Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa
File:                     8a3d4aac-7add-344d-a542-a96f905f7cdc.roa (raw, json)
Hash identifier:          wJC4EoC8xTPYjPDKyVtiCI9LhvK1qN7MHTX5kNm52qE=
Subject key identifier:   D8:59:88:1A:26:AA:BD:9F:7B:9A:5A:12:C0:E5:21:BB:20:EE:D7:D6
Certificate issuer:       /CN=331beef2-1596-4a21-8613-1e84adac3bfc
Certificate serial:       010D0C9F4328584D55BCB63C95939DCAAEB5F200
Authority key identifier: 3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     3359
IP address blocks:        2620:101:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:b6:3c:95:93:9d:ca:ae:b5:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331beef2-1596-4a21-8613-1e84adac3bfc
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=eae71407-be53-4538-82f2-b34e864c141b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:05:a3:e0:5f:dd:63:de:45:d4:a2:03:73:
                    66:df:31:94:f5:13:51:8a:f1:c1:1c:8e:17:33:59:
                    fd:bb:00:12:a4:ba:9b:8b:b9:ea:12:cf:ba:a2:b8:
                    8b:cc:84:45:75:21:70:81:83:c7:53:8f:62:69:30:
                    21:70:81:eb:80:d6:2a:b1:69:92:39:71:8f:5c:b0:
                    47:67:8b:08:97:cb:60:5e:b0:a1:01:f7:17:2f:f9:
                    4f:d6:e4:de:af:f9:a5:a4:e9:6c:2a:b4:80:9b:d8:
                    a0:3c:d0:51:4e:62:18:1d:c3:6d:6e:57:ab:fa:94:
                    21:1b:c4:f1:49:b4:05:1b:35:82:d8:24:b6:f7:b0:
                    95:25:ce:0d:a4:d0:3f:99:ce:ba:54:29:31:d6:49:
                    98:fb:c3:76:49:bd:d7:ec:72:0f:f9:9a:6d:2e:64:
                    65:b5:c8:d1:2f:d4:98:0a:02:f3:38:de:ed:41:be:
                    b5:e3:e8:98:bb:77:a7:64:d4:41:0a:9c:fe:9e:40:
                    75:51:ba:98:a2:81:23:d3:40:33:f5:af:63:1e:b8:
                    fa:71:43:f3:ae:b3:e2:76:54:58:74:08:3b:69:d4:
                    cb:6e:a6:3e:96:ef:c0:d0:6b:27:c9:7c:c5:23:2b:
                    61:4a:db:31:be:32:35:a8:de:8f:e2:45:55:5e:7c:
                    6d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:59:88:1A:26:AA:BD:9F:7B:9A:5A:12:C0:E5:21:BB:20:EE:D7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:61:14:35:22:e1:01:47:80:a6:ea:8b:c1:88:68:51:5c:06:
         ad:ed:2c:7e:12:cb:68:37:1f:4c:70:c4:cc:e8:9f:37:28:bb:
         79:8c:29:6b:03:09:93:96:1d:f8:94:53:b4:68:13:53:1f:93:
         08:4c:20:34:8a:bc:47:59:11:f7:21:50:a9:60:35:a3:17:88:
         ed:ee:ff:31:2f:6f:09:48:45:96:94:79:34:f7:78:fc:14:ca:
         b1:82:22:52:f4:8b:4c:09:8c:46:db:25:d1:09:11:86:3c:bb:
         3d:7f:0e:63:0e:e7:1c:84:21:4a:5e:d5:32:41:e1:cd:57:7d:
         7d:6b:27:ee:ef:17:95:af:3b:40:89:e8:8d:65:0e:6d:e6:2e:
         69:d5:19:ef:cb:61:48:b9:75:2b:f0:44:d1:5f:08:53:2d:6c:
         15:21:3e:f2:6e:da:25:d2:4d:f4:85:00:af:54:b8:00:c9:f8:
         06:2d:a3:6e:f0:ea:06:5a:16:eb:5e:b2:8e:50:9f:bc:b1:6e:
         e4:b4:09:8b:a1:a9:26:c4:4d:1c:d2:3e:85:a9:40:1f:c6:5e:
         79:2a:db:43:18:59:6c:6a:71:2b:fb:ce:f9:0e:a5:1b:16:1d:
         f8:ce:03:69:46:f4:49:51:fd:10:57:fc:f7:2a:86:85:45:5f:
         31:9e:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:02 2026 by rpki-client