Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa
File:                     a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa (raw, json)
Hash identifier:          44sgprg5YvcjhQh+yeZKNJ/LI2qcZDLJ6CsmHEX5jgk=
Subject key identifier:   0F:A6:DC:6D:E2:AA:DE:FB:8E:98:9F:1C:85:68:4C:7C:EF:2C:2D:91
Certificate issuer:       /CN=f838c026-61f9-443d-b867-26f60a99d561
Certificate serial:       010D0C9F4328584D2BDA21B46ADD4CF3D3595280
Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     30205
IP address blocks:        2602:f9c1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:21:b4:6a:dd:4c:f3:d3:59:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=dcf80eee-a7eb-45ec-938f-f558d293731f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:60:77:e1:ab:8c:d3:50:54:41:58:07:bc:
                    5d:8a:16:5c:7d:4a:6f:ec:91:8d:13:d2:e5:76:b2:
                    08:4b:ad:24:b9:d7:5d:9e:44:88:d2:3b:14:67:fc:
                    8c:ca:4e:88:3c:ef:63:1d:20:a1:89:a2:4b:25:38:
                    95:7d:8e:2a:91:2c:82:51:22:f2:a9:89:9c:e8:42:
                    f1:4c:87:0c:6a:57:39:5f:24:29:16:f4:e1:50:6b:
                    b6:e9:d0:ac:b6:c4:7d:9d:3d:f8:e4:63:08:08:1e:
                    36:21:32:ce:e2:21:ee:8b:af:9e:bb:9f:f4:f7:3d:
                    ce:28:71:83:67:fc:db:49:33:72:ba:39:11:c1:1a:
                    fb:cc:1a:9f:71:f7:90:1e:7d:6e:44:5a:93:d2:f7:
                    5a:8f:4b:ee:63:53:17:2f:bf:cd:63:e6:cd:d0:24:
                    cd:3a:19:e9:0a:fd:c6:a2:66:c7:89:d1:70:67:48:
                    fd:0b:f4:b7:ec:c4:2d:04:84:e6:f0:11:32:ef:d3:
                    7f:5f:ed:1d:72:2d:c3:30:c4:df:22:bb:06:c6:18:
                    66:8b:fc:b7:38:5e:f0:c5:1f:24:22:54:f0:78:05:
                    04:45:52:dd:5f:8b:53:f6:1f:6d:e8:54:66:89:b1:
                    ac:66:ae:06:f1:8c:f5:b0:38:43:75:c9:45:cc:e2:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A6:DC:6D:E2:AA:DE:FB:8E:98:9F:1C:85:68:4C:7C:EF:2C:2D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl

            X509v3 Authority Key Identifier:
                keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:f7:b0:cf:11:c1:39:45:b9:88:39:28:5c:af:21:81:85:
         f5:ef:20:24:6c:1f:5f:cf:6d:1c:bb:c3:6d:45:8d:d2:b6:80:
         69:40:67:35:f6:e6:fc:7e:1e:ad:68:09:8f:0e:70:a1:87:38:
         82:da:65:23:53:21:6c:01:fa:c9:30:d3:17:b4:29:5a:0d:3f:
         72:ac:90:23:2b:96:44:64:e4:1b:8c:c0:5b:da:e3:4b:e2:18:
         39:8e:54:c4:4c:0e:83:d8:c5:6b:d3:1e:0f:8a:d8:4c:9e:1c:
         5a:bc:71:b0:dd:c1:a9:2b:f3:7d:01:b4:69:a1:35:b6:70:53:
         9b:3f:87:98:a6:01:35:9e:c6:5c:ea:14:11:8d:77:50:6b:27:
         cf:7d:d7:f1:b3:b2:37:69:2c:90:3e:78:60:97:50:7a:80:91:
         50:b4:fc:d3:f4:de:5d:a0:aa:a1:9b:48:62:28:55:a2:3e:0d:
         c7:be:4f:3a:47:4c:b4:b7:d4:34:5b:63:f1:fe:09:d6:f3:5c:
         34:60:c9:20:21:1a:82:0a:54:e6:14:30:46:9d:95:3c:7d:76:
         99:69:40:16:f0:66:c0:b5:3e:d9:9a:c6:0f:19:99:c6:58:2e:
         82:79:69:22:5d:62:88:5a:2d:ea:3e:9b:36:a3:79:24:b9:5e:
         a3:e6:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:47:45 2026 by rpki-client