Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa
File:                     c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa (raw, json)
Hash identifier:          78gdkRY5DaeR7O7wW/JnY87AoeJWg5r4F1JBo147hBc=
Subject key identifier:   8F:6D:EE:3B:FA:7E:76:33:CC:ED:3A:9F:E1:12:1A:60:52:E7:E7:F3
Certificate issuer:       /CN=1073152b-033a-4ad5-ba98-45c1d65704d4
Certificate serial:       010D0C9F4328584CAB8C53B8E0BB029C033366C0
Authority key identifier: AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     30700
IP address blocks:        2602:f7ee::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:53:b8:e0:bb:02:9c:03:33:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073152b-033a-4ad5-ba98-45c1d65704d4
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=4551bbb9-e0cb-4ee9-add1-8cb7f8934e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:bb:6d:ed:0b:4e:f1:08:16:f1:dc:de:0c:
                    37:23:a9:c2:b5:70:6a:f5:f3:7e:ba:b8:03:f1:cc:
                    3f:30:b7:7e:6a:5e:8e:7c:5d:1d:0b:dc:b7:c0:48:
                    b8:a3:f6:93:fa:e5:0e:e2:ea:ba:03:52:cd:8b:d3:
                    c2:9d:48:f6:5c:50:ad:70:81:3e:3c:1b:f7:1b:a6:
                    2d:14:61:e2:4a:db:fc:46:c2:92:7a:d6:69:0c:93:
                    67:e3:3b:29:ac:53:56:7e:21:69:96:ed:31:09:93:
                    c0:0e:4d:79:85:94:cf:b2:ee:07:9b:7f:66:ee:cb:
                    72:b8:d8:ab:36:e3:c0:95:cf:d0:b2:0e:e9:77:a8:
                    87:26:81:a5:d9:66:d5:c0:a8:c5:f5:9d:2c:01:94:
                    d3:49:45:5b:ab:4d:85:bd:ce:15:fe:10:d0:33:09:
                    8b:80:d1:fa:12:12:17:4a:ff:b9:2b:cd:be:2f:e4:
                    6f:b5:26:83:a0:aa:72:83:78:57:1e:3e:12:04:4e:
                    b7:9b:5a:91:7f:79:69:f3:96:53:5c:10:76:f0:8d:
                    14:b7:d8:56:94:0d:75:13:d7:f1:34:ec:1a:a5:c6:
                    93:25:ef:df:d3:39:09:d8:0e:0e:f8:41:31:33:c9:
                    6c:ef:c8:e0:b5:ef:23:aa:f3:af:9f:a9:d6:27:f8:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:EE:3B:FA:7E:76:33:CC:ED:3A:9F:E1:12:1A:60:52:E7:E7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl

            X509v3 Authority Key Identifier:
                keyid:AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9a:93:87:1d:c6:0c:2c:31:e4:b4:b3:91:77:0d:8b:55:b2:
         3d:d9:6f:d5:65:59:e5:02:f8:1a:70:51:f1:f9:d3:e9:78:da:
         b8:5b:00:8f:e9:54:49:0c:c3:26:50:46:a0:79:32:fa:33:fc:
         cc:60:c4:19:e9:42:ff:de:3c:7b:c7:99:57:a7:65:63:41:c7:
         27:aa:4c:3c:2e:b3:c7:bb:7b:87:44:43:63:88:5f:8b:58:d1:
         ab:be:24:5d:47:a0:81:87:5d:d1:e8:2a:05:f8:e0:e6:3f:66:
         aa:a2:16:74:b1:14:96:81:81:0c:0c:a9:98:61:18:61:10:02:
         ee:3b:43:05:04:67:85:58:bf:50:a5:06:1d:eb:2c:a8:fe:1c:
         c4:46:6b:da:f8:4d:1b:cd:f2:08:2d:27:12:4c:60:cf:f2:30:
         9e:ba:0d:55:e3:5c:1c:3e:63:54:08:b2:03:b9:7e:5a:5f:b7:
         6f:26:40:4b:a3:93:f9:4b:00:23:cd:88:61:78:86:a4:43:54:
         a3:af:d2:d1:6c:e3:b7:7f:54:bd:16:a7:24:19:63:05:ed:0a:
         7c:27:3c:59:a5:2e:e7:9e:9b:a3:6a:cb:d4:89:5c:84:37:c9:
         0e:1c:5a:4a:be:9e:0f:f4:7d:34:24:87:4c:f1:2a:b9:20:89:
         a0:d7:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:53 2026 by rpki-client