Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa
File:                     707934f0-2be6-3cdf-a514-9b44c5ca443b.roa (raw, json)
Hash identifier:          zt0K9RpgqrNzLd5sEaNSYb/n/DRiWcI9NahTBSbpBZw=
Subject key identifier:   3B:03:E1:36:87:56:CD:69:42:0D:EC:CE:36:FC:87:7C:3D:F4:7D:F9
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F4328584D5E1A60038C9E1B9D7D7BA080
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     21766
IP address blocks:        2605:6600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:60:03:8c:9e:1b:9d:7d:7b:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=fc098837-ea08-487c-aa14-e94209d0270a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:fc:90:dd:99:5f:e8:7a:58:bb:ed:72:50:
                    30:d0:8f:ea:0f:3e:7b:d8:3f:bb:c4:26:c4:cc:69:
                    7e:3c:0b:ce:6d:33:48:8b:5a:04:dd:19:ca:48:17:
                    e7:a8:4f:87:84:76:40:d8:c4:03:1a:53:a2:1e:90:
                    55:a7:d9:f4:6e:d2:e0:f1:37:07:8e:1b:43:04:92:
                    ec:36:aa:8e:f4:16:c9:82:22:47:cf:24:f3:b6:b6:
                    6a:88:94:a9:ce:aa:83:92:a1:96:0d:4e:ea:47:9b:
                    4c:e8:48:f2:16:7c:4e:ea:09:c7:19:ee:7b:67:2d:
                    a4:41:3f:0a:48:d9:69:a7:ab:44:7b:49:04:06:9a:
                    99:b6:25:8c:31:a1:6a:57:a4:3f:9a:4f:5c:d8:d9:
                    33:f9:9a:31:1d:d2:4e:3b:01:70:39:5b:02:0f:20:
                    91:84:e0:95:1a:ad:79:30:da:3f:a5:e9:e3:df:b9:
                    f0:1e:e6:76:34:2d:d5:f9:b0:0f:c4:c5:28:86:dd:
                    be:72:ac:e4:9e:31:a6:c1:06:57:a9:99:26:23:b1:
                    30:df:e7:ce:5d:55:fe:7a:ef:9d:3c:93:bc:79:31:
                    d1:be:38:65:97:0d:7d:b6:1c:59:ea:65:93:7a:8d:
                    a4:1e:17:03:96:ac:8b:3d:8e:bf:eb:56:52:60:fc:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:03:E1:36:87:56:CD:69:42:0D:EC:CE:36:FC:87:7C:3D:F4:7D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:4e:66:00:76:82:20:9e:24:51:61:d0:a9:23:aa:f4:76:d6:
         7b:4a:e2:12:67:b7:b2:07:e6:c2:4a:85:7e:2a:e6:51:64:1f:
         26:4b:b2:14:30:d9:b1:38:7b:9c:2b:62:e9:22:17:d6:44:40:
         4d:2e:78:9c:70:12:54:d4:eb:2b:8e:c6:8f:de:09:ae:a7:ad:
         75:78:64:2d:9f:a9:ef:6e:3d:bf:25:f1:33:88:69:1e:c8:51:
         d7:84:b7:51:95:83:4c:4c:14:b2:22:cb:5a:63:04:6d:37:b0:
         93:0b:52:3e:92:66:da:0e:33:c2:7f:d4:51:ff:fc:b5:90:f2:
         2d:2a:4e:c4:2a:0b:24:0b:3f:9a:37:e2:8f:ca:ac:ec:6b:b1:
         68:4e:6f:02:64:b6:4f:10:c1:00:d6:39:1a:bf:9d:87:27:0e:
         66:86:fc:36:51:37:f7:53:cc:dc:05:49:51:0e:62:62:ac:43:
         7e:a8:af:13:1b:2a:1f:8a:47:74:71:8e:2f:c2:18:46:06:c7:
         36:42:fa:f8:2a:4b:8a:f6:f0:81:12:7c:50:a9:55:dc:55:16:
         f1:f0:b4:e2:36:58:8c:46:b3:50:af:9c:5b:2a:cd:28:00:bc:
         98:ca:b1:23:ea:71:c2:d9:9e:99:a1:a8:0e:63:33:27:bb:69:
         4e:9c:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:17 2026 by rpki-client