Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa
File:                     d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa (raw, json)
Hash identifier:          itI3mACdIm2cGCAJ+EgtGKy5oC1mVYPZTEnFpT6VEys=
Subject key identifier:   D0:55:37:B4:85:ED:7A:95:30:71:A0:5E:56:AB:DD:08:42:C8:58:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D5E1A4E9B77527E02A1601180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     12222
IP address blocks:        2001:4878:2102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4e:9b:77:52:7e:02:a1:60:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=0dea9eb4-44f4-422d-b3bb-1324eee95bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:91:65:11:df:fc:b7:25:84:46:ab:f3:16:
                    d5:7a:66:d7:35:f8:9d:68:a6:68:89:5a:1f:57:9e:
                    d5:e0:e5:e1:a2:c5:f0:9f:e7:00:a0:4b:96:f6:71:
                    e8:1d:ad:b6:f9:2b:00:ae:27:49:30:2b:5f:fe:56:
                    fc:8a:b5:5e:97:ae:69:19:3a:9f:70:04:74:5b:ea:
                    18:66:43:5a:a0:4e:f1:b5:13:27:e4:41:16:a8:37:
                    31:9b:41:fc:a3:41:74:ce:35:e3:23:59:a6:2e:91:
                    36:26:53:af:f9:13:49:ed:15:09:94:a4:56:c9:ae:
                    b7:56:e6:59:93:d0:74:40:e6:80:35:f1:7a:0f:06:
                    84:27:63:1a:ec:ff:4b:14:95:cd:14:d4:e1:65:6a:
                    a5:fc:d0:8c:73:5e:4a:fe:42:23:c3:f3:ac:48:04:
                    dd:d4:b5:4b:d3:af:55:00:c0:b7:b3:cb:53:18:e5:
                    c1:6f:62:e9:bc:ec:3a:a8:47:ff:8a:b4:14:e0:e1:
                    2a:56:dd:6f:32:71:f7:06:9b:b2:5f:31:28:73:19:
                    fc:d1:d0:9b:f0:32:ca:5f:a9:57:b5:89:06:20:a0:
                    e0:f8:2d:ef:c2:cd:ec:c4:76:6a:60:e9:9d:e6:d9:
                    24:14:db:1f:65:6f:10:55:49:4d:12:72:0e:69:82:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:55:37:B4:85:ED:7A:95:30:71:A0:5E:56:AB:DD:08:42:C8:58:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:a3:06:1b:34:8f:ae:33:f8:67:e5:1c:e7:ee:8a:45:73:
         2e:c6:10:ca:78:a8:70:a9:ad:8d:0c:00:07:00:88:a4:f0:c9:
         c8:c4:bb:39:69:c0:a4:44:48:08:37:3b:d8:3b:d6:01:b4:d0:
         ea:06:66:1e:aa:03:f7:55:9b:34:07:02:20:91:72:c1:86:32:
         60:76:36:a5:02:38:3a:ac:f1:d9:39:4b:e0:9b:d6:93:6a:13:
         b7:a3:09:9a:81:f4:09:cc:fe:11:07:84:5b:a0:d4:89:ff:f0:
         10:f5:84:cb:a6:c3:22:93:23:bd:aa:37:b4:e6:cb:5e:3c:69:
         76:03:f1:f6:c7:af:8d:58:94:33:80:50:70:b4:d4:94:dc:e5:
         15:6d:67:bc:cb:b1:6d:72:1a:8d:83:bb:92:2f:98:ac:5c:52:
         3c:9e:a0:b0:52:8a:73:f7:08:59:57:86:17:53:85:11:99:44:
         c2:c7:7a:34:2d:dc:65:69:7f:31:60:16:e1:d1:33:37:6d:86:
         2d:69:15:96:68:52:f9:9b:e8:12:39:dd:d9:de:93:f7:a9:1f:
         8c:01:b6:e1:cb:ab:32:94:d8:6c:9b:2f:81:80:39:f4:1c:a2:
         f0:57:4d:5d:c5:01:f0:eb:fc:bd:e7:8e:ba:7c:5c:0e:d3:ed:
         1e:3c:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:39:21 2026 by rpki-client