Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/b17d040d-8a72-3efa-a7ba-0e521e36047f.roa
File:                     b17d040d-8a72-3efa-a7ba-0e521e36047f.roa (raw, json)
Hash identifier:          KVpQlW0ieOZz9jvlYHTl6aeVZQ1K5xRQjf6KS8n7IEo=
Subject key identifier:   22:B1:B3:5A:0A:99:CB:47:84:FF:D4:53:CF:6A:E5:2F:8A:10:1A:A8
Certificate issuer:       /CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
Certificate serial:       010D0C9F4328584CCFD7428567B1CBC2EB550580
Authority key identifier: D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/b17d040d-8a72-3efa-a7ba-0e521e36047f.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     399861
IP address blocks:        2602:f7d6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:42:85:67:b1:cb:c2:eb:55:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=1b37d09f-5cfc-4188-a492-1972d3eceed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:96:7e:cb:b4:ca:f0:cc:a5:e4:a1:da:b5:
                    50:ae:cc:84:02:73:04:0e:f9:4c:38:9b:0c:da:04:
                    71:da:ab:d0:2a:9a:e4:a8:e1:d1:c8:25:ed:df:ab:
                    95:23:90:df:30:58:92:7d:34:39:75:0c:87:20:ae:
                    16:d5:81:42:b3:c3:80:2a:43:66:b7:a3:89:e2:54:
                    ee:da:d8:58:79:c5:94:e3:c7:52:39:94:d9:7d:cf:
                    4b:e5:8e:91:6a:05:2f:8c:da:69:b1:77:30:9e:ad:
                    43:ec:76:67:79:1c:39:b0:d2:61:f5:d2:e0:b6:4a:
                    b4:84:15:d7:50:35:62:1c:a3:bb:31:1d:39:5c:a9:
                    de:ce:06:ed:d9:3a:df:7d:38:d0:aa:78:f1:68:c7:
                    09:1b:bc:bd:40:23:6e:95:f5:f9:92:cd:3d:c3:d4:
                    35:7e:0f:fe:c7:61:c5:1f:aa:da:53:00:dc:97:46:
                    99:ad:42:75:17:b6:39:23:e3:fe:a5:5a:07:41:03:
                    b4:da:22:d7:4d:96:08:43:cc:29:8b:7b:f9:03:79:
                    d7:df:84:18:53:cc:3a:43:ff:a7:a0:17:0a:3c:7d:
                    03:a2:ff:43:70:a7:e8:89:78:b4:81:fd:03:e2:61:
                    97:6b:68:d9:b8:92:db:bf:8e:c8:d6:cf:25:df:b7:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B1:B3:5A:0A:99:CB:47:84:FF:D4:53:CF:6A:E5:2F:8A:10:1A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/b17d040d-8a72-3efa-a7ba-0e521e36047f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:6a:d2:96:44:34:3e:5a:1b:04:12:ec:60:4a:21:b5:81:
         17:3e:a1:4c:f5:3a:65:09:cf:04:62:4b:72:03:67:92:31:c8:
         4a:00:4d:7c:c0:53:1b:ff:f0:29:dd:1c:50:83:c4:34:e1:bb:
         54:de:54:f6:42:dd:70:d0:e7:a8:fc:71:22:e9:39:c3:cf:65:
         56:01:15:4b:c4:ea:93:26:73:41:ba:3f:6f:8f:8b:34:63:80:
         8a:67:c6:fb:5a:9d:4e:00:c5:02:72:cf:aa:c5:d4:cd:9d:f7:
         3f:c9:f6:67:dc:c7:40:ca:07:c4:1e:85:41:fa:06:fa:83:32:
         76:64:e5:43:d4:ab:3e:9a:61:6c:2e:70:5c:f5:9a:66:9e:b0:
         44:9d:01:b1:a3:c3:6c:a3:de:7f:5c:96:52:57:ea:48:b3:56:
         ce:78:56:e1:5b:d7:e6:f7:7a:4e:b2:9b:dd:0b:de:47:e3:af:
         93:75:5d:7c:38:c2:db:c1:34:e4:cf:29:cd:f5:d8:ab:ad:cd:
         16:5c:06:ad:8f:c2:d8:a0:23:1e:16:82:c0:6f:74:31:fc:cd:
         14:54:c0:74:e3:0d:25:0a:a8:cd:05:0e:76:53:3e:93:db:9f:
         88:80:9d:49:46:14:97:a0:fb:21:f8:dc:78:13:ae:d2:3f:13:
         20:5d:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:20 2026 by rpki-client