Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/4f9a2e7f-3850-32dd-943b-4c4b9bd649ad.roa
File:                     4f9a2e7f-3850-32dd-943b-4c4b9bd649ad.roa (raw, json)
Hash identifier:          6kSyLGL+ul0E+6VyDJy++U0+glibI6lp9tqBnd2aRjw=
Subject key identifier:   1F:58:D0:37:78:E7:9B:A7:59:9F:A0:9C:03:BB:0F:B7:A5:75:9E:7C
Certificate issuer:       /CN=914db202-4885-454b-97f8-223de4bf2ca8
Certificate serial:       010D0C9F4328584D2A74DB833632F75FAD99BFD4
Authority key identifier: C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/4f9a2e7f-3850-32dd-943b-4c4b9bd649ad.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     63129
IP address blocks:        2602:f688::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:db:83:36:32:f7:5f:ad:99:bf:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914db202-4885-454b-97f8-223de4bf2ca8
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=44b4be8f-6b2b-48c1-a79f-3b82015157ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:70:fc:8a:d9:7a:8e:54:fc:63:33:30:7b:
                    4b:8e:66:ba:a3:e2:67:37:56:fd:44:ab:4a:ab:fd:
                    16:a6:5e:09:b9:71:53:75:79:ce:a6:87:64:c7:e4:
                    15:ef:1b:14:23:84:cd:63:75:94:1f:85:36:e4:6e:
                    a5:f4:ee:96:24:12:72:de:d1:97:fb:1d:72:f4:a4:
                    f3:1a:1f:4a:cb:89:5e:af:20:dd:b9:08:12:4e:15:
                    1d:57:68:fe:c9:16:6c:be:44:9e:8c:98:2d:99:22:
                    fb:a9:a9:0f:9e:41:bd:d8:22:05:f1:7a:28:31:61:
                    21:51:f9:d8:72:30:36:91:14:2e:db:1e:65:81:76:
                    39:db:3b:ae:ad:8f:a3:d2:c0:0a:bc:5d:dc:33:22:
                    58:16:24:6e:50:be:5f:e1:1a:13:62:60:35:ac:58:
                    4e:47:3e:31:2e:ab:97:c9:f9:06:35:a6:60:95:d5:
                    d3:cc:fe:63:fb:b5:91:86:f1:7b:85:ac:b3:29:3f:
                    5c:f3:c4:e0:27:f2:6b:10:6a:52:83:e7:65:b8:82:
                    4a:46:ed:85:a9:59:37:ca:b7:60:fb:33:ba:55:39:
                    4f:3c:71:05:67:49:dc:6e:3e:e4:7f:65:cc:7d:bf:
                    67:3c:32:32:8f:1e:29:57:23:ae:ab:2c:cf:5a:c3:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:D0:37:78:E7:9B:A7:59:9F:A0:9C:03:BB:0F:B7:A5:75:9E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/4f9a2e7f-3850-32dd-943b-4c4b9bd649ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f688::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:76:ef:14:b6:a4:98:05:b8:30:c3:cf:bc:a8:af:f8:b0:6a:
         b6:13:14:70:28:33:27:2d:b8:1e:55:b9:25:05:a6:00:e0:62:
         64:f8:24:37:c6:f7:79:72:d1:82:53:8d:67:1f:f1:c8:0c:10:
         b6:4b:23:12:bf:9d:63:f2:23:f4:bd:1d:64:d4:84:f7:f5:a3:
         78:ef:dc:ea:e0:d9:14:c2:32:0f:41:69:38:7f:bb:d4:d9:66:
         a7:ab:24:e7:d3:81:3b:40:be:09:a2:6b:35:b4:fb:90:27:ff:
         c6:89:81:47:67:39:9d:c5:b6:08:06:5e:c0:8b:07:3c:2f:c9:
         4e:15:ab:0a:c0:09:8c:49:ad:c0:52:bb:98:89:77:06:cc:fe:
         48:57:33:9b:f7:51:86:f7:8c:a3:af:b2:fa:40:ed:a8:35:bf:
         dd:5a:59:d1:4f:44:2b:9e:fc:1d:b4:64:57:8a:51:df:d9:5c:
         5e:ef:b4:63:46:14:48:06:73:cd:fd:26:bb:77:3a:f1:f1:86:
         e1:ea:3e:c2:58:21:79:ab:e1:5c:48:77:b5:05:2f:cb:1d:5b:
         f8:23:9f:5a:99:96:b6:3d:6a:3a:f3:9d:9b:db:5f:af:3c:57:
         f3:90:3c:47:ba:c1:d6:82:1b:b7:bb:96:0b:62:8a:9f:17:90:
         ff:fb:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:06:48 2026 by rpki-client