Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa
File:                     5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa (raw, json)
Hash identifier:          MzHOtVxvR9IBveyU7x9gAWH0jNbpsd/pWsds6N2IO4o=
Subject key identifier:   1F:A3:8E:BB:99:9E:D0:E6:08:DD:15:9E:2B:F2:8E:5F:99:2D:05:DE
Certificate issuer:       /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
Certificate serial:       010D0C9F4328584D04E23E603B054B3A3D9AC9A0
Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     153371
IP address blocks:        2602:f7b1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:3e:60:3b:05:4b:3a:3d:9a:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=afcbc986-1b80-469d-b667-18bc8766ea03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:c7:65:cf:b1:9a:a8:fc:59:a5:c9:1b:d1:
                    16:0c:46:b3:16:08:5d:29:09:73:cf:aa:57:96:b1:
                    a1:a0:2c:3d:7e:fc:f9:77:f8:c0:77:02:64:cd:ff:
                    9d:43:56:7f:35:e6:a2:2d:f8:1c:4f:db:cb:c6:e8:
                    90:2d:e0:10:97:1c:7f:e6:7b:0a:fa:f1:df:69:f3:
                    29:5b:3a:77:81:5f:11:af:4c:01:f1:af:22:ea:a3:
                    14:be:c3:76:aa:b4:d6:f8:05:24:bc:52:97:8e:19:
                    a0:95:b8:4c:28:56:69:f6:73:39:a0:a3:a0:51:68:
                    f4:30:b9:94:8f:18:b3:a0:0d:06:27:47:e4:55:71:
                    1f:9b:d1:74:8d:40:e8:c0:8c:f3:d3:74:b6:d6:27:
                    28:d2:d0:fc:73:ca:be:d4:00:4b:00:20:52:ef:41:
                    15:96:59:30:e6:50:67:b6:85:88:f9:30:fe:9b:5f:
                    a5:0c:cf:3d:66:e4:05:4a:a2:5b:97:1a:86:3a:36:
                    63:a0:74:a3:9f:fb:6d:ba:00:d6:29:1d:b2:75:bd:
                    72:09:7b:8b:52:b3:eb:6e:fa:25:48:cd:57:96:14:
                    81:72:79:ca:84:e1:eb:ab:4a:14:c7:05:55:43:05:
                    d4:54:da:32:9c:0c:90:41:62:4e:cd:95:ba:60:34:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:8E:BB:99:9E:D0:E6:08:DD:15:9E:2B:F2:8E:5F:99:2D:05:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:06:3e:bc:b3:5d:4b:45:3d:0e:06:97:4f:9e:2b:1e:72:a8:
         0f:1c:9b:7d:a5:43:3f:b7:14:b5:af:19:e9:d9:9c:c4:e4:98:
         35:59:25:87:b1:ed:82:e5:cb:a5:40:31:66:24:e8:9a:49:70:
         7f:ac:66:62:e0:d2:92:17:56:e6:19:26:4d:14:fb:4c:44:cc:
         d9:d4:33:2e:67:55:94:d3:8d:04:ff:5c:55:95:93:8a:e6:80:
         9f:19:84:78:34:d9:f6:1e:b4:e9:32:23:37:76:7c:0e:08:0f:
         1d:6f:6b:00:fc:01:88:0d:c1:0d:5c:0e:45:67:87:5e:4f:6c:
         1f:f2:97:b2:42:b6:43:06:f9:ef:f4:2d:8b:d2:df:78:55:96:
         ff:32:d9:87:28:a6:50:5a:8b:5a:fa:a0:37:61:15:0d:57:15:
         08:12:0d:d8:9a:9b:93:0e:1b:f7:e6:7d:40:45:25:4e:db:ff:
         1e:66:79:19:e3:d8:20:62:dd:ac:9f:0a:ae:27:8e:d9:8c:93:
         2b:a9:52:c1:d5:b0:e0:ff:56:ed:e1:34:46:07:13:e8:06:1e:
         55:a0:9d:c4:99:38:38:b1:c8:85:fd:9e:f4:42:2e:1c:7f:2f:
         02:fe:b3:5b:00:01:0a:20:60:8c:2c:9f:8c:7a:85:8c:0e:61:
         44:e2:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:15 2026 by rpki-client