Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/3ff1842d-e3d8-352f-8f90-b10af609da70.roa
File:                     3ff1842d-e3d8-352f-8f90-b10af609da70.roa (raw, json)
Hash identifier:          sfldB/nEln9eU+pnaM8qKlmxpoD2xUF9yQOCu3hmxWY=
Subject key identifier:   25:2F:38:45:97:5E:D1:5C:6C:5E:7B:A5:0C:93:67:29:62:A7:65:8E
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584D60E51713E1627A866CF20A40
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/3ff1842d-e3d8-352f-8f90-b10af609da70.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     6517
IP address blocks:        2602:f5b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:17:13:e1:62:7a:86:6c:f2:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=e6899edc-56e3-4850-82ba-f46324d6ad58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:80:69:5d:68:c4:7f:4c:e6:b9:ed:73:60:
                    25:0f:9e:31:31:4f:5a:00:08:55:fe:a4:3c:20:eb:
                    b5:04:ef:0c:c7:31:c6:5f:cf:87:2d:34:38:fc:7c:
                    d5:5c:e5:eb:4c:6c:57:45:db:20:68:17:2e:35:cd:
                    f2:eb:3d:d0:82:e2:86:09:41:79:de:45:0d:87:07:
                    e1:cf:1a:dd:96:84:e8:3a:00:ce:42:93:50:06:4d:
                    43:ef:21:b1:fd:66:89:78:2a:78:88:60:40:77:62:
                    d8:bf:65:dc:30:56:95:b0:4e:f7:dd:98:28:ca:3d:
                    cd:31:ce:98:90:7f:ba:b4:0e:32:8d:8d:84:cd:73:
                    4a:b5:25:1e:7a:74:5a:28:ad:80:da:50:70:bb:42:
                    e3:ee:b8:2b:8b:24:0f:57:99:34:31:73:46:7a:2b:
                    8f:f5:b4:1e:c7:7f:c4:a7:73:67:7d:11:02:a9:bd:
                    0d:cf:a7:00:53:0d:44:3d:0c:af:bd:22:44:77:83:
                    da:77:d8:ef:ff:56:4a:c1:3f:7d:bd:02:9b:4c:4a:
                    b7:49:22:e8:cf:e0:5e:6d:9b:5c:22:62:67:92:a3:
                    62:31:a5:3e:2d:dc:a9:9e:df:af:b1:50:9d:fa:7d:
                    88:b1:c7:b2:6b:bb:71:c9:e7:88:c4:6f:e6:27:a8:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:38:45:97:5E:D1:5C:6C:5E:7B:A5:0C:93:67:29:62:A7:65:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/3ff1842d-e3d8-352f-8f90-b10af609da70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:db:2d:52:51:77:7f:df:30:26:24:d6:a5:30:55:63:a7:
         16:c6:7d:94:c9:fb:89:03:b0:2a:62:a7:2c:09:e1:69:bc:22:
         83:44:bb:8b:03:aa:3a:d2:dc:23:53:e2:e6:85:e5:d3:50:e0:
         c9:5b:29:fd:df:17:29:b0:a4:94:7d:91:c4:d5:b1:04:a3:00:
         b2:95:9c:13:82:d1:f4:2c:b8:b5:7b:9c:01:35:57:80:03:84:
         c4:c9:b4:66:9c:0d:7b:26:6d:27:3c:4e:8f:c2:ed:9a:ff:fd:
         ee:b4:78:d7:39:b7:33:f1:dc:d4:49:ba:b8:43:e1:bd:ab:8c:
         3f:45:cc:91:33:36:2a:5c:5d:6c:00:6a:15:f2:ef:ee:de:93:
         98:e6:da:c6:25:09:e3:14:cb:40:d1:a5:ec:6b:44:be:e3:a9:
         47:7e:c0:bc:9f:90:92:ff:40:16:ec:33:27:68:76:e8:60:ec:
         4c:94:cd:21:25:03:5c:85:ee:ca:90:44:03:ae:ad:2f:d3:2f:
         83:39:9e:d4:73:a0:c2:04:50:5c:89:10:9c:ce:0a:0e:90:1d:
         5e:37:52:a5:0b:49:77:e4:27:d4:68:d4:92:e1:fb:8a:76:05:
         9d:84:d1:30:5b:cd:6f:11:c9:db:72:13:a2:dd:7f:d1:41:d1:
         6f:a7:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 10:23:21 2026 by rpki-client