Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/61001c80-9154-3c27-a9da-0ea077e2f482.roa
File:                     61001c80-9154-3c27-a9da-0ea077e2f482.roa (raw, json)
Hash identifier:          /RO245PFXvnsLdDtMZU6XkBCLDP5P3zpgiyoRHjiJjc=
Subject key identifier:   E3:B6:2F:6E:FD:78:DE:B7:E3:44:0F:9E:61:44:FC:03:98:C4:CA:10
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584D3DFF8A3356AC4D7665104C00
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/61001c80-9154-3c27-a9da-0ea077e2f482.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     400919
IP address blocks:        2602:817:2006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:8a:33:56:ac:4d:76:65:10:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=cceef549-5c56-4fce-a2aa-7dcee159a0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:a4:d2:b2:90:0f:39:6d:dd:13:1f:d2:97:
                    28:71:62:ce:45:dd:cb:67:12:02:6e:b5:49:ca:63:
                    c3:a6:a1:d7:47:8e:67:a0:ef:e5:61:91:12:22:6c:
                    f9:2f:3e:7f:76:85:ae:94:14:31:f8:8a:5b:3b:49:
                    84:0d:f7:06:5f:a0:ac:0d:0d:68:0c:e7:80:40:7c:
                    c9:d0:d1:9e:f5:01:91:15:70:72:5d:90:ba:4e:97:
                    15:a2:c5:fd:74:65:06:2f:14:4a:e4:8e:1a:b8:58:
                    75:2f:41:cc:5d:d5:ef:b4:d6:af:c8:6b:7a:30:14:
                    09:f8:f5:0f:05:2e:eb:17:7f:7c:25:86:f6:90:6f:
                    dc:26:e3:d5:8d:2d:e1:28:ca:3f:43:c5:5e:e3:5e:
                    e2:c9:1b:38:78:58:da:3c:9d:5c:79:ea:f9:9d:dc:
                    9a:bd:ee:5e:54:52:b1:53:6d:0f:ab:45:82:7c:f4:
                    b5:ce:06:e9:27:9f:17:ab:57:eb:a6:7b:7c:cf:5f:
                    6e:00:47:5e:f7:72:1a:9c:bd:e5:58:3c:37:79:8b:
                    fa:b2:9c:5b:70:a9:9c:43:b2:5c:f1:95:80:6d:9f:
                    a5:c8:bd:b5:fb:aa:93:78:34:9b:b0:e2:3b:d4:ad:
                    2a:1f:08:21:15:e5:44:11:af:b2:2b:ca:50:32:e9:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B6:2F:6E:FD:78:DE:B7:E3:44:0F:9E:61:44:FC:03:98:C4:CA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/61001c80-9154-3c27-a9da-0ea077e2f482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:20:f3:06:d4:ea:09:48:be:ac:4e:26:d7:71:96:f5:0a:61:
         32:8c:1b:b0:b3:cf:6f:2b:e0:87:ab:8d:a4:d0:42:a0:95:bc:
         25:8c:73:ed:92:63:b2:74:58:40:b0:c5:fb:c1:3c:1d:08:17:
         fb:b4:a5:80:22:a8:f8:3a:4f:14:fa:50:da:9e:7b:d2:81:12:
         b4:0b:a6:92:95:aa:e2:e3:20:4b:7c:f1:86:db:84:70:5b:70:
         af:e4:86:a3:4a:bb:f3:98:8c:b5:e2:24:8c:ba:44:80:57:b3:
         43:bf:ee:1c:4f:33:6b:b7:33:55:02:57:3f:4e:9b:c2:ef:36:
         60:d2:52:6a:98:0d:d9:7d:9d:9f:3a:05:0e:5d:e2:ed:ac:48:
         66:9f:2e:ac:6e:c3:f4:2b:2f:7f:2f:7d:d6:44:a0:a2:2f:53:
         83:ad:d6:fa:e2:ef:e8:13:82:09:16:ea:55:6e:19:de:99:20:
         b2:47:63:b1:b9:c5:f0:df:f4:93:bd:9e:dc:15:31:c2:26:a2:
         11:6f:79:28:34:34:6f:f2:95:88:7a:38:e1:7e:1e:e7:f8:fd:
         d2:44:ec:f4:aa:a3:18:ac:95:3b:6c:b3:11:03:33:e9:49:f0:
         5c:b3:03:25:00:66:6c:1f:ad:d6:be:be:b8:02:e2:c0:71:c7:
         06:f8:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:56:47 2026 by rpki-client