78:f7:5a:1b:0e:2d:
                    65:ab:a1:d3:c8:c3:a9:05:5e:b7:ac:47:72:a9:37:
                    24:d9:56:67:49:2e:60:be:1c:21:f7:a5:d9:47:13:
                    df:75:79:8f:61:d0:dc:8c:f4:98:c6:e7:89:26:08:
                    ef:15:32:a3:48:33:c9:88:25:7a:2c:e8:a5:6f:a7:
                    8f:73:cf:e0:46:c4:ab:f2:8e:65:1d:57:57:b8:fa:
                    5f:80:e1:aa:53:0e:0b:a0:80:91:ae:58:1e:1e:b2:
                    f0:f7:fb:68:2d:93:77:c5:68:d3:7d:21:85:c3:d7:
                    62:c0:90:b3:e1:03:10:f7:6a:a1:61:c8:9e:d3:5a:
                    b1:90:4a:a7:28:59:ee:54:29:e8:c8:40:d4:6e:06:
                    0f:fd:0d:b2:e5:83:af:9c:02:2e:82:ac:56:2e:65:
                    74:5d:2d:58:ae:fd:fa:8b:e2:5e:73:2e:5d:4b:18:
                    68:cd:a8:b7:f1:bf:61:6c:73:b8:2c:01:22:e6:45:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A9:18:36:02:9C:67:EB:62:07:CF:24:54:1B:13:07:38:E6:28:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/326e93aa-2335-3091-bace-98721e04b8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f1:b1:22:b2:d9:24:54:52:d9:0c:7b:0e:06:01:f4:64:1c:
         05:9f:6b:a5:b2:70:be:d8:bb:55:30:3e:07:55:46:19:48:ad:
         71:25:27:25:af:30:70:10:c6:8f:f1:78:67:a7:b5:f9:07:c6:
         2e:a1:08:65:81:e8:1c:7c:18:aa:52:35:3b:46:db:1f:f4:95:
         df:8b:ae:30:63:88:32:93:f4:a8:c1:58:35:5d:e4:a0:cc:cb:
         7d:fa:aa:a1:d5:a2:83:39:5e:57:af:fb:18:76:80:ab:69:15:
         0a:d2:ee:c5:90:17:0e:42:8a:c9:c7:07:f7:ef:40:18:69:93:
         62:69:75:88:83:5b:60:e8:e7:b5:a1:86:84:6d:c5:e5:de:8b:
         12:ce:37:bf:6e:26:cb:8c:66:62:77:99:b0:90:87:54:55:2a:
         ae:e8:f9:c2:f4:5c:a5:f3:a7:a8:1c:f1:b4:9d:e4:19:7f:f7:
         6b:79:52:b0:d5:db:81:07:88:4a:2f:14:b2:87:aa:c0:4b:78:
         ab:69:4d:94:3d:68:f2:92:1c:7f:8c:01:65:76:d8:8c:f3:db:
         5c:17:24:6a:c5:ac:85:ef:a9:40:bb:db:a1:91:a3:4a:3a:83:
         88:7b:49:65:c3:b4:82:3f:9d:60:1b:5c:6a:e3:73:bc:59:f0:
         ad:cc:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:08 2026 by rpki-client