Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
File:                     0e66e1a0-d526-33c0-8259-90113fc406d1.roa (raw, json)
Hash identifier:          vO1O3JTi1G/LAMRshpGorCAE+XgpsbefFu8PWTeuOmc=
Subject key identifier:   70:BD:0B:02:BF:91:38:8B:EC:BB:52:CE:BA:60:5F:9E:0B:15:05:BD
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F4328584D75D541AA6C7075AF5CD126B9
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     138997
IP address blocks:        2602:fada::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:41:aa:6c:70:75:af:5c:d1:26:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=8222a2a1-d08c-46c2-b4ac-92411a0d1ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:92:6e:41:fc:1f:31:74:ae:3e:5d:a6:27:
                    07:09:43:f7:3d:75:73:3b:dc:79:d9:26:22:a2:1c:
                    ee:f4:5c:f5:55:17:54:86:a4:64:4b:c1:67:cc:5b:
                    3c:d8:46:54:00:61:ba:e5:ed:38:2a:64:9e:e5:e5:
                    ef:d6:16:5a:41:20:03:38:9e:3f:d3:ee:a0:a2:82:
                    51:62:d6:a8:25:b1:ac:30:b9:85:cb:51:83:c6:56:
                    bc:fb:4c:e9:e7:f5:a8:eb:91:2a:65:af:c8:8f:ea:
                    11:de:28:ed:16:d1:1c:0c:50:99:48:bb:a3:c3:9f:
                    45:7a:c4:07:5e:25:5f:c1:70:85:88:af:ce:4f:c9:
                    f7:06:8d:37:bd:f0:4c:33:b2:28:0c:2b:28:55:69:
                    74:dc:a8:81:60:1d:aa:2b:0d:ac:4f:d7:50:3a:4d:
                    f4:3f:29:a7:da:c4:c7:c2:a1:6c:83:a2:4c:cf:23:
                    c0:79:18:4c:ef:8c:44:2a:f9:9d:86:97:2c:e7:c4:
                    57:26:fd:49:ee:af:10:6f:48:91:25:89:cc:15:9d:
                    f3:88:2e:d8:0e:04:57:68:c3:e5:15:4c:45:38:0d:
                    8e:5b:88:fe:8d:9d:ba:a9:cf:4f:a6:9a:ea:63:0f:
                    cb:d1:af:09:fb:7b:6c:49:1f:63:b0:9d:35:d7:b5:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BD:0B:02:BF:91:38:8B:EC:BB:52:CE:BA:60:5F:9E:0B:15:05:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/0e66e1a0-d526-33c0-8259-90113fc406d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fada::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0d:f7:c6:bc:53:c4:1a:9f:8e:2e:40:32:63:c8:39:ba:20:
         a2:05:3a:94:07:8c:33:4f:5e:c6:94:31:b0:df:6c:51:01:03:
         ac:9f:19:d4:df:51:bb:48:df:a3:c5:ed:ff:63:60:a8:cd:a4:
         7f:0c:cb:ec:23:86:4d:5a:24:54:ff:af:3e:12:6e:74:ff:3e:
         68:bc:5f:5e:74:34:4f:26:4f:c9:90:2f:db:dd:a6:84:01:b9:
         9c:a0:4c:37:b2:22:2b:51:41:46:45:b5:05:ca:60:04:0a:ee:
         78:81:73:c0:eb:98:57:66:46:e5:b7:f8:4b:40:0f:c3:1a:81:
         7e:45:56:0b:76:9f:e2:29:d1:85:0c:8a:ab:9e:d9:52:1d:47:
         c6:75:06:a2:0e:59:00:5e:13:21:ae:6a:6d:7b:bb:53:f9:aa:
         23:f4:6c:e7:48:bb:0e:8d:ac:bd:c4:48:e7:68:02:9b:7c:43:
         f8:0f:05:e5:e2:89:0d:db:e1:9e:11:e9:b9:f8:7c:2c:38:0f:
         0c:38:a1:35:ac:e1:4d:0c:98:06:34:09:a6:6d:e6:b7:c1:5c:
         7d:56:39:43:fc:ed:34:a6:f2:be:00:e2:0f:cd:1a:58:26:dd:
         cd:2f:92:39:15:52:39:35:be:87:16:fc:c3:a2:80:ce:52:98:
         96:94:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:11 2026 by rpki-client