Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa
File:                     b702a54f-cb84-3f3d-8844-5043f149c734.roa (raw, json)
Hash identifier:          PI2/4AdeWfd4c/P3fLtkP8W0trlNx9aRn8LRnu4fhc8=
Subject key identifier:   72:7D:2D:86:D7:0F:C1:B2:04:B2:13:E6:BC:A2:30:22:B2:52:F8:3C
Certificate issuer:       /CN=5225c725-faab-43c9-8d24-f49817b762c6
Certificate serial:       010D0C9F4328584D359FA977D6DB00C94D76E080
Authority key identifier: D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     207722
IP address blocks:        2602:fb09:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a9:77:d6:db:00:c9:4d:76:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5225c725-faab-43c9-8d24-f49817b762c6
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=4f21504d-68a0-402e-a9d9-ad68ee811826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:dd:97:82:51:1b:e6:71:6b:42:e0:09:52:
                    6b:12:08:78:6b:8c:ee:c8:7b:14:83:34:4e:d0:3f:
                    87:ee:8b:2d:b9:a1:1b:04:9b:05:56:54:ca:e4:95:
                    e7:67:b0:de:da:12:66:0d:a0:0f:40:f6:9e:be:5b:
                    86:50:34:2d:3b:c7:86:a7:ea:af:0b:7d:38:08:81:
                    cd:4b:a6:46:8d:00:c5:a9:98:50:7a:c6:df:3e:4f:
                    ab:f8:5d:ca:52:c7:0e:55:89:30:16:7b:f5:b6:41:
                    0d:ae:13:48:8a:50:eb:ea:0a:a9:b0:e5:f0:e9:dc:
                    b6:19:36:89:35:82:99:2e:4d:30:ef:41:97:37:ad:
                    35:13:b9:dc:30:51:51:8a:00:de:e6:4f:85:5b:32:
                    25:69:61:60:b7:59:17:00:84:63:f2:c3:71:71:05:
                    be:f6:65:7c:e9:95:3a:be:be:41:61:59:e9:64:94:
                    58:92:bc:77:fd:58:2a:b2:86:a0:6b:b9:2a:2c:55:
                    ba:02:2d:c8:8b:21:99:7e:42:97:de:83:d1:c0:45:
                    2a:e9:b3:e4:94:8a:cd:0b:fe:1b:41:95:0c:74:62:
                    04:39:f1:cd:c5:99:56:0a:ed:8e:1e:6a:07:3d:eb:
                    14:e5:70:68:ae:4b:49:05:32:e2:83:38:ec:f9:98:
                    cd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7D:2D:86:D7:0F:C1:B2:04:B2:13:E6:BC:A2:30:22:B2:52:F8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl

            X509v3 Authority Key Identifier:
                keyid:D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb09:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:af:27:4c:21:f7:22:f7:ed:fe:6e:70:62:78:a2:4f:e1:0d:
         90:38:75:aa:33:83:2c:29:05:46:65:97:f8:85:5c:3a:4c:24:
         a6:8e:86:25:ee:8f:63:de:8d:12:d8:3f:30:8d:d9:ca:8e:4c:
         a3:db:fe:54:03:a8:0e:ce:cb:9e:28:f1:5f:2d:40:f0:bf:88:
         49:c9:0d:13:17:8c:a8:12:cc:23:13:95:08:3b:fd:8a:dc:f7:
         fd:91:fa:28:c6:8b:ee:c1:b5:cd:28:42:42:55:d7:3e:62:f2:
         92:f1:5c:fb:48:eb:de:40:77:a1:0b:c8:8e:f0:00:9a:32:6e:
         55:37:1f:94:4f:14:0a:d3:c9:e4:5c:22:f2:b6:2c:8c:d9:47:
         4a:ef:32:0e:6a:e2:cf:51:b2:89:63:fe:59:7c:37:b1:60:21:
         04:25:7a:82:85:a8:53:25:ca:81:a9:ec:66:e3:46:f0:b5:40:
         8a:ec:23:7d:f8:30:5b:67:20:85:5a:35:2f:23:14:13:48:3a:
         fb:ed:43:46:48:23:c3:14:e4:73:6d:ba:40:4c:30:5d:f1:31:
         0d:5b:69:a4:cc:1b:24:3a:8c:89:43:64:30:81:6b:cc:3c:82:
         2e:97:4a:d2:ee:f0:78:91:a2:18:60:c6:25:f8:20:ff:c7:22:
         cc:bf:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 10:01:12 2026 by rpki-client