Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
File:                     8772ccd6-b189-3648-86b4-02b297d28b4d.roa (raw, json)
Hash identifier:          QfNCwKg+qiUZlWXiG8PN8RajJ2nVxl8rrThAcrtp5VU=
Subject key identifier:   C7:A7:A8:BB:24:55:5A:6D:1B:B9:1F:F3:8C:E7:B0:0C:C4:E4:CF:24
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584D5E1A4A60DBD43752038D4210
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     19168
IP address blocks:        2602:fd23:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4a:60:db:d4:37:52:03:8d:42:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e1569878-f763-494c-9fea-0ea6c25a3fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:e5:a0:cf:a5:f4:3c:1d:ef:19:2f:a4:e5:
                    d2:9d:94:d9:5d:aa:8a:3c:74:1a:75:c7:24:1f:aa:
                    24:5f:08:7c:85:d8:0c:2e:b7:e6:34:17:51:cc:ac:
                    f9:e0:4e:5d:00:18:ff:80:7d:ef:52:e8:7e:90:e5:
                    ed:14:3f:0e:c7:4d:f8:f0:29:09:f3:f6:3e:93:1c:
                    4f:cf:25:1e:75:b9:5d:aa:f9:1c:50:50:19:df:dc:
                    b8:cf:85:00:db:a6:8b:8a:46:d6:33:56:93:81:f7:
                    12:a4:2b:63:68:ae:1a:19:e5:66:20:74:5f:d8:d7:
                    cd:6e:c7:56:cb:1e:c2:9b:d6:3b:34:fe:78:47:20:
                    ac:bc:6f:4e:b2:ab:22:f8:41:ed:d1:3a:3e:4b:cb:
                    25:f2:5e:a8:83:e4:25:36:3a:ef:a0:8b:0d:e8:2d:
                    4c:23:83:1a:ed:1a:c7:46:df:ef:43:37:06:f7:04:
                    62:c3:a4:9b:06:81:f9:7d:45:29:11:6e:d7:7a:5e:
                    53:04:62:72:62:9b:17:af:0a:0e:2c:18:c3:9f:e5:
                    99:f3:44:c2:56:8c:b7:24:ef:f3:09:b2:bb:e8:8f:
                    4e:ac:02:40:b9:83:a4:c3:a4:a2:2f:d8:5f:36:dc:
                    90:c1:c6:17:19:03:59:96:d1:26:13:f8:90:7a:47:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A7:A8:BB:24:55:5A:6D:1B:B9:1F:F3:8C:E7:B0:0C:C4:E4:CF:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:48:1d:3c:5d:87:ca:0e:35:61:4f:1b:d0:2a:68:63:ea:
         b2:a5:76:37:aa:bd:f9:7e:c9:4a:51:2a:69:b3:d1:0f:3c:52:
         5b:f9:9c:9a:e6:e6:96:07:8e:d4:7c:7f:c1:84:2c:b5:1c:1a:
         47:46:7c:16:d0:bb:8b:ff:8f:58:33:67:4d:a7:af:ff:38:29:
         4c:80:02:c0:65:d7:df:29:28:45:00:82:80:f3:14:61:21:fa:
         2e:85:72:f4:59:55:84:47:9f:29:45:9d:6c:cd:cd:03:6b:3e:
         b5:f8:48:ad:4f:13:df:02:96:d0:73:ac:72:42:b2:fa:fd:b1:
         0b:1b:52:54:94:56:bd:cd:0c:fe:55:96:a5:38:46:57:a5:a6:
         9c:59:57:4b:79:f0:9b:54:c5:09:55:1a:d4:8c:84:68:a8:8f:
         dc:58:c1:06:6f:d3:df:2b:68:a9:fa:4d:12:23:3d:5d:f1:8c:
         8a:da:b6:19:e2:71:da:52:6f:74:cc:63:35:c6:64:29:c0:93:
         69:27:44:1e:fe:7d:02:10:93:fc:01:b3:8f:88:f8:04:a7:6f:
         48:e3:6c:67:55:b0:1d:9d:d3:c7:4d:45:3d:02:10:60:ff:4a:
         62:80:b2:c2:4f:ff:45:c3:1c:55:7e:c2:43:f4:af:20:e1:17:
         47:bb:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 08:40:06 2026 by rpki-client