Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
File:                     a50faf7e-80ed-3540-8863-2e3533723c21.roa (raw, json)
Hash identifier:          ulDDnKx2km3SVsKpTidpBmU5/9vDs07dMjF4uuBGIJ0=
Subject key identifier:   5E:2C:09:2C:47:C7:00:71:AD:51:25:2D:85:66:FC:13:B2:9C:D8:69
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F4328584D1B1A0AB0859AE89F9E3FEAC0
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     3356
IP address blocks:        2602:814:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0a:b0:85:9a:e8:9f:9e:3f:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=846aa211-e6c1-4a39-9575-bb4e39bd6a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:0e:57:4f:af:c6:3d:16:d4:ed:ca:80:3a:
                    23:21:6b:70:f9:ce:e9:27:45:ae:7f:37:36:8a:cc:
                    b8:31:5f:05:df:87:50:47:6b:6f:1a:c8:a4:79:5e:
                    86:d2:fe:5b:11:6f:c0:17:d2:bc:72:0f:13:9d:3a:
                    5c:b2:29:e0:79:ab:10:e4:0d:2f:69:13:2b:1e:0e:
                    ff:cd:2f:c5:a0:92:e0:6d:6b:0d:a1:67:d4:69:e5:
                    d7:9b:53:f0:83:ce:0d:cc:1f:84:5b:bb:13:60:b6:
                    1f:a7:fd:8e:f2:44:df:3d:21:ae:26:a5:76:50:23:
                    3f:09:6e:12:be:21:35:41:0c:a6:71:b4:57:cb:7c:
                    1b:8d:d1:8f:ea:47:63:4d:8f:87:77:42:b8:68:8b:
                    07:5b:2a:7d:e6:8d:c7:fa:b8:b0:be:c3:a5:91:97:
                    5a:a3:32:16:9c:6d:b9:53:51:46:33:95:ae:00:8d:
                    71:60:bd:69:72:52:9e:44:22:29:8d:de:ab:4b:f9:
                    0c:47:f9:7d:b7:35:ef:7a:07:5d:1d:27:64:8f:2f:
                    d2:02:6f:63:74:d7:fe:14:39:6f:b4:f9:02:ec:e0:
                    5f:59:63:c8:26:31:1d:47:65:40:ab:f2:d5:27:d4:
                    57:b3:f9:54:48:fb:89:0c:3f:15:9d:7f:63:22:de:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:09:2C:47:C7:00:71:AD:51:25:2D:85:66:FC:13:B2:9C:D8:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:e7:1a:c2:cb:e5:3d:dc:94:27:31:5d:00:d3:d5:fa:8d:
         da:e0:13:e3:f6:8f:25:99:20:ae:98:a6:27:5a:ff:11:50:9a:
         03:44:47:6b:d8:e6:b3:09:59:49:40:65:a2:48:a1:a6:f1:b9:
         eb:5f:70:42:21:99:26:17:45:c5:34:c2:3f:e7:7c:38:8d:7d:
         3c:ac:aa:e8:4d:74:45:32:b5:34:d0:db:ca:6b:89:db:bf:ed:
         0a:9f:24:c6:79:aa:62:8d:7b:a5:e2:5e:64:08:9d:97:47:b1:
         60:e0:da:55:0e:fc:48:e5:16:fd:9d:f4:8d:ab:4c:8f:af:10:
         a2:d4:1a:35:27:af:a4:29:15:ee:75:13:f6:47:7b:7a:36:70:
         de:26:00:1c:d8:ea:97:5f:e1:12:24:33:1d:ae:c9:d1:2a:68:
         02:51:0b:22:f3:9b:e3:b1:f4:89:aa:28:2e:70:a1:0e:fd:97:
         8f:55:91:1f:fa:ce:82:93:d6:6b:6f:d0:26:93:15:e8:7d:3a:
         38:ea:5e:d8:cf:56:7c:5d:30:b3:84:ac:8f:c5:3f:33:63:7c:
         b6:a1:f8:56:8e:e8:10:26:c8:35:8f:94:9c:45:53:52:d8:0c:
         c5:2e:0d:1c:dd:ca:94:63:d1:aa:10:6e:58:70:97:dc:53:bd:
         b2:85:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 05:36:05 2026 by rpki-client