Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
File:                     2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa (raw, json)
Hash identifier:          0KGvth4Rc+k3gHnQCRtCQb7L9SiSzjxHYDbazzdhjDQ=
Subject key identifier:   A3:92:35:77:C0:D8:DD:24:E6:E6:35:09:94:13:C1:FF:EE:CA:D5:30
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D55BA4B3396B4E7FCA4A0E590
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     27281
IP address blocks:        2620:116:8083::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:4b:33:96:b4:e7:fc:a4:a0:e5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=e4f96e87-bcee-47b1-92ef-8fae097842db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:86:b0:a4:75:f3:92:a8:31:30:d6:c9:e7:
                    92:3a:94:cc:66:4e:b1:8e:62:c3:4c:78:c0:c0:43:
                    05:fa:6a:9e:e8:86:02:0c:dd:22:41:03:6e:30:46:
                    11:28:4f:48:d8:ef:92:92:c7:c3:0f:bd:03:e4:34:
                    36:72:82:f1:0c:49:5e:76:bd:a2:22:4b:0e:f5:94:
                    3b:53:72:e7:72:28:06:56:6e:18:99:4b:95:4e:00:
                    40:98:a5:04:1f:7d:f4:f1:93:5d:a1:00:5d:8d:8f:
                    74:b6:46:fe:cb:d8:0f:ed:21:92:90:9c:9e:0f:3d:
                    e4:d8:5f:20:5b:81:81:c1:02:ba:12:7d:4f:9d:0a:
                    1b:e5:d8:91:38:86:94:64:61:68:17:8f:f5:ac:11:
                    d0:23:14:02:5f:aa:f0:99:72:ca:cb:bf:28:d9:6d:
                    90:4d:97:6e:a9:4b:7c:9b:07:05:5b:d6:07:2b:b8:
                    3e:e2:3f:42:d9:e5:34:a8:ac:2d:71:51:d6:7a:18:
                    06:89:6e:f6:c9:a4:fd:af:58:28:ba:04:ca:88:34:
                    90:95:f0:3e:f2:a3:dc:97:29:b6:68:c8:25:fc:ca:
                    bf:9a:25:b6:ac:85:80:e0:d4:68:87:ac:f8:9c:30:
                    bf:df:16:ed:d0:73:92:41:9d:c5:08:e1:8f:17:c2:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:92:35:77:C0:D8:DD:24:E6:E6:35:09:94:13:C1:FF:EE:CA:D5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:8083::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:10:a8:ff:cb:de:94:16:be:57:dc:b1:fd:96:80:86:0d:
         7e:7e:90:fd:c9:7e:97:5e:e0:62:d7:ad:2a:fc:c5:83:d6:7c:
         f3:02:8e:97:2f:e5:4e:31:6c:91:12:d7:5d:6e:85:af:4a:63:
         e7:f3:7c:3f:75:c8:59:fb:47:df:90:66:e5:7d:4e:90:c3:c4:
         9a:e3:44:a6:70:e2:1e:a5:c5:62:33:2e:85:1a:54:62:e6:6c:
         29:45:e7:a2:9d:e6:6a:90:10:33:70:d7:a6:b0:6b:56:fd:7e:
         6c:41:5a:84:79:15:ad:9d:3a:81:3b:15:fb:0e:be:ce:aa:28:
         87:5d:19:0c:95:5b:a4:be:5e:c3:83:56:7e:4e:7c:e8:0e:2f:
         dc:ac:58:50:f5:f3:ac:27:67:ac:fd:e5:46:c3:17:26:94:a5:
         cf:96:40:e8:ec:14:65:a7:5f:d7:ac:2f:48:d1:fc:09:e0:20:
         d8:d3:1f:69:27:23:ef:ca:5b:a9:42:d9:40:73:3e:a9:06:bb:
         69:67:af:8b:51:e2:15:8b:70:19:84:e5:84:15:be:a2:22:c3:
         59:a5:4b:7b:59:9c:9f:24:6d:3a:27:13:02:b2:55:bf:cc:f8:
         d1:31:d6:eb:03:f2:fd:af:15:39:c2:fc:8d:09:79:1d:fe:bc:
         5c:ab:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:15 2026 by rpki-client