Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa
File:                     16e040f3-42b1-387b-aca6-5b8efee58de6.roa (raw, json)
Hash identifier:          Zf5Q18CLR89VQa46gZKGkuZCiT4Q/35OJOsHj//LfcA=
Subject key identifier:   01:B7:B6:05:39:7E:A8:31:3B:06:51:0B:8D:48:D4:9C:C1:BE:AC:83
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584D0BDD0A547BD8AD2165A8B738
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     394593
IP address blocks:        2602:f99c:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:0a:54:7b:d8:ad:21:65:a8:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=46adb9ad-6a05-4fb6-b778-aa1ddfabdbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:91:a0:cc:22:7e:47:75:da:89:e2:86:ea:7d:
                    0f:47:70:1a:21:01:40:bd:b6:35:7b:62:83:93:98:
                    34:01:ff:20:07:e1:59:ab:c9:8d:30:aa:4d:19:48:
                    8a:bd:2d:e3:5e:cf:7c:f9:40:e1:13:b0:5b:a8:ae:
                    80:2a:b3:56:96:8e:f0:d7:43:14:b4:ec:b9:19:4d:
                    5e:9b:35:5d:85:35:77:95:07:a1:27:cd:64:95:a8:
                    c1:2c:65:a2:6a:58:a6:0a:2e:87:63:35:79:a0:0d:
                    e9:e3:88:61:07:58:fd:73:f5:0d:4a:46:2c:67:13:
                    f0:0e:db:e1:f7:1c:d9:05:64:22:63:6d:39:50:1f:
                    cc:1c:7e:fc:2b:4a:05:41:a2:2a:0c:f8:56:53:af:
                    04:44:93:e9:b8:12:16:8d:e8:fb:99:2b:ef:07:d8:
                    7b:4b:4e:4e:84:18:1c:cb:d3:5f:aa:d4:dd:57:11:
                    14:b0:42:64:f8:ec:f2:46:a5:46:a0:65:39:93:64:
                    d6:8f:09:5f:1d:d8:42:e5:54:fd:2b:91:f2:4a:ea:
                    b3:1b:4b:df:db:0a:cd:4b:a3:7f:d9:32:a6:a8:f7:
                    3b:3c:ed:76:96:51:dc:82:d7:ea:a0:d7:f1:7f:97:
                    39:0d:d3:89:91:fe:3e:64:4e:df:39:f2:1d:5b:a6:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:B6:05:39:7E:A8:31:3B:06:51:0B:8D:48:D4:9C:C1:BE:AC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:28:09:0e:e0:84:a4:f1:33:db:92:c1:97:d8:8b:79:23:fd:
         da:ec:23:77:0c:62:e9:88:cd:fc:0f:5e:fc:c4:e6:b3:8b:57:
         e6:50:fb:08:38:18:35:64:f5:d5:58:af:ba:e8:4d:c8:8c:df:
         6a:e3:8f:6d:97:8c:c6:ae:da:6c:f6:ca:01:1f:80:aa:f1:25:
         78:ba:6a:2d:7a:ac:8b:11:af:b6:4b:a0:33:90:fe:e9:b1:90:
         e6:d8:eb:71:88:3f:c4:94:d4:77:8b:b0:6c:da:b8:ef:9a:1d:
         fb:6d:4e:2d:39:72:cc:7d:1d:b5:cb:d7:57:b8:58:b1:be:55:
         63:4f:27:4f:3e:de:2c:d7:d0:22:6a:2c:15:d6:7d:d7:2a:72:
         b8:9a:7e:aa:2d:8d:ee:32:3b:82:75:70:a2:bd:d0:2a:dd:4e:
         09:29:d3:19:29:73:f6:43:91:47:c1:bb:2c:d7:e7:d2:96:81:
         ee:d6:83:16:c1:4c:26:fe:50:1a:11:34:1b:77:82:67:b0:77:
         90:16:70:0f:c5:e8:65:9a:25:19:c2:ec:bd:eb:35:cf:6f:77:
         d8:ee:8c:3b:90:f1:b2:69:f4:21:79:e5:75:ba:ab:ae:f8:3f:
         9d:55:ec:6a:f1:c1:79:30:89:11:ab:2d:f3:55:49:66:1e:8f:
         8e:f6:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:52:17 2026 by rpki-client