Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
File:                     123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa (raw, json)
Hash identifier:          4ybPUGrbhenrKnKpZtyhJVw/hpMXjdPUzpS30YJB8X0=
Subject key identifier:   E8:8F:9D:B8:5B:FA:F2:B3:D3:91:B9:48:F7:C5:96:C1:9B:7B:20:93
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584D60E50C55CAA4F17A59834AA0
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     13737
IP address blocks:        2602:f895:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0c:55:ca:a4:f1:7a:59:83:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=09c22adb-54f9-4e7a-8ae1-7397c182e164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c2:0e:f4:8a:74:95:75:ab:8e:a5:21:82:d6:
                    72:c5:24:88:57:0e:51:cb:04:3a:12:c3:37:a4:6a:
                    60:cc:cb:b4:12:04:5e:2f:16:3e:3b:34:17:d1:f0:
                    a0:9c:0e:cc:91:3f:66:7c:6e:ac:ac:6f:51:75:2d:
                    61:f8:2a:90:03:18:fc:0d:b9:69:a4:87:ec:02:6d:
                    cc:68:a0:ff:d9:49:3d:ab:20:ff:4a:97:44:b8:33:
                    65:94:45:53:41:68:41:c6:75:b5:a5:e1:4b:50:a3:
                    a9:43:fc:7a:65:09:f7:16:d7:2b:58:22:9d:6a:93:
                    62:e8:f0:d8:bc:96:23:ed:6f:f9:b1:b4:0b:10:0e:
                    09:94:25:63:9b:d7:c7:29:a6:95:46:bf:74:b7:98:
                    0c:9f:8a:bf:8f:91:78:45:57:cb:f6:22:06:bf:0c:
                    56:c1:c1:d6:e0:a0:f8:12:94:c1:34:8e:20:94:a5:
                    8e:4b:25:b8:eb:8f:b5:12:da:fc:27:29:3a:b9:94:
                    26:ad:26:98:a4:cc:92:2c:31:28:e4:93:90:0b:6a:
                    c6:94:2b:7e:d0:ab:f6:af:29:24:b8:d2:3b:f2:ff:
                    e1:2e:78:1d:e1:0b:3a:cf:32:30:45:cb:00:4c:2f:
                    9c:10:26:52:8c:b4:0b:c2:24:0e:ca:96:fa:bb:cf:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:9D:B8:5B:FA:F2:B3:D3:91:B9:48:F7:C5:96:C1:9B:7B:20:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f895:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:b4:14:8e:f7:fe:77:7a:e8:f1:6a:9c:be:b0:95:8a:07:03:
         9c:40:1e:a0:b1:59:75:6a:3d:f8:bc:3d:3d:0a:a6:3d:3d:67:
         e5:54:b4:2d:67:43:bf:b0:69:ce:dd:ef:9e:76:ce:a1:21:06:
         f0:21:f8:cf:d3:17:a1:89:20:ad:f7:28:f4:20:04:b8:09:fd:
         74:22:ea:2d:33:44:6e:a1:e9:83:c5:02:a6:6b:33:2e:bd:f7:
         54:e8:84:79:b9:7b:7c:b6:f9:dd:fc:a5:db:f5:c0:67:fc:8d:
         4c:6e:e2:3d:08:f1:f8:93:19:9f:b6:f7:09:27:6a:92:58:4c:
         33:d1:a6:ce:29:53:20:fe:ef:ef:5a:12:c8:5e:34:c7:a1:73:
         83:00:90:12:56:91:ef:7e:57:b6:1c:24:50:df:e9:7c:1a:55:
         b2:5c:be:a1:a2:22:7a:4f:d3:55:eb:c9:f1:57:57:e7:fd:49:
         be:c7:2b:2b:af:13:c4:bd:e6:f0:06:ea:d1:36:53:79:89:15:
         e9:c6:d1:75:ee:87:e4:65:57:ee:06:2f:ee:eb:89:c3:44:d0:
         63:69:dd:3b:cd:9d:aa:d8:50:2f:15:1c:8a:5d:d0:fa:73:fe:
         e5:ae:e2:6f:1e:94:c6:62:d5:b1:3e:5a:fd:47:69:46:9d:d8:
         bd:60:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:38 2026 by rpki-client