Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/1a34428f-f332-38c0-a1d8-d24d286c36c0.roa
File:                     1a34428f-f332-38c0-a1d8-d24d286c36c0.roa (raw, json)
Hash identifier:          a8mVJoaJCzMoNav7edeL8ECaJ5lM4V738+yWuKNGw1k=
Subject key identifier:   5B:0F:0F:E8:43:6B:FB:FD:2F:97:90:29:EA:7E:EE:72:54:51:22:DC
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F4328584D651512DAFEE692FC6BB6AEE0
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/1a34428f-f332-38c0-a1d8-d24d286c36c0.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     399652
IP address blocks:        2602:807:6005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:12:da:fe:e6:92:fc:6b:b6:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=e3957e6f-e553-4987-b944-95688d2484c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c1:62:95:99:38:45:ec:d9:15:b8:e6:e4:c6:
                    25:6f:f9:2e:1d:20:99:6e:77:ff:fd:be:38:6f:5a:
                    7c:69:4f:e2:0f:dc:fe:48:4c:65:e9:fc:c5:74:4b:
                    09:27:10:77:b1:5e:b4:2e:24:07:b3:60:c7:fc:9d:
                    af:c4:ca:12:d6:32:24:12:82:8f:b2:90:c5:f2:2a:
                    d3:46:c7:2c:5f:be:3d:b1:4d:90:32:b0:ba:76:f0:
                    96:d3:35:5d:3e:0d:28:25:93:5c:bc:b4:45:de:2c:
                    ba:70:3f:77:71:a5:b7:97:8a:fe:52:f5:6b:f1:4d:
                    c1:71:5b:d8:41:b0:5b:bd:45:47:ed:7e:24:f7:f8:
                    37:19:15:cb:d8:c7:af:9b:13:fb:6a:7a:2a:05:ca:
                    54:1f:47:65:69:61:b8:cb:7f:a3:e3:50:4e:ef:68:
                    c5:83:5b:19:30:68:39:fd:35:f5:8b:f1:9d:a3:5f:
                    ce:ab:a5:71:76:32:1e:54:94:c3:d6:28:44:4b:23:
                    f4:4e:1f:c9:76:bb:bc:d9:d9:eb:d9:d3:f5:92:3e:
                    7b:ca:ac:69:3b:79:12:15:ce:40:bd:68:07:cc:ce:
                    42:28:a9:6a:d3:17:87:77:8f:e7:b0:28:6b:da:53:
                    b2:42:d2:c2:b3:42:28:c9:b1:7a:5d:1e:02:fd:36:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:0F:E8:43:6B:FB:FD:2F:97:90:29:EA:7E:EE:72:54:51:22:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/1a34428f-f332-38c0-a1d8-d24d286c36c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:ef:5b:27:de:d6:b3:9f:4c:a8:99:cc:01:05:e3:4f:90:
         60:bf:8f:0b:34:4c:c8:03:e4:1d:f2:a9:dc:3a:4e:ec:78:21:
         a7:5e:eb:e6:4f:12:60:eb:d8:9b:33:0c:39:4f:f4:c5:3b:8c:
         80:8d:ac:12:64:19:9e:87:76:3a:ce:23:6e:85:53:b4:4a:aa:
         45:09:5c:96:29:4e:4a:ff:2b:9d:f8:d7:4f:5c:9a:52:49:b2:
         b5:c9:e6:1b:39:03:6b:c2:92:d0:70:41:8d:5c:66:e5:56:54:
         22:ee:66:20:98:9a:a1:d7:16:d1:77:8f:82:ac:37:3a:a0:9d:
         69:6a:8f:a6:12:85:d6:f5:7a:26:15:43:b6:d7:d3:9f:74:70:
         c9:52:0f:f1:c2:5e:26:f3:3d:ef:0f:cb:80:2a:4b:71:9c:90:
         88:19:43:f4:a8:9c:6b:e0:56:98:d4:b8:a8:85:ca:2e:cb:ec:
         0b:42:7a:98:2f:88:9c:d1:11:8f:6e:d4:99:96:12:bf:52:b1:
         7c:b0:62:aa:da:d8:33:16:0c:1f:d4:b8:bb:41:de:43:43:df:
         c3:70:63:64:62:26:68:45:92:75:4f:3b:f3:6e:bd:48:8d:41:
         88:13:e7:15:3f:74:b9:64:eb:6d:e5:5c:3a:8a:80:80:71:c8:
         23:b7:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:29:59 2026 by rpki-client