Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
File:                     8afe2b44-aeed-3635-96f2-699b9e5360de.roa (raw, json)
Hash identifier:          Tk+jdhkb8zyArG7Hy23N4eLceJzT2i37hADhd3jPtk4=
Subject key identifier:   E4:06:97:A7:46:94:A1:EF:2A:AD:C8:F4:D2:1D:C8:6C:59:05:96:09
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584D5024F914BE384BCA0B1D2C00
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     38047
IP address blocks:        2602:f83b:1886::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f9:14:be:38:4b:ca:0b:1d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=0a608900-4eb3-4008-9eab-6f634a3d3b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:ff:aa:07:74:4c:30:91:0e:26:2b:b7:97:
                    70:0a:0b:a6:92:ec:64:bf:e6:26:99:5e:6a:ac:86:
                    c9:ef:59:5d:16:ca:13:e6:b4:89:6f:2b:c7:3e:24:
                    59:af:8a:7c:51:75:a5:57:3f:ae:ce:5b:a2:cf:f7:
                    e0:15:01:b7:e4:d7:a1:56:a4:e5:eb:26:10:a4:8b:
                    f2:c4:cf:90:c5:06:ed:4a:b8:37:72:f6:77:2d:a5:
                    15:64:17:aa:be:26:c8:23:b5:da:ae:cb:7e:a2:53:
                    6a:63:1d:0e:ec:d5:a8:56:5e:c4:69:ae:d0:1f:77:
                    d0:9e:28:81:1e:26:0b:1f:f6:eb:06:16:93:37:c4:
                    9b:2d:31:c3:a4:14:b9:1c:d6:1b:d9:f7:b7:ca:c7:
                    45:2d:0d:ce:c4:ea:44:08:aa:af:3b:67:6d:73:ba:
                    1c:ed:28:72:2f:f6:a8:8a:10:dc:9c:21:bd:63:2f:
                    b3:e7:22:51:b9:df:e4:8f:ab:8a:31:19:6d:2c:79:
                    e9:d8:61:db:98:80:46:f2:1c:30:fc:9c:72:19:45:
                    bc:dc:41:f3:0b:40:c6:7e:db:37:d2:52:26:8b:fe:
                    d8:b1:b6:77:5c:70:f7:bf:ea:4e:b3:a9:1e:21:d2:
                    64:49:48:52:12:ce:2d:ad:dd:e9:ff:58:5d:1e:f9:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:06:97:A7:46:94:A1:EF:2A:AD:C8:F4:D2:1D:C8:6C:59:05:96:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1886::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:76:5a:35:78:fc:8f:15:35:a0:16:06:ce:f4:83:f0:84:a6:
         fb:55:ec:ff:7b:cb:b5:d9:80:6b:01:a8:aa:af:d2:27:37:92:
         56:b4:60:c2:2c:00:cd:1f:c4:73:ae:ea:83:13:ba:d7:a3:c3:
         05:cd:a5:67:8c:99:68:c8:87:34:f9:66:3f:66:87:77:4f:5c:
         00:42:6d:f2:3a:3a:32:9e:98:4b:57:5a:7f:d2:11:d8:d3:be:
         4e:da:ce:d8:45:c8:d2:64:a0:d6:71:e6:c1:2d:09:61:a6:67:
         d8:3d:86:07:e0:57:a6:47:be:f0:c6:97:82:4d:59:81:0d:a2:
         ac:7d:fb:77:d2:e4:71:24:fe:ba:65:33:98:9a:89:69:b6:d7:
         bd:73:44:20:ab:97:5b:fb:7d:68:99:9e:32:9f:93:b5:cc:3f:
         9f:31:cb:c2:8a:a2:ad:fc:ff:c0:ce:bb:3a:70:7e:f5:ad:55:
         89:18:dd:32:6d:eb:b4:8d:c1:6c:d7:c0:92:63:71:f1:3d:0c:
         2f:56:b9:56:14:f4:6e:24:20:f8:f7:89:8e:a0:c3:67:df:4c:
         92:0f:75:37:55:b2:f9:33:fb:3d:0a:2c:fe:06:0b:a1:b4:a8:
         b7:af:18:cb:17:90:e7:8c:e5:26:11:01:37:43:2e:d9:94:09:
         4e:10:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:52:00 2026 by rpki-client