Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa
File:                     31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa (raw, json)
Hash identifier:          X4f1zw/fWUCEL0msszewRhBrgcSzL34kYt8dDg+SxX8=
Subject key identifier:   15:09:33:07:61:EA:19:5B:B8:CD:41:EF:61:09:81:4C:6E:6A:2B:2D
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F4328584D1707CBBC9C56F802093E529C
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     40776
IP address blocks:        2602:f8ab:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:cb:bc:9c:56:f8:02:09:3e:52:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=7c417b2c-59e2-4f3b-8f0b-d1e3a87a5a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:aa:a4:e4:d1:37:7a:e5:88:62:6f:b9:e9:
                    20:35:08:da:e2:0d:1f:36:23:9f:fd:eb:31:ba:55:
                    9d:31:2b:da:cf:f1:d8:99:b0:cb:75:6b:c9:13:ab:
                    e4:3b:7d:02:b9:60:0c:f0:b5:ed:fe:a5:42:f7:d3:
                    7f:95:9d:8c:76:b3:e8:8f:96:2c:a3:c0:0e:c9:f9:
                    0e:06:5a:64:db:30:9f:d5:63:91:86:b1:dd:be:40:
                    70:5e:9f:6b:d7:3e:28:bb:c6:f0:62:88:ac:7b:b9:
                    35:8f:c8:45:ad:9a:39:7c:72:36:d8:8c:26:6a:67:
                    f1:6b:2b:da:31:05:9f:a0:6e:04:f2:5d:53:e9:06:
                    22:fc:1b:e0:10:eb:11:a7:ab:d5:cb:66:9f:61:42:
                    81:67:7a:7d:bd:24:f5:3f:bd:af:be:fd:ee:03:c2:
                    4f:bb:5a:ae:85:fd:36:95:ba:01:22:cd:0a:b7:ad:
                    3c:44:06:8b:04:1d:db:01:37:8e:0e:cc:c5:af:e6:
                    5f:d2:3a:cd:af:17:82:ea:2b:98:dd:37:b0:2e:ca:
                    a7:ff:33:c2:af:cf:03:70:a7:19:89:35:1d:ca:99:
                    22:e6:81:e0:13:59:51:43:69:8f:8a:5a:b5:c3:cb:
                    ef:2d:a5:f9:8a:ab:57:d8:7f:59:f0:ee:1d:53:fb:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:33:07:61:EA:19:5B:B8:CD:41:EF:61:09:81:4C:6E:6A:2B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ab:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:79:b4:da:a9:c9:eb:10:a9:39:40:44:f7:f0:72:64:c6:6c:
         59:61:39:bd:bf:d1:68:a3:74:f6:70:c2:e1:bf:89:98:75:93:
         0c:ba:be:5d:27:80:90:9a:bf:d4:22:0e:df:64:72:d3:95:8d:
         9d:5a:5f:d5:d5:a8:a6:ef:a2:47:32:a6:7e:60:7b:44:d9:f4:
         fd:2b:22:dc:8b:02:25:37:77:35:d7:29:47:6f:26:c9:a2:2b:
         90:98:fc:2e:b9:78:c7:d4:7e:9c:d9:3c:af:83:c4:52:1d:7f:
         cf:91:e5:2c:c5:fb:05:0b:64:29:bb:bc:33:71:30:03:e7:b3:
         35:f0:f2:ed:64:f5:07:57:27:75:5c:80:01:32:60:96:ae:26:
         ac:92:3e:b1:28:c0:ef:b6:49:25:4a:6b:d0:e6:86:5a:d5:9e:
         25:0f:31:1f:ee:37:3a:5d:3e:0d:43:78:3d:01:38:27:f7:39:
         b0:dc:ea:b0:9b:ab:e6:2a:f5:8a:b8:b5:8b:a9:6f:e8:f5:9d:
         e8:da:f0:5c:15:04:f5:bd:e4:08:4f:f6:6a:aa:f7:93:a1:81:
         bd:89:dc:b4:1f:9c:04:ef:f6:cb:ca:44:3e:74:98:7f:ea:46:
         3d:96:43:de:a4:ec:67:50:94:62:eb:c6:8d:f1:fa:bf:5b:79:
         b5:00:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:07 2026 by rpki-client