Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999/1f28e069-462b-3a1f-84d1-84834569888e.roa
File:                     1f28e069-462b-3a1f-84d1-84834569888e.roa (raw, json)
Hash identifier:          L4awKWiLLm6HtZ3poN6hJHAnnag9Zm/QHeGPYLwu11I=
Subject key identifier:   0A:F1:95:E4:7B:B2:69:2C:90:84:97:D5:C6:03:8C:3D:48:DA:E2:9C
Certificate issuer:       /CN=016e9596-15d3-48cf-a65c-714541724999
Certificate serial:       010D0C9F4328584D6C4B79D9906CABAB8329A580
Authority key identifier: 8C:84:10:BF:93:7E:40:4E:A5:61:EF:13:25:85:43:06:34:99:1E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999/1f28e069-462b-3a1f-84d1-84834569888e.roa
Signing time:             Tue 07 Apr 2026 03:00:57 +0000
ROA not before:           Tue 07 Apr 2026 03:00:57 +0000
ROA not after:            Mon 06 Jul 2026 03:00:57 +0000
asID:                     402193
IP address blocks:        2602:f46d:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999/016e9596-15d3-48cf-a65c-714541724999.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999/016e9596-15d3-48cf-a65c-714541724999.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:4b:79:d9:90:6c:ab:ab:83:29:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e9596-15d3-48cf-a65c-714541724999
        Validity
            Not Before: Apr  7 03:00:57 2026 GMT
            Not After : Jul  6 03:00:57 2026 GMT
        Subject: CN=aae27d80-ca9d-46b3-899d-9c5998ca5c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:55:d7:1f:c5:af:25:ab:a3:3a:00:69:26:
                    df:ed:ab:eb:80:1f:c7:6c:dc:85:1a:37:d5:0f:e7:
                    fa:60:2b:e0:55:f5:2d:74:35:c1:f8:57:e7:13:b0:
                    c4:55:84:c8:f8:e5:59:6d:2a:dc:97:89:f9:76:df:
                    f3:30:c1:b8:6f:15:47:18:26:a9:1a:06:2e:18:e2:
                    d9:b4:a9:1b:e2:43:ed:ea:04:f8:ad:9a:0f:a1:00:
                    a4:80:bd:2f:cb:e3:29:c3:c5:08:7c:25:14:13:ec:
                    85:b3:2a:4a:08:78:66:16:3c:f0:e6:9a:ef:fa:7d:
                    87:1f:19:4f:40:39:1f:5c:60:a5:99:20:a2:01:36:
                    b6:fb:61:35:14:90:9c:67:1f:34:45:c5:48:c6:05:
                    5f:06:4f:b3:0a:14:cc:41:75:46:01:c3:0a:bc:c9:
                    a2:65:97:16:4f:23:51:a3:a2:b9:f5:c1:7b:bb:e6:
                    13:6e:c1:39:68:3c:5d:b8:86:4e:59:f1:74:28:53:
                    b6:1f:14:aa:20:a9:f1:2f:aa:cc:5f:33:f7:10:24:
                    c5:52:61:c5:dc:a7:eb:59:d2:69:d0:be:a0:42:3e:
                    08:43:c8:1b:11:63:5a:c7:d0:db:26:94:7d:d8:e6:
                    96:32:39:ad:ec:c5:94:96:46:1c:4a:60:0b:f5:c6:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:95:E4:7B:B2:69:2C:90:84:97:D5:C6:03:8C:3D:48:DA:E2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999/1f28e069-462b-3a1f-84d1-84834569888e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999/016e9596-15d3-48cf-a65c-714541724999.crl

            X509v3 Authority Key Identifier:
                keyid:8C:84:10:BF:93:7E:40:4E:A5:61:EF:13:25:85:43:06:34:99:1E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/016e9596-15d3-48cf-a65c-714541724999.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f46d:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:03:0e:1f:91:10:93:13:b9:b4:87:f0:4f:b2:3b:51:58:e0:
         81:cc:a3:22:56:04:22:7d:c9:df:84:b9:ba:33:dd:de:b9:62:
         a1:65:21:88:39:a2:a8:e8:fb:5e:b8:89:57:b5:19:52:3c:ce:
         21:59:cd:32:98:87:46:c3:b7:c3:11:7d:1d:a6:d8:b2:e3:ba:
         cd:db:3c:c1:51:3d:b3:ed:f5:56:64:95:3e:11:27:d0:e0:5a:
         19:da:8e:40:15:bd:ac:9b:2f:80:4b:36:95:a7:49:b3:06:26:
         9f:21:39:96:08:40:73:a6:ac:b6:79:ed:e3:8e:23:54:75:5c:
         d8:a4:2d:af:e9:50:41:3b:65:03:ac:ae:c3:ec:1c:1c:2b:83:
         b5:a2:95:0e:7c:ce:8a:ca:8b:f6:4e:fc:7c:fb:d9:79:05:b1:
         5d:27:ad:04:86:47:f4:cf:fc:d0:07:50:67:4d:33:35:e1:fd:
         d9:21:6d:17:2d:57:9b:ad:31:27:e5:4c:03:49:1f:40:d3:6a:
         4a:bb:75:81:57:36:2d:1f:cd:31:1c:e3:d8:1d:8f:e7:57:a0:
         54:fa:b4:93:e7:7b:13:8d:06:ef:2d:7b:3d:36:fe:41:75:26:
         3a:f0:07:9d:96:6f:40:82:f6:2a:17:7b:e3:fc:ca:36:11:5d:
         71:e8:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:12 2026 by rpki-client