Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/599764ea-8465-3cb8-a72c-3673eca82611.roa
File:                     599764ea-8465-3cb8-a72c-3673eca82611.roa (raw, json)
Hash identifier:          Gvqp7okR+QUkDjWB3mE7BmiEYfrCLP+4AlAcqOWFdFI=
Subject key identifier:   C6:A1:AF:70:2F:F9:00:6C:19:5A:F6:C2:03:8C:4F:8C:76:85:0E:3E
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584D6C0FAC85FE61E2FA444793C0
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/599764ea-8465-3cb8-a72c-3673eca82611.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     22147
IP address blocks:        2001:4830:c600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:ac:85:fe:61:e2:fa:44:47:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=f3e51481-a385-4aca-b72e-db8662c2ad4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:24:8d:84:5e:32:a1:28:42:73:5f:8b:fe:bd:
                    69:94:a5:a3:aa:a2:6d:02:ad:f4:02:b8:f3:02:ba:
                    95:96:cd:81:07:15:bf:d0:0b:b6:af:99:64:09:e4:
                    c9:49:bd:ac:30:86:f4:3e:f8:05:fb:bb:4a:6b:3c:
                    d2:35:d4:f8:38:4b:b9:c8:cc:3b:61:c5:f6:05:9d:
                    22:23:fa:25:04:4e:e4:ac:20:87:a2:ac:35:9d:c4:
                    46:fd:4a:a3:1e:03:8c:c1:1c:84:cf:82:0b:fe:73:
                    de:95:a5:80:4c:b1:9b:29:eb:f1:d5:42:83:f4:b9:
                    42:3a:d8:59:0f:83:7c:65:0d:c3:f6:c6:e8:99:79:
                    9c:e1:30:35:89:a2:40:51:d8:bf:02:0e:13:b1:42:
                    47:07:66:47:18:fd:f8:e4:2e:43:c2:90:78:94:6e:
                    78:c1:cb:08:69:ab:a8:ad:42:c6:17:53:39:1b:62:
                    7e:3e:20:35:f8:56:47:97:62:16:8e:b4:62:af:8d:
                    27:a3:22:c6:d5:a4:27:02:57:a9:26:a2:55:f5:a9:
                    96:b1:f8:70:74:58:fb:d2:5b:c8:a8:46:dc:83:bc:
                    8e:8c:38:0c:c3:b0:96:c2:a9:77:12:2e:89:8f:b0:
                    bd:da:10:bd:d4:e8:0e:79:30:ba:fb:38:ce:22:77:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A1:AF:70:2F:F9:00:6C:19:5A:F6:C2:03:8C:4F:8C:76:85:0E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/599764ea-8465-3cb8-a72c-3673eca82611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:67:69:56:e8:14:d6:81:0b:12:4d:ce:ca:7e:24:21:9f:
         26:6d:ed:5b:45:8f:ca:85:5d:3b:f4:c2:26:a9:b7:b2:48:96:
         00:51:56:fd:3a:87:b1:ad:be:6c:af:14:ff:79:b0:31:62:25:
         46:c5:57:0a:62:ec:42:84:48:37:8c:fb:e0:a9:cd:6d:5b:14:
         ef:13:94:87:1d:44:99:d0:c3:d1:78:e4:9e:bc:a0:44:ac:af:
         ed:ee:a6:f2:e1:d7:32:ff:82:39:5c:f6:d5:d9:e9:9a:8b:8e:
         ea:19:a7:9f:f8:71:ac:d4:1e:56:5f:c6:77:e7:9a:69:29:f2:
         a2:93:b9:e5:50:54:16:ec:59:77:e6:4b:7a:18:66:cb:ad:5a:
         5e:23:dc:3f:b7:82:38:f9:b5:09:8a:ff:29:6d:15:24:c7:63:
         7a:b8:3e:51:12:8d:87:2b:9d:f0:53:27:0c:66:b7:31:0a:66:
         37:fc:90:e7:62:e2:c5:af:45:62:a8:9a:69:15:06:d7:9f:90:
         38:92:f9:6f:b3:aa:bb:f5:ce:53:40:88:d7:eb:ec:a5:80:21:
         69:01:ae:2a:57:de:1c:88:24:f7:c6:90:95:da:ef:e0:41:5e:
         80:16:ab:90:19:6c:13:a7:61:78:95:61:4c:15:32:fc:e7:45:
         fe:a6:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:10 2026 by rpki-client