Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/837ae746-bf08-32c9-91b0-effaf4cba857.roa
File:                     837ae746-bf08-32c9-91b0-effaf4cba857.roa (raw, json)
Hash identifier:          3YO1beaKyRin4gyNLCkLWbQN84/nz1ILyavaesb5+Tw=
Subject key identifier:   1B:B8:2E:EB:2C:F3:07:17:76:EF:F7:8C:27:7B:F4:37:7A:51:F3:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D5E1A56BFD5A9030DEDA87900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/837ae746-bf08-32c9-91b0-effaf4cba857.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     12222
IP address blocks:        2001:4878:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:56:bf:d5:a9:03:0d:ed:a8:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=8c9d1a70-1753-4c83-842a-b488230b788a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:d3:e8:5f:6a:fa:31:68:b3:07:07:fc:e3:
                    6d:d7:aa:cb:00:a7:18:43:13:80:bb:8f:57:9a:0d:
                    b0:a2:e1:e6:90:16:f3:18:61:c2:af:91:2a:58:ce:
                    de:05:b3:35:5f:a1:a2:ac:93:99:57:ff:d9:6f:cf:
                    a5:98:6c:09:1e:39:f6:d6:57:ea:df:36:c0:bb:24:
                    43:01:14:00:1e:16:84:e3:4e:6d:24:3d:a3:58:f5:
                    42:c7:00:af:09:27:b9:2d:16:d8:19:b8:69:45:fe:
                    45:6a:f4:eb:ba:41:4e:e9:87:f4:3c:ed:d6:c2:93:
                    2f:8b:3d:a4:50:5b:fa:f9:d2:6b:3e:de:c0:37:68:
                    b9:bc:3e:5d:d6:97:8e:e8:ac:8f:a5:97:1d:17:a2:
                    c2:b4:98:2c:6c:f4:af:2b:6c:f7:17:f2:d1:65:a8:
                    8d:d2:65:f0:29:4a:93:e9:95:7c:57:b3:3c:45:8e:
                    3e:3c:90:5a:6d:34:cd:88:75:29:13:a9:9e:6b:93:
                    dd:13:4b:69:a8:e9:3c:ed:8a:e4:b1:97:bd:d6:7a:
                    fb:6d:ab:fd:ed:fc:33:e3:10:f6:0d:73:1a:fb:32:
                    98:f4:5a:38:93:45:4b:d3:10:29:ab:2d:26:4f:3a:
                    c2:36:ff:86:c1:69:7a:53:5e:7b:eb:eb:f3:0c:d4:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:2E:EB:2C:F3:07:17:76:EF:F7:8C:27:7B:F4:37:7A:51:F3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/837ae746-bf08-32c9-91b0-effaf4cba857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:a9:3f:f1:7e:3f:3e:c1:5b:d4:85:5a:d2:bd:57:3f:6d:
         56:a6:86:25:58:08:9c:f5:fe:21:38:0d:38:c0:7d:c7:6c:7a:
         2d:0a:6c:7f:a9:ec:7d:52:83:cc:ab:49:a8:78:57:97:0c:60:
         12:a5:1d:9a:fb:1e:f4:b7:41:43:78:f8:9d:44:b5:82:dd:0b:
         6a:9f:51:57:a1:bc:b5:07:c5:b7:f7:96:1c:47:06:c7:2f:80:
         10:ef:26:7d:9d:12:88:f8:66:01:c7:f1:62:ab:3b:7e:fb:80:
         90:3b:d9:25:63:29:3d:3b:fd:de:fe:73:ad:d6:0a:5e:78:4f:
         79:8b:d3:1c:d5:52:41:0b:9b:fc:85:89:a4:8a:96:ca:a7:f7:
         b6:3d:13:2a:fe:72:66:01:bc:91:04:f6:48:a9:8f:4b:e9:4d:
         cd:1d:7f:ff:5b:01:bd:da:54:f3:38:19:02:2c:2e:2f:d9:06:
         83:6e:53:df:e4:82:e8:95:2f:7c:11:f6:98:fe:aa:5e:ff:0a:
         f6:81:99:59:f3:b3:a3:5e:bd:a0:9d:a0:6b:cd:92:10:91:db:
         d4:5f:9c:62:ce:87:17:8c:e5:b6:07:9f:ef:b7:35:65:30:54:
         28:9c:b2:5c:1e:4d:15:f2:03:e2:6c:38:21:88:0c:4d:6c:a3:
         6a:50:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:05 2026 by rpki-client