Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/631c1d4c-100f-3133-97a4-27b49dab3fe0.roa
File:                     631c1d4c-100f-3133-97a4-27b49dab3fe0.roa (raw, json)
Hash identifier:          aS7x1SmtbiNjWlBbYp41f57R19lfuYpfzENY8940WZU=
Subject key identifier:   92:B8:93:CE:42:A4:82:1A:10:AB:8C:24:83:E6:A3:01:C3:3B:1C:D6
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584D0DE678FF2497E1414A2331C0
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/631c1d4c-100f-3133-97a4-27b49dab3fe0.roa
Signing time:             Wed 04 Mar 2026 07:31:27 +0000
ROA not before:           Wed 04 Mar 2026 07:31:27 +0000
ROA not after:            Tue 02 Jun 2026 06:31:27 +0000
asID:                     140666
IP address blocks:        2602:fa80:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:e6:78:ff:24:97:e1:41:4a:23:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Mar  4 07:31:27 2026 GMT
            Not After : Jun  2 06:31:27 2026 GMT
        Subject: CN=0d67cbaa-b68b-4221-96ad-bcac9d19854d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:e3:08:a0:7b:7f:94:ab:79:9e:aa:bf:07:
                    ad:c5:aa:0e:e4:dc:dc:78:e1:3f:b0:00:40:49:d5:
                    01:21:1a:65:0a:aa:93:16:d1:71:8e:43:b7:9d:ff:
                    41:ac:23:f0:ee:c5:a8:b5:24:25:cf:d6:0d:62:e7:
                    af:ab:39:b5:d0:b5:95:3a:a8:b1:06:6e:07:28:e3:
                    8e:a1:90:7a:6b:76:7b:dc:31:79:95:eb:3b:16:21:
                    51:58:5e:33:04:59:dd:9f:ad:fd:8a:8a:0a:d9:49:
                    03:f3:81:12:b9:a1:df:17:ed:97:7a:69:de:ac:a8:
                    32:5d:ac:bb:49:1a:9f:a9:b8:ff:d9:1d:47:d4:78:
                    05:a3:f0:fe:14:6e:62:42:14:2c:a9:0b:1a:20:fc:
                    6c:9a:cc:29:76:ff:8d:f1:62:53:6a:3f:52:35:f3:
                    69:32:13:1c:8d:2c:58:b4:88:ae:75:11:61:15:ec:
                    5f:e5:79:ca:0e:8c:53:a5:38:6d:17:09:01:f4:d6:
                    c3:7f:1e:e1:33:82:00:29:e1:0f:39:29:63:ef:93:
                    7a:06:33:c7:fe:7e:9a:94:d7:82:ae:bb:cf:ed:44:
                    77:52:f8:fa:c0:49:6d:78:d8:99:0a:22:bd:fb:96:
                    48:99:b3:33:ec:e8:96:dc:9d:ff:2c:3f:42:a3:9e:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:93:CE:42:A4:82:1A:10:AB:8C:24:83:E6:A3:01:C3:3B:1C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/631c1d4c-100f-3133-97a4-27b49dab3fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:87:9a:38:bc:ea:9c:f6:d2:2d:42:67:01:cc:56:be:ff:
         e4:11:12:97:3e:43:95:1a:eb:99:49:98:ce:6e:6c:b2:a5:e7:
         28:a2:24:a4:dc:f0:f9:24:85:42:f5:5d:ab:bf:3c:22:ad:65:
         60:95:c4:7d:cc:73:20:6c:ed:5f:41:db:f7:c7:8e:da:4f:7a:
         10:bf:8c:ca:b1:a4:ed:95:53:77:e6:a1:b5:c9:f5:e0:3f:b8:
         3b:0c:d1:50:1c:a1:5d:d9:42:f9:55:4f:60:a9:9b:fe:5e:af:
         1a:b2:36:b4:56:5d:ed:ea:15:9f:a1:be:aa:f0:c0:65:82:ca:
         de:3d:9d:df:13:30:5b:0c:eb:c1:09:7e:aa:91:82:b8:1d:97:
         81:c4:c1:e9:68:d3:2f:b3:76:62:9e:7e:7a:e9:b5:4d:57:43:
         db:39:be:c4:34:89:63:ad:28:be:38:80:3e:06:08:d0:82:35:
         19:19:1a:25:7e:2c:e2:f3:28:7f:bc:9f:dd:6c:a4:62:40:4d:
         21:92:ed:c9:09:8d:52:6e:2c:83:82:cc:3f:72:78:64:33:71:
         b7:d3:9c:12:ba:67:2d:9f:c4:9e:cc:93:94:d4:79:cb:42:53:
         fc:fc:6b:f3:02:05:09:51:51:c6:51:67:9c:88:88:07:8c:b5:
         10:5b:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 01:04:13 2026 by rpki-client