Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/5edf128b-cef7-3d33-a727-4b4a7a9af49b.roa
File:                     5edf128b-cef7-3d33-a727-4b4a7a9af49b.roa (raw, json)
Hash identifier:          qECvJHHEOljclwHdAb8/05hFysZvedZEp7dS+5DQoZo=
Subject key identifier:   D0:E2:03:C3:F6:F8:6C:BC:BE:1F:02:29:93:B2:B9:88:9E:28:77:A3
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D04E237FDCAE925E749CA7B68
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/5edf128b-cef7-3d33-a727-4b4a7a9af49b.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     27281
IP address blocks:        2620:116:808c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:37:fd:ca:e9:25:e7:49:ca:7b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=c45d46ff-4dc3-43bc-9c3c-e5d5a18a8055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:9f:d0:e6:0c:27:d0:92:79:bf:4b:fb:de:
                    37:d5:49:13:98:77:5d:78:17:67:75:a4:b9:e9:07:
                    94:c5:6b:13:96:b4:b1:89:d8:3a:8e:8e:67:c7:d8:
                    31:a5:3c:9b:8b:76:06:91:8a:ba:18:ae:7f:19:7b:
                    30:e9:9a:98:8c:7e:c2:8d:32:ac:fd:ef:01:c2:fa:
                    41:09:57:a3:e8:5b:b3:50:3d:7f:9a:a8:50:7f:90:
                    37:a2:77:0c:35:5b:19:c6:55:80:1b:f7:31:ce:9a:
                    0d:f4:10:94:0f:22:8d:9d:c6:43:26:3d:fe:6f:47:
                    3e:05:f2:c4:8f:ef:e7:89:b6:c0:65:86:e2:94:66:
                    77:14:f0:b6:59:c1:9a:8e:df:3a:66:37:3c:d6:96:
                    5b:9c:cf:56:4b:2e:a2:44:91:28:ed:b4:56:15:8d:
                    d7:b5:2c:0b:18:84:b4:d8:dc:ff:ad:5b:e6:a4:53:
                    79:f2:26:bd:e5:2c:94:0e:f5:56:14:94:26:51:1f:
                    a3:be:c8:a8:79:ad:91:13:53:c0:3b:44:16:09:cf:
                    8b:19:3a:a0:a0:04:a4:d9:1c:08:ce:33:8e:05:93:
                    23:11:b9:3a:7e:d3:38:64:65:1e:72:8f:0d:87:3a:
                    a9:10:13:d9:7b:3c:61:73:f1:ae:96:57:f3:a5:ea:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E2:03:C3:F6:F8:6C:BC:BE:1F:02:29:93:B2:B9:88:9E:28:77:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/5edf128b-cef7-3d33-a727-4b4a7a9af49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:808c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:af:77:74:ad:cb:d9:18:45:a2:83:27:6a:43:fc:75:c7:
         9b:7d:86:f5:96:7f:12:4a:20:93:4b:ae:b9:25:ec:65:76:80:
         26:a8:cb:a8:3f:1b:9e:2a:ba:be:50:59:b2:fe:6d:5c:e9:cb:
         0a:fe:f9:ac:7d:29:bc:f1:de:fd:b2:23:a5:91:e3:4d:5f:b0:
         49:4d:48:25:57:e5:61:4b:5f:5f:6c:6d:e1:e0:cf:c7:3c:e0:
         f8:5e:56:d5:76:4b:63:d4:3a:81:47:21:51:83:32:70:ce:e5:
         34:7f:cf:17:fe:f2:3a:f3:58:af:a8:db:0b:4b:0f:1f:ed:b4:
         84:70:d3:1f:6d:df:4e:b7:a5:6d:db:11:41:de:d7:13:18:5d:
         33:41:f2:7d:38:cd:7b:ae:35:8d:c6:23:5b:07:b4:39:08:b3:
         a7:a2:f9:12:47:ef:c8:c6:ab:29:98:89:2e:d7:03:23:8d:38:
         ef:10:0d:2d:b2:e3:f9:31:4a:88:04:6b:28:82:1e:36:11:23:
         a1:fd:85:57:45:7a:a5:bd:6f:70:dd:77:86:9f:ff:0a:fd:53:
         4f:aa:8c:67:83:fc:73:a1:30:34:d0:7d:e0:3b:3a:cd:78:8f:
         83:ca:97:cd:ce:8f:3e:52:cc:a8:d5:95:6f:f5:d2:e9:38:2d:
         48:e3:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:44 2026 by rpki-client