Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2bb4dac-9457-3a51-9fef-4b52b6fdd793.roa
File:                     e2bb4dac-9457-3a51-9fef-4b52b6fdd793.roa (raw, json)
Hash identifier:          Xp1UAk/8sLfoeyDxGxl/CzhnJUgZJVwxRs/AVrnYhbo=
Subject key identifier:   ED:FC:00:07:86:DD:A6:8B:6C:DA:0F:AC:54:F9:45:41:F4:95:AD:07
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D5E1A55A7935A0A57937A2B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2bb4dac-9457-3a51-9fef-4b52b6fdd793.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     12222
IP address blocks:        2001:4878:2322::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:55:a7:93:5a:0a:57:93:7a:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=fc73a550-2a6f-467d-9474-7ff71bc93750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:7a:b9:fc:e4:37:77:7e:04:32:78:17:23:
                    8a:66:09:a1:a2:d3:ab:54:16:ac:87:56:5b:e4:1e:
                    2f:d0:fb:c4:e1:64:06:6b:6c:e1:16:a0:4d:d0:6e:
                    e5:fd:38:4b:7f:ed:5b:b9:8a:17:fe:20:7d:3d:eb:
                    16:71:aa:68:48:a5:dc:6d:a0:64:18:68:9a:23:8f:
                    8a:4c:86:8a:0d:19:b8:32:a6:2e:3d:5f:a4:c3:a9:
                    7c:54:52:25:9b:60:a5:40:de:c4:de:de:1a:96:db:
                    d1:85:7d:f1:43:9f:c5:d0:1c:6a:cc:f5:77:84:30:
                    d8:ce:ba:58:ad:3d:97:ab:3e:a9:b6:96:06:0d:da:
                    fc:f2:14:f3:1e:9f:56:4a:7e:e4:a6:9b:62:e7:e3:
                    0f:95:68:0c:fc:64:55:d9:fb:c0:ca:c5:2d:2b:81:
                    b9:27:13:6f:34:7e:ca:9b:5a:f5:bd:04:42:f5:cd:
                    48:f4:84:45:3d:7a:09:9e:be:6d:b8:a1:44:44:2a:
                    5b:af:ac:37:d9:01:cc:16:4f:c2:96:ac:ea:7d:b2:
                    e5:4f:7e:4e:a9:30:7d:7d:0f:68:4d:ab:d3:65:13:
                    a9:83:e3:a1:8b:d0:00:36:92:9f:ab:76:24:10:42:
                    ee:f3:8d:c9:ca:75:1a:23:b3:5d:3b:12:81:5e:00:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:00:07:86:DD:A6:8B:6C:DA:0F:AC:54:F9:45:41:F4:95:AD:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2bb4dac-9457-3a51-9fef-4b52b6fdd793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2322::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e1:b1:de:51:74:28:f9:67:37:b1:9c:fb:50:bb:27:98:04:
         1a:53:f8:34:62:a4:77:9c:47:9f:12:e7:f3:96:53:63:0b:e8:
         02:30:28:35:6f:4d:44:ee:d6:ff:dd:6d:fe:d2:31:15:f1:ef:
         00:31:c1:0c:3e:43:f9:98:10:ad:11:7b:a7:32:52:75:80:47:
         bb:2a:6b:3d:cc:88:a8:42:f2:96:c0:82:9e:9a:06:9c:82:f1:
         3f:7b:46:6f:a5:39:7d:55:00:07:9b:91:8f:e7:a4:9d:43:0c:
         34:9d:58:7d:17:d0:13:59:cc:5e:0f:77:14:99:ee:15:80:67:
         a6:9b:c9:66:df:7a:00:aa:c8:02:ad:b5:c9:aa:a3:55:cd:94:
         01:ae:e5:67:2a:65:31:15:f7:05:ea:89:c5:0c:9e:31:94:23:
         04:85:b0:25:95:fd:2d:23:33:1d:92:39:78:ab:65:a6:51:b6:
         a9:4d:8c:6f:a9:82:ca:19:4a:ca:2c:2b:de:eb:e1:c7:7a:e0:
         84:9a:4b:78:8c:44:19:51:88:c4:e5:d4:aa:b6:a8:32:c0:60:
         59:ec:e6:23:1e:3c:58:9b:76:29:69:f4:e4:a9:0f:42:cf:b9:
         4f:f3:04:13:47:84:7a:d5:6f:c0:f2:9c:9d:2b:b8:f6:e6:80:
         3e:0f:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:43 2026 by rpki-client