Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa
File:                     d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa (raw, json)
Hash identifier:          kVxHGZyWs2Mcw+G3JADl3cu91OA/ZlaZfudMHjlnc+U=
Subject key identifier:   B3:B5:F4:E5:BA:61:BC:E7:0C:1A:0F:39:E7:11:23:50:B0:96:62:AE
Certificate issuer:       /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial:       010D0C9F4328584DA6B02684610B7BCCDCD91020
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:f86e:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:26:84:61:0b:7b:cc:dc:d9:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=135b66a4-ae8f-492e-998a-44b5cbb489d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:dc:5d:58:66:6a:cd:4f:2c:a6:ae:94:40:
                    94:92:d9:db:d2:14:36:5f:0a:be:c2:fa:fb:71:98:
                    60:29:b1:e4:a7:88:63:a5:82:82:df:ed:ef:16:88:
                    80:e3:1f:4d:5e:08:93:ad:2d:6d:ff:95:5b:57:54:
                    3d:fb:fb:4d:97:3c:55:37:31:ad:d7:e1:41:2f:53:
                    2b:36:27:9e:96:7b:b4:43:60:c0:b3:37:bb:01:0f:
                    79:e1:0e:f7:4a:b5:3a:dd:18:ee:ed:31:81:ca:4b:
                    5b:ed:e3:94:22:fe:aa:30:8a:ad:5e:17:90:29:63:
                    9a:bb:12:f4:1a:80:12:b2:2c:fc:2b:a9:14:5f:a1:
                    15:1b:df:06:c5:d8:61:11:ea:d1:ff:0d:1e:6a:d0:
                    19:9e:c2:9d:6a:2a:e3:fa:c7:d8:2a:8b:57:8f:3c:
                    ff:a6:33:49:a6:8e:a2:cc:60:af:b5:88:fb:73:44:
                    cf:ef:f7:3b:be:12:80:fa:eb:12:3d:cc:f5:b4:47:
                    9c:ca:5b:92:bf:6e:bc:5c:6f:3e:37:76:54:b7:b3:
                    19:a2:ea:c1:70:d0:49:4e:9a:45:17:53:7c:0d:e6:
                    58:d7:2c:e1:7c:82:ce:65:4a:66:ec:1c:5d:f3:0d:
                    5d:58:b4:ee:87:4a:d5:d5:4c:a6:6f:08:05:e6:9e:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B5:F4:E5:BA:61:BC:E7:0C:1A:0F:39:E7:11:23:50:B0:96:62:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/d6d352a5-c4bc-3d02-ae35-2c742d82af81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl

            X509v3 Authority Key Identifier:
                keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86e:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:26:bf:89:5c:95:e1:54:2d:17:d2:ca:e9:7b:fc:d2:46:6d:
         87:64:9f:c5:8d:20:e1:6e:58:f9:52:81:71:9a:55:a8:3a:7d:
         9f:db:c7:73:e7:17:8f:44:7b:41:b6:36:57:06:9e:f6:07:69:
         d8:6b:4b:36:a7:bc:31:15:c6:2b:ac:05:7b:e7:f1:92:34:e7:
         c0:08:f6:dd:eb:7f:1b:1b:77:97:85:23:2e:ac:72:2a:09:7e:
         09:d5:1d:0b:fa:47:bc:7a:75:e9:b7:20:7f:99:79:b8:ad:ab:
         e7:70:73:2d:73:4a:49:45:5c:73:21:bb:50:cd:1f:2e:70:61:
         85:40:82:6d:f4:e2:4b:71:6a:70:5e:32:e1:b4:3f:f4:19:af:
         51:6e:9b:e4:bb:d2:5c:45:c9:9d:fb:ae:0e:6d:9f:a3:91:01:
         fe:f7:77:ba:3c:a0:b8:75:82:8c:7c:56:90:0a:73:17:d0:81:
         2d:06:55:c8:59:3f:d0:c7:10:cc:d8:2c:10:59:ae:70:af:55:
         2e:83:10:2f:9f:07:4e:42:37:0b:7e:3b:5f:69:24:15:99:b7:
         bf:a5:62:5e:6f:23:b5:29:0c:08:72:14:ff:87:93:20:74:46:
         c8:fb:81:22:b1:41:7f:a3:d5:2a:ff:31:58:e3:a9:af:c7:f6:
         c0:26:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:34:42 2026 by rpki-client