Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0/3bc31a7d-3633-3476-b0dd-ba5b29cf5b75.roa
File:                     3bc31a7d-3633-3476-b0dd-ba5b29cf5b75.roa (raw, json)
Hash identifier:          K2tNUbr/q8krkljyRPq38LxguWu0KkrdsDm+T9sajZc=
Subject key identifier:   52:15:B4:1E:8B:A3:A2:81:61:28:35:88:64:B6:14:96:15:A5:5E:5D
Certificate issuer:       /CN=0e816607-57bb-4ba0-91f7-4bd589dcb4d0
Certificate serial:       010D0C9F4328584D5024E7462D8101582F3B6420
Authority key identifier: 18:EB:38:62:11:52:62:1D:95:D8:49:65:9F:CF:8D:99:A9:24:A4:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0/3bc31a7d-3633-3476-b0dd-ba5b29cf5b75.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     46109
IP address blocks:        2602:f5ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0/0e816607-57bb-4ba0-91f7-4bd589dcb4d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0/0e816607-57bb-4ba0-91f7-4bd589dcb4d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:e7:46:2d:81:01:58:2f:3b:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e816607-57bb-4ba0-91f7-4bd589dcb4d0
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=6c3ac974-7840-47d1-9364-527be7ebdf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:c1:6c:d4:d9:bd:c7:50:49:75:87:71:4e:
                    ea:9a:b9:bd:f7:37:34:1e:b0:d8:bd:6a:58:7e:30:
                    d0:d0:eb:cd:61:67:0f:2e:b1:5e:ce:9f:c8:f4:2e:
                    9a:f0:2f:8f:5e:92:17:35:8b:a0:f4:36:c7:5b:64:
                    df:6d:22:b4:28:6f:02:18:e0:bd:df:9e:27:2b:3e:
                    52:f0:da:bc:45:a6:1f:49:7e:b3:7d:0a:fd:a2:b6:
                    5d:50:ed:2f:69:41:be:2a:cf:d9:9a:dd:96:08:5b:
                    78:ab:de:36:4f:2f:a3:ba:94:23:78:4b:92:3d:a7:
                    11:6c:4f:72:0f:cb:d2:8c:fe:ee:d1:6b:62:5d:c6:
                    7f:29:a2:85:23:91:f0:07:ca:91:15:ab:d8:5e:d7:
                    07:82:2b:e8:3e:34:fc:62:b8:93:cb:08:20:9d:d9:
                    9d:45:f0:06:c7:7a:de:bb:4d:c1:f7:36:52:b8:1c:
                    8a:b6:13:93:4f:d3:16:e4:ba:6f:26:8c:a0:77:96:
                    eb:93:81:fc:b9:07:34:ee:19:a9:b4:f5:9b:34:3d:
                    25:28:35:19:af:b0:16:a7:da:cb:a8:f1:f5:04:13:
                    99:d8:a5:18:a9:0c:cb:36:59:37:ac:ad:ec:18:d6:
                    fa:a9:e9:82:ad:d6:90:15:41:1a:6b:fa:eb:92:bb:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:B4:1E:8B:A3:A2:81:61:28:35:88:64:B6:14:96:15:A5:5E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0/3bc31a7d-3633-3476-b0dd-ba5b29cf5b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0/0e816607-57bb-4ba0-91f7-4bd589dcb4d0.crl

            X509v3 Authority Key Identifier:
                keyid:18:EB:38:62:11:52:62:1D:95:D8:49:65:9F:CF:8D:99:A9:24:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e816607-57bb-4ba0-91f7-4bd589dcb4d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:2f:f8:95:8a:07:b7:b2:81:5b:b3:cb:01:ba:ad:20:74:
         5f:38:6a:93:c1:c7:d7:eb:f7:98:72:d6:cd:a7:a8:c5:51:aa:
         05:84:b6:94:de:05:be:cf:60:f1:96:f7:1a:04:7a:29:5b:78:
         d8:3d:be:0c:a0:b5:ca:e5:d0:8b:1b:b7:d0:ea:bf:7f:a1:4f:
         db:ed:00:30:f7:03:9c:a4:50:86:ee:0e:25:43:e0:2a:f6:5f:
         e7:22:1c:30:40:fe:ab:70:a3:b3:e4:a4:68:09:94:1b:f6:3d:
         eb:3f:c2:a0:ba:e0:98:79:a3:5e:a1:48:81:cd:e4:e5:b0:b8:
         7f:0e:45:42:23:7b:aa:67:45:4e:64:ff:87:b3:c9:41:89:77:
         58:ef:f5:aa:0d:6e:65:44:b7:d7:17:18:96:81:a0:d6:74:2b:
         a3:4c:a9:ec:b0:f9:38:87:3d:ff:50:8a:51:80:45:74:31:6a:
         13:39:b7:23:36:5a:0b:c2:45:52:78:5b:77:b7:3f:13:99:79:
         c8:d0:07:fc:46:07:1f:be:42:17:da:5b:99:66:f1:26:fb:ea:
         7d:fc:05:10:31:37:f2:aa:06:45:07:b0:17:3a:5f:1a:6f:46:
         a0:02:4c:f9:e8:40:51:06:52:57:8e:33:bb:8d:0d:0a:46:52:
         ad:24:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:23 2026 by rpki-client