Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/6ed61fca-ee25-3235-a6c3-67eac468976a.roa
File:                     6ed61fca-ee25-3235-a6c3-67eac468976a.roa (raw, json)
Hash identifier:          zX6s8Q8Jgz9uBrZ5qlZx4kUCKTYZUO8d4F/BoxO9u1A=
Subject key identifier:   5A:F3:77:89:68:01:CD:65:A8:5D:94:55:F7:35:97:EE:F7:F1:C2:4F
Certificate issuer:       /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683
Certificate serial:       010D0C9F4328584D09126B8222E70A736383D580
Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/6ed61fca-ee25-3235-a6c3-67eac468976a.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     401473
IP address blocks:        2602:f7ae::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:6b:82:22:e7:0a:73:63:83:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=3bdd149c-eeb9-4555-a88d-054e0674581c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:91:9b:9a:b5:c2:67:99:03:4c:17:e3:48:
                    47:04:bf:53:2b:a3:ad:fa:6c:43:2a:79:c5:4d:f6:
                    23:0d:84:77:e7:8e:ba:0c:a9:64:70:86:07:92:cc:
                    10:19:bf:53:e7:8c:d7:1b:92:85:67:01:b1:ea:28:
                    d1:ff:e9:c1:cc:a5:54:cf:da:66:89:02:aa:fa:7f:
                    4e:31:ce:3d:a0:a2:e4:ce:52:e0:44:cd:7c:8c:86:
                    29:00:95:b3:a4:fc:c2:9a:c8:e5:9b:d3:73:e6:9c:
                    3b:d8:a8:35:e3:21:96:7f:74:fc:71:b2:34:15:f2:
                    d5:bf:e6:82:fc:09:9a:6c:cb:5f:47:b0:2b:4f:94:
                    d1:d1:89:35:d5:83:86:24:03:25:2d:ba:39:c3:d1:
                    b0:3e:ad:19:99:27:78:c0:c6:de:23:18:46:d2:cd:
                    d8:be:af:a8:df:25:42:3c:cf:e4:49:f2:69:e3:3c:
                    bb:e3:b9:b5:a7:ce:af:ce:47:09:aa:ac:73:ef:2f:
                    eb:a6:9e:8d:76:a8:8d:55:ab:22:f0:02:96:eb:b9:
                    ba:48:6f:35:12:fb:ef:b5:1f:34:b5:aa:48:3a:69:
                    b7:4e:98:54:7c:70:47:e7:1f:dd:46:d1:15:59:25:
                    ed:d1:bc:36:ce:45:25:74:9f:52:01:0f:97:b9:68:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F3:77:89:68:01:CD:65:A8:5D:94:55:F7:35:97:EE:F7:F1:C2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/6ed61fca-ee25-3235-a6c3-67eac468976a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl

            X509v3 Authority Key Identifier:
                keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:bc:3d:d3:5f:18:8c:26:08:2c:b6:11:c0:0e:2a:f2:d6:
         0a:9d:e3:c2:96:cb:d3:c3:ad:06:f6:f6:12:9e:72:fc:2d:1a:
         cd:97:6f:f8:ef:b3:02:64:f0:80:c5:0e:4d:78:32:80:ef:48:
         26:91:12:f6:4a:dc:02:ca:b2:ea:d1:c1:ea:dc:32:c4:46:c0:
         37:1b:eb:70:f9:6c:34:56:b9:28:a2:af:0c:4c:6b:95:60:61:
         7c:fd:ba:49:4b:91:35:85:f8:06:ae:8b:39:0e:2d:bd:e8:59:
         a3:8d:4e:4e:b2:d9:bb:01:70:f4:f5:63:2a:69:53:dc:2e:af:
         91:ba:fd:66:5d:94:80:a0:d3:43:69:67:00:9d:fd:57:39:51:
         a4:77:24:85:84:16:a7:73:48:cf:18:21:04:fe:22:35:06:e7:
         b2:1c:50:2b:a9:b9:e1:d5:ab:8a:7c:f5:67:e1:1b:e6:62:54:
         8b:f3:da:71:59:05:d9:4f:4f:1d:a5:e1:f5:a8:c2:c3:ca:30:
         e1:5c:a1:ca:b3:b7:89:ab:24:67:ba:3e:e0:76:d6:1d:59:49:
         5f:bc:85:d2:01:54:9f:2f:21:da:46:4e:1b:dc:ef:fa:f0:80:
         c6:57:eb:ff:fc:2b:99:cf:58:87:01:5f:e1:82:c3:ba:87:f7:
         3c:f6:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:18 2026 by rpki-client