Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa
File:                     8c746254-1ab7-36dc-9361-dab7709e8124.roa (raw, json)
Hash identifier:          DWB8aVbfkDdiZ3foI0fRY3MFYS5GCmWP+Mk7PnEfdE0=
Subject key identifier:   D1:4C:0B:83:73:7C:05:DC:B0:79:BB:8C:EA:95:DE:C1:15:0E:11:20
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584D5E1A62996A0177A110BDF360
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     400917
IP address blocks:        2602:fba2:18::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:62:99:6a:01:77:a1:10:bd:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4b3ff852-4887-4395-91b1-66a6a7679056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:8d:29:01:e5:a7:04:57:bd:0d:3a:42:d5:
                    a0:c1:24:8e:f7:a2:a5:89:4f:dc:b9:8e:54:b5:95:
                    7e:32:a3:a6:9c:d6:73:86:3f:53:d7:89:e3:83:54:
                    4c:c3:38:28:a8:1a:34:f1:c4:b0:ef:49:e3:bd:1d:
                    b7:e0:7d:83:fb:45:eb:7c:0f:55:9d:43:bb:6a:5d:
                    58:25:7e:a7:5d:26:eb:21:71:d6:5e:3c:59:29:c2:
                    95:e3:8a:f3:aa:02:e4:c3:5c:7d:ac:97:d4:37:4d:
                    34:a9:15:b8:32:6d:a8:83:14:e5:6e:14:48:59:aa:
                    16:50:b8:08:56:35:5b:2c:bc:b5:14:0e:8b:96:05:
                    28:9a:34:c8:c1:cb:77:77:7f:38:45:78:78:16:aa:
                    51:29:4a:64:ad:d6:29:dd:02:e0:5c:88:a1:49:0a:
                    65:d1:88:ff:57:d2:d1:79:ec:2e:03:49:9d:cc:69:
                    af:70:ec:26:8c:5d:99:cb:13:70:3e:47:c6:0a:f5:
                    f3:0b:5c:e3:1c:69:1c:0b:99:73:f7:b8:ac:b3:a3:
                    20:4a:90:12:fb:d4:e2:0b:57:e5:84:a2:16:1d:31:
                    5b:cc:d3:f7:e6:f9:d8:1b:67:1a:a5:ea:15:78:9d:
                    37:58:99:01:cf:4e:e9:f1:67:72:b1:6d:72:81:4a:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4C:0B:83:73:7C:05:DC:B0:79:BB:8C:EA:95:DE:C1:15:0E:11:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba2:18::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:33:03:9b:46:1e:b1:d6:b2:8c:d6:cc:7d:fd:95:e5:ba:8b:
         12:45:9d:25:aa:65:37:fd:eb:16:2a:7e:35:59:e9:e7:a8:c2:
         c3:46:8b:5c:86:56:6c:bb:07:a7:24:f4:9e:ae:4e:c4:61:fc:
         bb:6c:0f:05:fd:3e:08:5b:e0:ac:1f:9d:eb:dd:da:3e:37:ea:
         2c:23:cf:4e:10:43:51:39:cf:58:4e:1f:a4:a4:4a:16:3d:00:
         5b:56:c0:63:11:4e:3e:fe:8f:dd:ba:c7:22:72:c6:7f:8f:e8:
         e0:51:a0:20:78:f1:8d:89:fe:18:bf:33:1c:07:3d:05:ba:42:
         50:6e:ed:29:39:60:0e:88:8a:74:f5:9c:bf:84:6f:1f:dc:ad:
         cc:07:6f:07:50:a7:f5:03:7e:82:3e:08:8c:59:97:e6:62:30:
         6a:e7:6e:c7:18:11:f4:40:79:66:79:9b:1f:6b:95:90:f0:b3:
         43:26:b3:75:0f:d7:e8:88:b3:ab:bd:0a:0b:a5:29:af:11:bb:
         69:a5:69:26:be:d5:5e:45:2c:e4:38:fc:1c:63:f2:21:b7:9c:
         ec:39:75:91:4f:d8:19:99:ef:a0:97:63:2a:c1:49:22:04:ae:
         30:a8:2e:93:28:8c:97:62:5f:35:12:27:2c:ec:8d:1a:e0:89:
         47:1f:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 05:00:49 2026 by rpki-client