Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa
File:                     659d0660-b0b0-3169-bd78-adee92b4de2d.roa (raw, json)
Hash identifier:          UVRiMl3CwD4Q/ctHvRNavVewrQLt3eWyz6UvrLhqZb8=
Subject key identifier:   E3:AB:FC:90:38:10:8D:13:73:2A:90:FE:69:F1:22:C1:CF:BB:04:15
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F4328584D1B1A0B06BE261C2D8A41DE00
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2602:814:b008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0b:06:be:26:1c:2d:8a:41:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=fe1f3e58-1c23-4ea6-852b-ba5c92f1e424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0a:d7:80:56:6d:84:18:e1:10:50:48:b3:4f:
                    a4:c1:51:46:2c:41:19:3d:f8:23:66:07:6d:a8:21:
                    89:d4:00:30:d1:e9:00:9a:48:bc:e9:d4:0b:8a:64:
                    32:53:64:ec:77:45:cc:c5:69:a9:93:03:75:ac:7a:
                    22:04:c0:6b:ff:4a:f7:47:aa:a3:7f:4f:14:79:de:
                    88:90:c1:1a:61:e1:8d:80:b1:4a:e9:6b:6d:fc:cd:
                    67:cc:9e:29:49:4d:60:2e:eb:dd:87:fe:02:9c:09:
                    76:6c:67:46:2c:64:6d:9b:c4:5a:01:fe:14:53:64:
                    4f:13:e4:34:c9:b9:19:4c:c4:a3:2b:18:41:c5:dd:
                    1e:71:17:ac:e2:dc:84:d5:41:86:90:21:ed:c4:2f:
                    a1:60:75:72:1b:3e:8a:c8:fb:d1:36:27:7c:a3:ed:
                    7a:95:2f:10:80:36:9c:2a:2e:1f:17:9f:13:ff:35:
                    ab:4c:95:ba:ca:4b:4d:68:dc:51:47:84:eb:f1:d0:
                    1f:9a:08:49:52:33:e8:96:cc:a4:b5:f3:e3:b2:3d:
                    e4:d3:33:38:59:c6:8e:c6:e7:ff:93:18:84:8b:df:
                    92:12:0f:b5:fb:1c:a4:cf:e5:12:3c:5d:3e:ae:1d:
                    55:92:e4:23:7d:f3:4f:7e:fd:f7:5c:e2:8d:41:d3:
                    eb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:FC:90:38:10:8D:13:73:2A:90:FE:69:F1:22:C1:CF:BB:04:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:92:71:6f:41:97:e9:e6:32:54:76:41:72:dd:cc:e8:32:
         92:82:0b:6d:e3:eb:e9:19:23:1c:42:d5:8f:32:35:cd:d6:e5:
         b8:ac:de:f2:dc:13:c8:a8:98:3b:51:5d:b9:47:14:77:17:18:
         a4:d8:26:7d:40:52:8a:19:f3:8c:53:91:e7:8f:f3:4b:33:38:
         c1:eb:50:99:98:02:79:13:5a:89:4d:4a:80:11:81:df:ec:00:
         fb:1b:96:e5:1b:0a:b9:9c:8e:b4:54:67:f1:76:49:b2:27:b9:
         e2:e4:73:9f:31:44:d5:08:bf:82:41:82:35:30:03:0f:56:63:
         30:90:bc:37:0f:bd:32:f2:6e:01:41:54:09:25:11:27:78:e7:
         1d:ec:b3:bb:f6:c9:19:76:fa:fa:4a:a9:6b:17:22:79:78:92:
         d7:47:cf:9f:69:a3:07:35:6f:13:a4:4b:83:1a:1d:7e:fc:bf:
         d2:97:4b:35:ca:d9:5a:54:de:3c:f2:7c:fa:02:93:da:85:6a:
         c5:19:77:ef:b4:87:6a:14:cc:78:89:bb:b2:25:b8:46:96:77:
         af:74:3a:56:22:f2:d3:53:c5:85:86:2c:5d:fe:11:81:c9:f4:
         d3:3a:d5:20:48:bd:0c:55:45:28:2e:74:81:c0:5e:a4:d7:a8:
         90:4a:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 08:29:34 2026 by rpki-client