Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa
File:                     1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa (raw, json)
Hash identifier:          MDpP3mtA3CS3kfFZxEmSylfTr1ouTOZB5z832Gv0pbk=
Subject key identifier:   B6:61:1E:19:AF:9B:60:C2:54:4C:11:9C:E0:94:C5:79:6B:D5:2B:A6
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584D59EA73E7ECAD5C5321070850
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     400919
IP address blocks:        2602:817:2000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:73:e7:ec:ad:5c:53:21:07:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=70ff8c9b-e9ba-4914-9501-f6b16970a720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:c1:d9:f4:d8:cb:db:14:3c:d4:9b:c2:89:
                    82:a4:f7:c1:15:72:7f:67:16:b5:5d:15:1b:a2:ef:
                    e6:7c:e8:93:14:e9:f7:a2:d9:da:1a:53:21:b9:40:
                    4d:56:a6:3b:48:3e:d3:9f:9a:8a:3b:c3:4a:bf:4e:
                    b1:45:3f:4f:fb:59:f5:4b:a1:b3:57:d0:4a:39:8d:
                    51:52:4c:61:0a:44:98:a2:d5:88:28:8d:ba:2f:29:
                    45:2e:96:d5:fb:57:8b:0d:e2:54:06:45:24:91:ef:
                    9d:1c:6c:2f:ce:24:66:5f:b4:97:6e:bc:23:18:75:
                    3d:d4:25:0e:87:21:46:9e:18:62:34:db:58:85:1b:
                    cf:04:a0:6d:60:09:e4:a1:63:4d:f3:88:e5:0b:5e:
                    43:a6:ff:ee:83:b6:4f:13:63:df:62:ed:e1:94:d3:
                    8c:91:fc:18:5e:e4:df:ee:c0:27:d3:ff:99:03:68:
                    5f:15:0b:31:30:7e:89:2d:9b:23:61:78:d0:f9:8b:
                    ed:4b:2f:02:ba:2b:cb:34:d7:42:93:47:2e:5f:b0:
                    32:af:38:44:a7:a3:3f:24:b2:44:05:68:a3:fd:af:
                    26:ea:40:da:e7:85:56:96:a4:ae:9a:b7:ba:32:ae:
                    90:ab:8c:65:04:da:ba:12:f3:fa:68:db:4e:fe:f8:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:61:1E:19:AF:9B:60:C2:54:4C:11:9C:E0:94:C5:79:6B:D5:2B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:24:1f:85:55:b6:98:63:5e:b0:19:3b:cc:8c:a4:39:08:
         35:9e:3f:d3:da:74:af:f8:40:66:a5:44:1e:3b:57:f8:bf:0c:
         82:fc:40:6f:74:51:d6:48:d2:a4:51:b7:5f:b5:58:d2:0b:13:
         69:dc:76:bd:2f:99:a6:b5:d3:8b:7d:86:84:53:af:e9:29:ed:
         59:94:55:63:31:42:12:97:b2:2b:c3:9f:cf:e9:e8:e0:6b:37:
         4c:c1:40:c5:37:16:ce:c6:6c:64:37:da:be:58:dc:f4:c7:99:
         e7:d4:05:08:d8:ee:1b:11:e8:1d:68:b3:d1:60:ec:7d:24:7f:
         dc:14:0c:a3:32:51:e5:d7:17:2a:4d:9b:97:c5:25:59:79:8f:
         1c:c8:32:5b:99:3c:05:f2:c2:ba:1e:c0:b7:16:ec:fb:c6:31:
         ee:77:5f:41:60:49:5f:9b:f7:59:7a:1b:3a:0a:3b:3b:83:2d:
         7b:fb:4c:9f:cb:2f:e9:46:2d:37:24:a5:00:5d:b1:6e:49:8e:
         be:dd:db:39:5e:bf:75:8b:cb:3c:c2:3f:0a:13:47:0e:27:16:
         6b:22:40:09:5f:a5:b2:e1:81:44:16:b7:b7:37:62:9d:ff:87:
         ee:a0:1c:25:94:23:6b:7b:83:48:c3:07:6f:4e:4a:d2:ff:32:
         4f:b5:f7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:05 2026 by rpki-client