Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/d5d5b63d-0983-3737-a4ff-c42e7a26d958.roa
File:                     d5d5b63d-0983-3737-a4ff-c42e7a26d958.roa (raw, json)
Hash identifier:          gKjBpJ5XTMcbmMlQ9wFW28iKQUP8jFY4Z12Y6gaB4nE=
Subject key identifier:   4D:2C:89:DB:A4:04:29:FF:3C:D8:50:FE:FD:87:A9:E4:26:CC:FB:E9
Certificate issuer:       /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530
Certificate serial:       010D0C9F4328584D55BCBB41E1DC92DB1075BCC0
Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/d5d5b63d-0983-3737-a4ff-c42e7a26d958.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     14054
IP address blocks:        2602:f476:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:bb:41:e1:dc:92:db:10:75:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=fee54ffc-34bb-42dc-b7d4-d15480bb6854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:79:16:89:3e:cb:90:ca:08:4e:68:24:b3:
                    e9:86:3e:20:b1:b4:bb:f4:fe:40:fc:ea:08:3b:a6:
                    f2:6a:ed:0e:c5:3e:a9:c7:72:b7:e7:a1:81:77:f1:
                    bc:ac:f3:87:92:de:f5:d6:04:67:19:67:99:f3:4f:
                    5d:a0:e1:09:0d:04:91:00:72:17:41:cb:ff:90:39:
                    1f:4c:3e:91:16:65:6a:56:fc:ca:46:a1:94:ba:07:
                    6f:59:eb:54:fd:c4:83:12:02:35:ca:2b:2e:c7:90:
                    6f:5a:fd:1f:1a:9c:3a:5b:5c:21:bd:49:f3:c7:d2:
                    6d:84:f7:f0:b7:3a:17:ae:45:b3:2d:4e:99:21:13:
                    55:02:41:6a:44:2f:d6:5c:7d:48:cd:d1:11:2c:58:
                    d8:1b:ec:af:24:e4:42:ca:f6:1e:5f:3d:e0:e1:7e:
                    e7:47:1b:50:17:59:2d:64:5b:55:21:d0:2a:59:f3:
                    18:e6:a5:1d:70:f8:c0:8a:77:23:94:1c:43:bd:19:
                    5b:b9:f3:68:2a:79:87:24:3c:4a:a2:34:97:ac:d8:
                    98:6f:66:27:29:aa:c6:1c:3a:85:03:5f:ff:fc:8b:
                    df:30:bc:c7:6b:3c:4f:64:83:f3:10:b2:0f:3e:a1:
                    56:f7:d3:d2:db:ab:f5:c6:e4:4c:47:cb:45:fa:53:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2C:89:DB:A4:04:29:FF:3C:D8:50:FE:FD:87:A9:E4:26:CC:FB:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/d5d5b63d-0983-3737-a4ff-c42e7a26d958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl

            X509v3 Authority Key Identifier:
                keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f476:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:cd:64:f7:92:2a:0b:e6:e4:8b:68:3c:37:6a:fc:09:14:f6:
         16:b9:c1:e9:96:3f:e9:5a:d7:16:99:14:6a:cb:8b:68:44:67:
         5e:82:e9:e5:40:d6:15:29:12:1d:6d:d6:7a:0a:0c:85:d3:bc:
         f8:8f:ed:75:ce:07:35:02:b8:58:fb:63:08:27:78:19:7e:85:
         51:dd:bd:3f:40:f4:31:f7:6b:09:f5:7e:1e:61:3d:d4:2b:58:
         8d:a3:7e:90:54:fe:78:a7:24:ce:be:0d:28:4e:1d:ec:65:65:
         27:e5:47:93:ee:1c:53:68:3d:08:1a:47:58:b5:69:2d:ba:8b:
         37:b9:3c:18:f9:05:db:3d:e9:f0:87:13:ab:b9:a6:bd:d7:1c:
         67:1d:74:76:80:57:9e:22:57:46:32:c2:2c:40:03:cb:68:32:
         9c:f1:ef:2e:4e:54:94:07:e1:de:38:d5:d9:cc:7f:c7:6c:49:
         32:c8:d3:9a:de:e0:fd:14:7f:41:f9:a5:1f:0a:5a:7b:5a:3e:
         a7:bd:d5:f7:5f:a5:ab:e7:19:80:22:03:ad:75:04:b9:25:c8:
         83:8f:90:5d:a1:26:94:3e:73:67:e3:3c:05:13:d8:c3:d9:ea:
         ad:4a:21:c1:1e:87:35:75:97:48:43:69:93:a3:da:95:c7:a4:
         13:97:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:09:09 2026 by rpki-client