Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bb80da58-6b70-3c72-b6e9-6854d0b3ca85.roa
File:                     bb80da58-6b70-3c72-b6e9-6854d0b3ca85.roa (raw, json)
Hash identifier:          TcjIG0ITjXhZjBrlj7lVX6bDJtfe1AFrygbXjG2lgss=
Subject key identifier:   8B:B9:FB:BC:AE:9F:DC:76:D3:17:C1:F6:4D:2E:8A:EA:C6:B5:86:38
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584D1C7F4F111B00A9AFD7A1BB40
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bb80da58-6b70-3c72-b6e9-6854d0b3ca85.roa
Signing time:             Mon 09 Mar 2026 13:00:40 +0000
ROA not before:           Mon 09 Mar 2026 13:00:40 +0000
ROA not after:            Sun 07 Jun 2026 13:00:40 +0000
asID:                     19637
IP address blocks:        2602:274:512::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1c:7f:4f:11:1b:00:a9:af:d7:a1:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Mar  9 13:00:40 2026 GMT
            Not After : Jun  7 13:00:40 2026 GMT
        Subject: CN=ad617111-1a03-44e0-b0cf-baa1daab56ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:a5:4e:33:a2:ca:ab:ba:18:a1:9c:ba:9e:
                    74:89:8b:40:b5:96:6e:87:80:23:ca:dc:01:fe:bf:
                    79:1a:79:57:8a:94:d1:6e:5e:d0:f7:f2:c1:de:7d:
                    c8:e6:64:4d:ad:1c:5e:78:89:e7:51:8c:8a:30:ca:
                    47:30:57:e6:bc:93:3c:09:e5:8d:83:dd:a4:29:51:
                    6a:a3:d3:fc:ee:66:5f:ff:e7:80:b7:76:06:ae:a9:
                    d1:ef:c3:db:37:ed:d3:10:d2:a2:f3:62:60:e3:d9:
                    07:c4:b3:ea:df:f6:11:a0:7f:1c:ad:96:5e:9e:08:
                    28:30:17:2e:3b:9f:06:07:26:0d:4f:c0:b5:e5:cc:
                    b6:92:f1:2f:06:1c:29:2f:0c:11:3b:90:b6:c4:68:
                    fc:32:38:b3:f9:ec:91:1c:39:44:2a:c5:42:ce:50:
                    af:79:60:10:e9:01:51:07:fc:94:80:d0:47:84:dd:
                    57:6c:c1:00:9f:e2:09:07:9e:f7:a8:ba:63:99:f5:
                    e2:3d:43:0f:85:63:92:bf:54:0f:69:3e:81:e2:55:
                    7d:35:da:5e:41:b6:09:df:9e:a9:ee:8c:15:17:02:
                    fd:9a:3a:d9:b2:4c:05:96:05:4e:4a:e8:5c:c6:c9:
                    07:48:12:f3:d9:84:e7:d1:90:99:4f:34:ce:19:4d:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:FB:BC:AE:9F:DC:76:D3:17:C1:F6:4D:2E:8A:EA:C6:B5:86:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bb80da58-6b70-3c72-b6e9-6854d0b3ca85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:274:512::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:f2:6d:3b:b2:48:b6:37:a9:c8:fe:c4:0a:9f:1f:e4:72:
         27:ee:59:da:64:07:9d:c1:9d:d9:ae:33:36:5e:4e:8d:df:0c:
         97:9b:f8:db:9a:95:47:67:11:b1:62:a2:70:1a:a9:21:38:84:
         b5:68:7b:ee:c3:ab:8b:4b:dc:02:a5:39:de:e8:d8:28:30:b4:
         92:4d:8e:2d:36:5a:1b:8e:05:27:7c:f2:24:93:26:62:41:a0:
         54:a9:af:ff:cc:01:9d:06:07:0d:27:73:ab:c8:ac:f6:0e:40:
         6c:08:69:4a:16:ed:29:f9:30:49:0e:c6:82:e2:b4:f7:87:23:
         6e:e8:f2:68:8e:53:ff:d3:41:92:7f:b9:ef:02:a7:4f:c8:b7:
         0b:7f:5a:28:43:05:94:bd:e9:3b:b8:30:1e:af:10:04:fc:37:
         10:86:1f:4b:3f:29:ed:6b:ea:d8:95:85:a0:45:1f:f5:ea:7a:
         d2:12:48:8d:88:b2:40:66:89:97:1f:74:bb:8d:cf:64:d6:18:
         13:ca:af:64:38:26:5d:9a:ab:9a:42:5c:6b:b1:2c:f7:56:de:
         a5:9a:e3:59:62:58:35:ab:79:9d:da:1d:a3:d3:44:8d:4e:c3:
         b3:22:67:f0:c3:35:a6:66:d7:2c:e9:38:b2:48:a1:d5:7f:02:
         6a:22:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:27:42 2026 by rpki-client