Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/aac7bd5d-664a-3506-9970-0032633ef323.roa
File:                     aac7bd5d-664a-3506-9970-0032633ef323.roa (raw, json)
Hash identifier:          UXCVc5vHeEAKpT/NW+Kn8FKADhhdTSldcn5WblkfB84=
Subject key identifier:   DF:29:7A:EE:6B:4D:A0:F5:5E:BA:B4:7B:55:8B:05:35:45:C9:05:C9
Certificate issuer:       /CN=abaad708-212e-4627-8dbe-416a8512677d
Certificate serial:       010D0C9F4328584CAE571A2D360B2E0B4B9C2BE0
Authority key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/aac7bd5d-664a-3506-9970-0032633ef323.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     399747
IP address blocks:        2602:fc6a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:1a:2d:36:0b:2e:0b:4b:9c:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abaad708-212e-4627-8dbe-416a8512677d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=fb82db3b-4441-49ba-aff8-8ac06da89a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:5b:19:7f:fe:65:ec:fd:7a:f8:88:9c:26:
                    e5:02:71:09:36:9c:95:66:c5:97:07:a4:50:dd:58:
                    05:26:4d:50:b5:52:3e:6d:a3:05:6b:d4:8f:56:cd:
                    a0:0f:e3:2f:54:de:be:e4:ec:f7:5d:e8:94:f4:5e:
                    28:58:67:e2:04:db:9e:f3:07:b3:79:bf:13:1a:26:
                    af:00:cc:ff:bb:4e:bb:c5:65:63:10:25:5e:ca:15:
                    cc:20:ae:08:f7:89:10:7c:59:92:a5:97:e3:52:81:
                    e3:ed:7f:86:d4:27:05:92:de:4d:b9:b6:c4:e4:ec:
                    e8:30:44:04:1e:3b:fd:69:22:c7:8d:e5:61:be:77:
                    30:fe:f7:72:86:b0:74:fe:27:39:38:d2:38:bd:4d:
                    5c:11:8d:6f:6a:4f:35:58:fb:5a:76:e2:31:07:02:
                    d4:af:a9:57:a9:5d:57:70:d1:29:66:41:fd:81:32:
                    34:08:74:c0:19:b5:17:f1:b5:b4:70:8e:b4:2c:a5:
                    a0:f2:61:b2:e5:a4:64:d3:20:a8:91:d5:30:68:b7:
                    49:c6:83:d7:2a:1b:03:26:b3:ce:83:ff:36:cc:2f:
                    73:1f:53:da:0a:c4:5b:b6:84:2f:36:06:4b:da:d1:
                    cc:b1:fd:60:93:c5:90:7b:bd:2b:6f:7e:50:2a:e7:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:29:7A:EE:6B:4D:A0:F5:5E:BA:B4:7B:55:8B:05:35:45:C9:05:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/aac7bd5d-664a-3506-9970-0032633ef323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc6a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:01:6c:9b:db:e4:4f:b7:d5:2f:33:62:b7:a9:6a:3e:97:fb:
         af:cc:14:23:67:4c:3b:75:50:fd:d5:5b:37:ba:8b:2d:67:c6:
         29:dc:77:a6:b8:cc:b2:a1:59:bb:b8:d3:d3:fe:36:65:b5:ed:
         d2:2f:05:1f:a6:73:14:7e:9e:3c:f9:0e:61:52:9f:68:a2:dd:
         58:d3:57:1b:81:eb:63:81:e1:dd:11:bb:49:88:e0:06:5f:73:
         45:87:17:d4:0e:de:ea:fb:23:be:1c:41:b3:4e:7a:df:8b:2c:
         2f:03:90:6b:49:6d:88:95:38:b0:1f:45:ec:75:3f:d9:9b:37:
         f3:51:e0:b5:bc:2e:83:1d:c3:00:a2:18:17:17:a3:32:f7:38:
         77:99:c5:4e:06:20:a4:1a:bf:be:9d:ff:87:59:bb:14:31:82:
         98:d0:74:44:d6:97:cc:d7:67:ac:70:21:a9:01:39:c0:45:9a:
         e7:55:53:b7:62:7b:b1:fd:54:e4:b0:7a:c9:77:5b:11:2a:73:
         7e:73:bb:fb:7f:a4:b0:96:b4:42:37:25:7b:b2:94:5e:a5:73:
         c0:30:c0:3c:43:88:6e:31:5f:ef:6a:18:4f:f5:72:18:62:12:
         65:aa:8f:2b:75:c8:c8:d4:f2:37:d8:54:b4:3a:87:02:08:ed:
         ea:f4:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:03 2026 by rpki-client