Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/71935da8-46ec-38d1-a8e4-37b9ec97d212.roa
File:                     71935da8-46ec-38d1-a8e4-37b9ec97d212.roa (raw, json)
Hash identifier:          wrLiDtTzRGHBGc1kcmjtnylkMj9vdtZzaeu+us9M++M=
Subject key identifier:   7B:FE:0D:00:FC:7E:28:3B:E2:64:3F:4B:47:FA:43:CC:1F:1F:BD:BB
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F4328584D4D39D800F61623DDC0D66A80
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/71935da8-46ec-38d1-a8e4-37b9ec97d212.roa
Signing time:             Thu 26 Mar 2026 23:55:22 +0000
ROA not before:           Thu 26 Mar 2026 23:55:22 +0000
ROA not after:            Wed 24 Jun 2026 23:55:22 +0000
asID:                     61228
IP address blocks:        2602:fb0d:aa::/48 maxlen: 48
                          2602:fb0d:bb::/48 maxlen: 48
                          2602:fb0d:cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:39:d8:00:f6:16:23:dd:c0:d6:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: Mar 26 23:55:22 2026 GMT
            Not After : Jun 24 23:55:22 2026 GMT
        Subject: CN=400d7d34-c701-4ab9-81d1-14ebd10777b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:47:d1:2c:e2:86:97:e6:b1:6b:8c:22:a8:
                    95:a5:d2:10:da:da:50:aa:8a:72:3c:2e:b1:7b:85:
                    fd:d0:56:16:4a:c4:c6:bf:2b:70:2a:18:7b:cb:23:
                    5a:dc:8d:9e:ca:cb:ed:ae:10:bb:64:e5:cc:ed:08:
                    a8:ca:77:3b:4c:0e:a0:b1:a3:0f:3f:5a:47:5c:c9:
                    aa:53:94:27:59:cb:3a:e0:d5:3d:6d:41:a1:9f:9d:
                    80:1e:8d:bf:31:f2:e1:ee:df:85:f0:50:54:0d:a3:
                    5e:48:d7:f8:9c:e1:f0:1a:4b:46:08:2a:cb:c7:5f:
                    c4:25:e0:1f:4a:3c:a1:1c:6d:cf:53:be:03:64:ac:
                    e6:3a:c9:7c:e2:a7:b8:ff:b0:ef:47:69:a0:3d:60:
                    42:16:5a:44:d0:03:7f:a6:34:86:1f:a3:ec:97:f4:
                    34:84:da:8c:08:a8:4d:8b:76:aa:09:bc:f5:dd:53:
                    28:fe:b9:4d:6f:19:bf:f2:fd:b3:63:c0:c6:64:e4:
                    ae:a5:1d:b6:d2:f3:f8:b6:4f:67:84:17:2c:65:4c:
                    50:3b:16:41:52:d4:aa:47:3b:67:46:fd:a6:0c:15:
                    91:d2:56:9e:12:b3:25:da:b4:7a:b2:47:93:71:86:
                    8b:23:68:36:16:4b:99:ba:df:e0:b7:bb:b4:3f:5c:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:0D:00:FC:7E:28:3B:E2:64:3F:4B:47:FA:43:CC:1F:1F:BD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/71935da8-46ec-38d1-a8e4-37b9ec97d212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0d:aa::/48
                  2602:fb0d:bb::/48
                  2602:fb0d:cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:10:0c:54:b8:12:b7:40:8a:c4:95:ec:0e:4c:02:61:e6:66:
         cd:78:6c:86:27:73:de:61:7e:41:3d:83:8f:ea:c8:89:00:0f:
         4c:3e:67:ea:7b:8e:bb:08:75:96:b3:df:20:61:ce:0a:5e:eb:
         f7:10:b1:73:2f:73:18:56:f5:01:eb:bd:0f:a3:ec:88:af:c8:
         e0:fa:e6:c3:5a:72:40:bc:82:7d:53:48:6b:13:33:58:20:e8:
         d6:5b:6d:c5:c6:bf:a2:06:f2:99:2d:36:70:86:85:2d:47:e2:
         35:a8:b7:a9:8e:52:e9:17:4e:7f:39:0a:2d:81:06:cf:19:6c:
         a0:09:cc:58:9a:45:dd:61:70:42:0f:10:37:84:6a:51:8a:e0:
         69:9c:58:d8:26:ec:0a:f3:1f:86:be:25:c5:b2:7c:97:45:31:
         00:cf:69:e5:42:39:77:17:8b:75:83:0a:99:28:66:13:c1:9a:
         42:6c:92:40:40:9c:90:83:8d:78:fe:d2:25:17:a8:4e:cc:83:
         75:1d:9b:cb:7e:89:71:a6:87:27:c1:ef:a3:b9:36:04:fa:81:
         c2:b0:54:2a:6c:a9:75:ca:41:a5:3b:87:29:31:24:b6:e6:a7:
         14:4b:ac:82:53:de:ae:6a:38:5b:ff:73:4f:e8:5a:27:32:a0:
         ec:f1:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 11:45:49 2026 by rpki-client