Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/a9846552-163b-375b-8c9f-699a81b72499.roa
File:                     a9846552-163b-375b-8c9f-699a81b72499.roa (raw, json)
Hash identifier:          DHI6nU0nB+55eDBOsgoCfVOfO4XicaBsg+P0CoxFKfo=
Subject key identifier:   A1:FA:41:50:84:B3:B9:7B:88:99:85:1F:CA:B3:79:15:F7:04:AB:51
Certificate issuer:       /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
Certificate serial:       010D0C9F4328584D624A59A244046872EDB8FE80
Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/a9846552-163b-375b-8c9f-699a81b72499.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        2602:f5c8:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:59:a2:44:04:68:72:ed:b8:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=9bb1448f-0319-4592-ac22-9000dd97069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:c6:99:19:29:74:86:98:97:fb:7d:1a:08:
                    36:82:9b:9c:6e:3c:43:58:62:9b:19:8f:5a:39:4e:
                    19:0c:b9:75:d0:d6:f0:e7:f2:45:0b:ae:e5:73:e1:
                    7a:a4:64:b5:e8:22:6f:86:c8:48:0b:0b:12:9a:b2:
                    4e:01:6e:c2:2c:48:17:51:a5:f7:a0:2a:3a:64:d7:
                    07:c0:b3:90:b8:a0:9b:ba:67:b6:94:6e:c5:20:98:
                    0c:08:65:9d:41:7e:7c:17:6f:34:c9:a6:78:c8:a6:
                    c5:f2:ed:1e:c6:c1:81:f1:e0:b2:90:08:a4:0b:3f:
                    4a:3e:5e:f4:d2:2b:87:25:7b:65:ad:b0:95:ab:3c:
                    ca:14:a1:a2:43:cf:e1:85:99:b8:b7:e6:ff:c3:d7:
                    97:d9:84:a2:72:0f:c5:6c:73:4a:e9:42:36:64:b3:
                    ed:f4:86:3b:f0:3c:cd:61:9f:15:be:d8:e7:3f:a9:
                    5c:6a:7e:d5:58:b0:67:21:56:7a:9d:37:1d:58:ee:
                    52:6c:44:b6:29:b6:a7:29:9e:f7:ff:29:ae:1f:86:
                    d4:d8:4c:ab:7e:c7:b4:02:8a:c7:7e:ed:79:d2:63:
                    c0:94:c3:b7:9a:69:92:fd:27:c6:d3:c8:31:38:68:
                    d1:61:df:3b:9e:a7:36:8d:81:96:5d:9d:8d:ba:f7:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:41:50:84:B3:B9:7B:88:99:85:1F:CA:B3:79:15:F7:04:AB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/a9846552-163b-375b-8c9f-699a81b72499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl

            X509v3 Authority Key Identifier:
                keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c8:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:cc:42:b7:f9:47:11:d7:02:1f:e2:bd:6b:64:cc:cb:a3:45:
         6a:a6:b5:02:23:6e:51:43:4c:f5:2b:2b:ae:94:5a:d3:1f:fa:
         f6:54:56:8b:4f:21:86:7b:e2:02:66:e7:9a:8c:e7:5b:7e:f6:
         b5:e8:9d:69:27:5d:67:be:7e:45:cf:b8:62:3e:91:99:fc:3f:
         15:73:d5:31:6c:f5:80:78:09:b8:66:81:e5:aa:38:5c:1f:fc:
         08:3c:bd:a4:fa:ff:57:3d:49:06:ba:db:d1:8a:6f:de:86:c7:
         20:da:b4:67:2d:73:bb:ad:e9:03:31:43:fd:8f:1d:4f:dd:b4:
         e4:b2:0a:b2:ec:30:d2:62:df:aa:6c:39:69:ee:87:cc:5c:0b:
         2d:f6:c5:01:a3:a0:50:f9:9f:35:df:d9:04:8d:38:ba:0d:7a:
         9d:dd:c6:c9:18:ef:7f:69:67:3e:b4:79:a7:d3:9f:8f:77:53:
         29:34:25:98:7f:23:90:bc:ef:7d:2c:0a:3c:5c:06:43:b6:10:
         57:a7:0a:c9:49:58:3c:2f:ca:23:77:d5:33:33:f7:fa:95:f5:
         a9:e7:5b:bc:bb:84:0e:c4:a7:c7:d4:c0:fe:5f:7b:2d:be:ab:
         b4:13:0c:95:3c:22:54:1c:52:e0:1c:b8:50:8c:fd:0c:da:23:
         eb:56:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 16:00:16 2026 by rpki-client