Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/61e978e2-0231-3b05-942b-06419b955666.roa
File:                     61e978e2-0231-3b05-942b-06419b955666.roa (raw, json)
Hash identifier:          48qB+IugEbJKfYT8MzZGyrEvlUUaXerqBfc+jrl0e6s=
Subject key identifier:   0C:D5:0F:58:16:FD:3B:74:3F:C1:C1:EF:E7:AF:A4:28:AF:81:1F:54
Certificate issuer:       /CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
Certificate serial:       010D0C9F4328584CBAE7208B86E3FA7A13DA7ED0
Authority key identifier: C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/61e978e2-0231-3b05-942b-06419b955666.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2602:fb0b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:20:8b:86:e3:fa:7a:13:da:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=92d10672-d651-474b-a067-b65ae4d842f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:ce:7d:65:d1:9a:9e:b4:4c:0f:63:86:03:
                    83:e1:6f:11:f9:99:cc:57:6a:0d:c2:9c:8c:e8:50:
                    c7:0c:97:69:95:f4:ab:99:7f:41:86:6b:2b:ac:8f:
                    af:09:13:7c:1e:e6:74:96:fe:4b:14:2c:ee:de:3f:
                    e1:9b:0a:3d:19:07:ff:db:d3:10:b3:ec:90:ae:ba:
                    71:29:d5:d1:a4:da:d8:2d:06:97:b2:e7:70:6d:04:
                    d5:96:01:e8:a8:bb:cf:a4:fd:91:97:a0:18:77:b4:
                    b9:a1:cd:f2:14:58:b3:56:66:db:5a:e1:c0:1c:ff:
                    7d:38:06:fa:7c:b4:93:00:fd:04:90:9d:2b:7e:52:
                    87:0c:bb:dd:d4:f0:f4:ce:97:67:9c:8e:a8:b6:b7:
                    04:57:ed:f9:90:e1:98:d9:cd:98:55:83:7b:d8:48:
                    ba:74:1c:de:0a:ee:54:03:43:c8:d7:20:d6:9f:67:
                    bd:2c:67:7f:7b:b2:92:ad:bd:b5:69:64:c1:35:4a:
                    bb:24:ee:ab:4e:86:ee:21:0a:20:79:d1:5c:42:99:
                    35:97:9f:04:38:8f:7d:84:6b:2d:2f:ec:78:57:f3:
                    7b:71:c4:3c:6d:e5:df:c7:b6:f9:60:55:23:c7:9c:
                    6f:4a:9a:82:5c:b1:9d:78:a3:6e:82:18:53:03:93:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:0F:58:16:FD:3B:74:3F:C1:C1:EF:E7:AF:A4:28:AF:81:1F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/61e978e2-0231-3b05-942b-06419b955666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl

            X509v3 Authority Key Identifier:
                keyid:C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7b:67:88:d5:44:a8:fe:63:31:a0:52:38:8b:aa:b5:62:99:
         0e:cd:0f:90:14:68:b2:a2:d6:8e:bc:b2:03:7a:3e:c8:fd:b9:
         44:92:fd:c6:64:c5:5b:34:4a:41:cc:42:ca:f4:4b:2d:1b:43:
         99:1b:7e:e3:fd:9b:c4:81:68:e6:57:75:5e:f8:79:d2:13:bb:
         8d:8a:27:15:c7:f3:1d:dc:a5:fa:65:45:5a:47:91:a6:20:ff:
         22:21:0e:2c:1c:1b:c2:08:97:06:ad:05:e3:34:24:82:27:a5:
         58:94:4b:f2:94:b4:8b:7f:fb:bc:6a:7a:a2:88:6f:1f:f4:69:
         f8:d6:a9:69:92:30:52:61:ee:e3:ab:22:15:55:36:89:ef:01:
         fa:c0:e0:66:9a:3a:20:80:3e:ec:42:6e:96:5f:f8:4e:71:48:
         c0:e6:1a:c3:a0:b8:86:be:4a:7d:3b:36:cb:c5:aa:ab:c9:88:
         bd:c6:e8:01:a6:9e:7c:1d:be:3f:32:ab:d2:2d:44:e8:8b:ee:
         01:5b:ed:81:a7:bc:5a:4e:6b:5d:af:08:49:c5:e8:d5:89:48:
         21:50:20:41:2b:de:3e:7d:06:5b:8b:f1:8f:8e:10:ec:4e:13:
         11:e8:1f:f0:de:c0:07:5f:e8:2f:93:05:8f:c7:77:b8:a1:45:
         62:6f:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:35:34 2026 by rpki-client