Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa
File:                     651d2b54-918a-399f-9d4d-c66a10805267.roa (raw, json)
Hash identifier:          E/rQ478+QjzYlvc7siFN3yKKZSdza1q3E6ZXi9A1KPI=
Subject key identifier:   AA:A5:0C:B7:39:51:C4:D8:B0:DF:E9:8A:9B:4E:CF:BA:5C:85:B6:23
Certificate issuer:       /CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
Certificate serial:       010D0C9F4328584CF8524BCD79278BD0CE224EA0
Authority key identifier: 31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     401443
IP address blocks:        2602:f7c1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:4b:cd:79:27:8b:d0:ce:22:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=163bd801-4e9f-4412-be0a-81318f60412b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:35:a6:b9:dc:3d:cb:dd:65:fb:34:7d:c6:
                    57:31:15:1f:28:fc:a6:09:31:82:73:ee:df:d6:f1:
                    a9:91:19:f3:7e:11:14:55:f9:53:3c:c4:68:80:b5:
                    64:92:e9:6f:61:39:33:cd:61:56:57:f1:c1:aa:99:
                    85:35:5c:0e:a5:7f:77:d3:d6:5d:b3:15:b2:6f:92:
                    7c:e4:74:45:46:4e:9c:25:70:1d:b2:0f:87:d5:5c:
                    5c:75:9c:a1:40:2c:0a:53:7b:27:9f:06:4e:32:26:
                    f7:6b:ad:45:ea:cd:83:25:1c:d3:23:06:e5:d2:19:
                    88:0b:84:d3:ad:f5:e1:6c:11:eb:7e:4a:52:6e:00:
                    1d:c6:e3:02:8a:53:84:9f:9d:58:7c:4d:be:ac:49:
                    e8:fa:57:1a:30:ca:b6:ca:65:dd:a9:1b:47:69:38:
                    f9:0d:16:b0:3c:e1:74:bb:b2:91:94:79:9f:49:4c:
                    c3:6d:22:f8:99:9a:bd:c0:d8:da:6f:bf:bb:9f:20:
                    9e:04:37:f2:80:3b:88:2a:d0:2a:33:a5:18:ee:50:
                    15:06:ba:f8:7c:1f:26:b2:98:5b:f0:7e:d2:ed:ae:
                    dd:64:fa:da:69:95:2d:91:99:ea:3d:a0:0b:94:ae:
                    23:bd:b0:3d:dd:24:44:07:de:0f:e4:15:d3:a3:b7:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A5:0C:B7:39:51:C4:D8:B0:DF:E9:8A:9B:4E:CF:BA:5C:85:B6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl

            X509v3 Authority Key Identifier:
                keyid:31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:21:7a:fa:81:cd:44:24:c3:92:87:9c:31:ab:2a:81:5b:6a:
         c4:00:38:c5:85:f9:e5:61:d5:4d:00:78:75:d2:7d:89:63:aa:
         a6:ae:58:17:e3:c1:07:42:a2:64:e3:f2:6b:01:48:54:03:52:
         53:d6:e9:93:b2:ec:2b:d3:06:78:e2:50:6d:2f:4e:c0:63:85:
         7e:1d:1b:0e:bc:b3:47:54:a6:d5:24:a8:56:24:0e:41:5a:0e:
         24:02:f5:ee:3b:87:77:ec:67:d1:dd:59:71:02:72:28:54:5b:
         44:3c:21:52:43:e9:7a:bf:58:b6:e0:99:47:f5:09:e4:88:ea:
         6e:42:22:b2:e4:6a:a8:34:4d:9e:61:dc:0e:17:df:46:20:a8:
         7c:27:2f:b3:aa:25:e0:02:6b:1a:c9:98:42:ce:38:59:99:54:
         e9:dd:c9:1e:6e:85:fa:18:da:f0:1c:3f:3b:a5:c5:86:87:7a:
         5f:ef:69:20:16:2d:14:b6:f6:74:19:20:c7:c8:0e:4b:47:6b:
         9f:10:e8:ad:2e:48:db:9f:21:37:55:80:63:d3:6e:d1:fa:65:
         92:c1:60:cc:9a:c4:ef:bb:f4:16:3c:dc:3b:a5:00:f9:70:30:
         42:56:15:47:01:cc:22:36:66:a2:06:04:31:9d:d1:4b:9b:e7:
         0c:e8:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:07:05 2026 by rpki-client