Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa
File:                     f088a302-0a9b-32c2-b9ce-f898278df853.roa (raw, json)
Hash identifier:          BA5AeN5WT5Fz4pONhm0FdOxSwdII00dfo1Yrs0i2w+I=
Subject key identifier:   0C:D0:5B:A4:7B:30:1E:B8:FD:C4:24:64:99:17:50:B0:C2:DC:C7:9D
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F4328584D59EA4EF701321D325CA98500
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        2602:808:4001::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4e:f7:01:32:1d:32:5c:a9:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=596b3c06-29a1-4feb-860d-8071bc2bb579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:37:ff:2d:83:5a:b0:18:33:61:86:ad:49:
                    ad:d0:58:a0:57:13:cd:52:ca:f3:c7:08:99:ff:1c:
                    bf:60:54:17:a5:16:2a:b8:ef:bb:d8:4e:95:7d:bf:
                    d2:17:73:a4:1c:20:8d:07:b1:5d:ef:d3:8b:d9:ad:
                    dc:ce:6c:70:49:27:73:e9:33:fa:96:59:c7:a6:cb:
                    d9:b7:47:50:30:db:78:15:d4:9e:9c:20:6b:75:6d:
                    73:0a:6b:bc:c8:82:25:d7:35:a0:6c:de:06:62:76:
                    76:94:51:04:06:02:ba:5e:ce:ba:bc:0b:ed:6f:88:
                    73:ca:c9:b2:1a:50:39:f4:fc:0a:29:e8:da:c4:e4:
                    06:77:03:10:fd:97:a6:25:e4:04:71:8d:3b:b4:ca:
                    5c:86:1f:07:cb:42:0e:64:b6:ef:43:99:d3:d5:80:
                    74:2e:25:99:db:4f:ad:9a:22:99:1e:18:8f:26:45:
                    0a:ac:3e:45:b2:ff:d5:5a:d1:c6:3c:ed:77:af:35:
                    ae:5a:10:01:b4:43:f2:55:57:e1:27:be:2a:0c:6b:
                    e4:60:24:0f:d6:ea:b3:f6:de:e3:41:1a:ce:d7:b2:
                    f9:78:08:85:80:56:3c:00:22:20:64:67:ea:56:e4:
                    66:0d:43:9c:a5:ab:af:71:69:1a:be:d7:79:07:5d:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:5B:A4:7B:30:1E:B8:FD:C4:24:64:99:17:50:B0:C2:DC:C7:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:7b:e4:93:7d:d9:a8:11:78:d5:f8:ad:fd:21:d2:e5:61:
         e8:b5:17:a7:6f:f9:4e:99:8e:c1:09:77:2e:f9:7b:0a:2d:64:
         f2:37:dd:95:ef:ce:fc:71:ef:0f:eb:fc:5e:e8:cf:b7:8c:a5:
         92:d4:08:ed:db:f2:3b:8d:fb:15:29:fe:60:ca:2a:72:69:97:
         fe:90:56:a6:a0:f1:da:42:2b:5f:f2:6f:59:6e:60:16:6c:12:
         2c:df:8d:83:fa:53:6a:91:00:a6:2c:f6:d4:44:ce:bc:27:7b:
         b0:94:f6:b5:71:15:b1:20:4f:df:6d:f1:1e:89:c9:27:c5:7f:
         5d:4d:a8:fc:f4:0d:04:cf:e5:24:e9:57:1b:0d:d6:a3:04:5f:
         ce:e3:1f:28:d6:71:a0:ae:0c:dc:b0:db:6d:47:40:39:bd:e0:
         11:89:ae:7d:54:a3:c4:9f:a0:f5:c8:95:45:f4:29:c6:12:fe:
         ed:9f:1d:36:85:d2:2f:52:51:7b:c2:df:8c:a5:39:31:63:f2:
         1c:39:61:1d:07:24:2a:d1:c6:4e:d1:a2:dd:91:2a:b5:35:61:
         9b:d5:93:74:fa:8c:02:bd:45:42:7d:c1:1d:43:81:1e:bc:c9:
         b1:68:25:3d:9d:a8:2a:75:95:3d:42:7e:bc:b6:31:6f:63:18:
         4d:4b:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:38:07 2026 by rpki-client