Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7e352e6c-b955-3d02-8b0f-7a3fdd6d4b87.roa
File:                     7e352e6c-b955-3d02-8b0f-7a3fdd6d4b87.roa (raw, json)
Hash identifier:          qf7Q48fUCqj/t/OyKULdsyLI+faSMMQQBItdsbf1ho0=
Subject key identifier:   C3:DA:BE:35:CE:58:93:F3:6C:81:5F:B1:53:9F:66:E3:FE:AB:99:F0
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584D1D3A2A47433497D5118F5548
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7e352e6c-b955-3d02-8b0f-7a3fdd6d4b87.roa
Signing time:             Mon 09 Mar 2026 19:17:13 +0000
ROA not before:           Mon 09 Mar 2026 19:17:13 +0000
ROA not after:            Sun 07 Jun 2026 19:17:13 +0000
asID:                     16509
IP address blocks:        2605:84c0:100::/48 maxlen: 48
                          2605:84c0:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:3a:2a:47:43:34:97:d5:11:8f:55:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Mar  9 19:17:13 2026 GMT
            Not After : Jun  7 19:17:13 2026 GMT
        Subject: CN=dab5c19a-dc94-4502-b136-2b358e6fa77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:84:55:31:a2:33:93:97:cb:70:fd:b0:e4:76:
                    ec:a5:13:95:c1:a4:d5:1f:e0:d8:21:4c:19:fe:18:
                    c7:39:70:7e:d0:01:03:7e:3c:56:0e:ef:46:ce:c2:
                    81:94:23:b0:17:96:03:7c:fb:06:6d:2f:44:05:19:
                    bf:fc:59:60:f9:2a:e0:40:6d:f3:20:1c:eb:f2:f8:
                    f0:ea:af:c3:ba:20:1b:4f:bb:dd:c1:0b:d5:c7:7c:
                    10:ab:f2:b7:51:61:f6:7a:a8:ed:76:51:d8:fa:3f:
                    5f:21:79:f4:6b:9c:88:c9:5b:22:02:0a:0f:5e:0c:
                    1a:c9:76:30:13:f3:02:76:68:7c:b8:f4:11:b7:8a:
                    c1:b8:ba:45:de:04:bc:3a:a8:b6:72:24:7c:5b:1c:
                    ee:94:f7:19:49:53:9a:6f:c8:15:b1:52:69:7b:7b:
                    78:d8:99:a5:2f:e0:75:2e:14:c5:6f:43:f6:1c:e0:
                    2e:b4:e4:45:7b:f2:87:0a:2c:2b:78:6d:5b:97:ca:
                    6e:d6:93:3f:94:42:53:98:71:11:83:44:18:9f:f9:
                    56:38:dd:93:c4:91:5f:e2:4e:4d:53:76:7a:9b:cb:
                    7d:ac:fd:50:43:8e:93:63:48:c0:c7:94:87:9b:b9:
                    d4:e5:c4:1a:02:6d:2f:c3:8a:06:23:c5:00:4e:ee:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:BE:35:CE:58:93:F3:6C:81:5F:B1:53:9F:66:E3:FE:AB:99:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7e352e6c-b955-3d02-8b0f-7a3fdd6d4b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:100::/48
                  2605:84c0:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:31:90:98:91:02:ef:3c:b5:8c:5a:74:ea:ba:78:23:ab:
         9d:b0:a7:3d:1f:d9:bb:10:c8:df:ba:47:d6:30:0a:d2:9a:08:
         fa:cb:81:5d:ee:73:9a:16:34:d6:f5:19:ea:1b:de:fd:2f:a3:
         ee:81:91:1d:af:da:41:11:fc:ff:76:ca:ca:fe:21:c4:a0:5a:
         a0:2f:f0:a4:10:e7:65:8e:61:68:92:7f:3c:e4:56:5e:70:6f:
         f1:a4:6c:de:a9:49:5b:2a:79:d6:c4:37:b6:df:3a:07:b1:e7:
         a4:3c:d4:91:c3:77:65:8e:12:69:04:e0:cc:c6:2e:63:0f:b0:
         9b:30:c7:82:44:13:50:3f:21:7f:26:61:ec:f3:5d:b4:39:43:
         8d:78:aa:cd:86:ce:fa:92:cf:a5:02:32:36:99:1a:ec:e0:4d:
         db:c5:57:18:21:d3:dc:2f:2f:be:63:43:37:7f:ea:c3:8b:3f:
         4b:68:93:df:12:12:95:02:5a:cc:5d:1d:8f:6a:65:15:ee:80:
         d4:1b:0b:6d:06:3a:65:41:7a:5c:66:3f:e8:f0:92:5f:e5:e9:
         28:52:9f:7b:f2:10:55:b1:11:ef:aa:3f:cb:0a:6a:58:cd:a3:
         84:87:4e:2d:57:74:a7:27:62:e7:68:b1:1d:70:e6:7c:19:ce:
         b3:87:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:11 2026 by rpki-client