Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/45eaeb09-0dfa-3945-a5f4-95fda23dfa76.roa
File:                     45eaeb09-0dfa-3945-a5f4-95fda23dfa76.roa (raw, json)
Hash identifier:          snMLfgE4PwAC46x+FIlQu0iPMRcvmNjpjxZTPeslxUY=
Subject key identifier:   49:19:D5:05:6A:51:DB:E0:20:67:45:2A:DB:F6:36:76:22:79:11:D6
Certificate issuer:       /CN=dccc1cf8-24d6-4e7f-b009-a8dc514ae85f
Certificate serial:       010D0C9F4328584D571FB426D1A7EE7BF70F2F80
Authority key identifier: C9:60:67:14:BD:DA:EC:DC:0E:B0:EA:AA:E1:BA:7C:8C:2C:AF:64:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/45eaeb09-0dfa-3945-a5f4-95fda23dfa76.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     17243
IP address blocks:        2602:fa47::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b4:26:d1:a7:ee:7b:f7:0f:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccc1cf8-24d6-4e7f-b009-a8dc514ae85f
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=53afb7f3-9fa0-4534-addb-f00f96377209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:03:31:13:f4:33:ed:c6:d4:36:cf:4f:03:
                    ba:af:35:ff:aa:b1:6e:04:c6:31:6f:58:99:f0:88:
                    c4:57:70:9d:2e:f6:b0:6a:47:a9:68:cc:3a:ad:73:
                    a6:3d:64:76:bd:a5:67:c7:5c:55:72:ac:46:a7:39:
                    dd:9b:a3:d6:41:d0:bb:95:42:ed:ac:a2:ff:c3:52:
                    50:70:8f:2c:82:af:4f:b0:3a:ab:56:1b:02:e7:b3:
                    2a:8f:49:13:74:06:6b:6a:40:dd:62:75:b8:84:6e:
                    f9:20:7d:d2:d8:60:e1:7d:cd:f8:53:b2:2f:68:e7:
                    dd:8e:64:99:d8:37:d5:ce:98:27:ea:cb:ba:17:53:
                    aa:87:7f:cb:33:63:8d:4b:44:c1:b8:92:f2:c4:4a:
                    63:48:7d:7a:3a:b3:11:d1:3d:fb:f6:aa:dc:65:5d:
                    7f:ce:ff:6a:bd:67:59:6d:8f:63:5d:bc:39:66:98:
                    8c:2a:42:c7:aa:39:3f:ca:e3:d1:9c:28:cb:bc:03:
                    02:21:bf:68:b5:52:de:57:0a:28:dd:09:8b:41:61:
                    72:61:22:bc:71:20:86:30:88:d5:8b:88:40:ed:dc:
                    fe:68:9b:4b:95:db:f8:b7:e8:15:a2:aa:a2:e3:01:
                    62:d0:18:35:45:a4:9c:92:69:2b:25:12:21:2a:63:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:19:D5:05:6A:51:DB:E0:20:67:45:2A:DB:F6:36:76:22:79:11:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/45eaeb09-0dfa-3945-a5f4-95fda23dfa76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.crl

            X509v3 Authority Key Identifier:
                keyid:C9:60:67:14:BD:DA:EC:DC:0E:B0:EA:AA:E1:BA:7C:8C:2C:AF:64:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa47::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:26:4d:8b:35:e2:59:4d:c8:b0:88:f1:86:87:1f:de:7e:
         dc:2a:33:4f:c0:c5:27:5a:55:e7:4a:55:f9:df:93:0e:53:f3:
         ef:af:ac:f7:fa:8e:98:4f:44:e8:d8:cb:8f:2d:ec:a7:f2:1c:
         a2:4d:3f:3c:89:90:c7:70:5a:7c:32:b7:f3:20:50:35:2d:fe:
         f9:0e:be:91:a2:c1:47:05:db:7e:15:4f:b7:83:cc:d0:a1:2c:
         ab:95:15:d0:b0:d8:bd:78:0f:b7:df:7a:89:74:87:15:11:03:
         ca:b5:da:6f:72:08:b1:d1:5b:d9:23:c0:5e:ae:c5:af:8f:06:
         78:a1:4c:e7:41:9b:c8:d0:85:9e:26:c1:a6:1f:31:2e:f8:aa:
         95:31:a2:f2:44:d0:11:29:8a:6b:bb:21:e5:d8:41:64:b9:27:
         0f:d5:8b:e7:26:37:8b:76:25:d7:3a:44:fd:8f:d6:11:b4:92:
         c3:c8:17:26:d3:72:07:b2:c5:bb:33:e9:61:ae:72:da:6f:4c:
         48:b3:a3:d6:e2:a5:8d:cc:bf:e8:aa:88:6c:3f:f0:63:ad:34:
         ae:d6:bc:bd:fe:00:40:ed:2e:49:ca:79:f5:14:8a:34:02:42:
         7a:6b:c3:2d:01:f9:ac:64:f1:3f:3c:00:f5:f0:52:c3:fc:d0:
         51:15:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:23 2026 by rpki-client