Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
File:                     caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa (raw, json)
Hash identifier:          f+lKvy90xU5CYzLkLHIb1+VoudmUC1JwfbmSBks0Iyk=
Subject key identifier:   81:8C:AB:54:E4:B1:E2:0E:00:41:42:3C:8F:91:78:97:7B:20:DE:FC
Certificate issuer:       /CN=d2de7271-9c81-455b-9780-55895b635592
Certificate serial:       010D0C9F4328584D59EA6E903E9DC4CAB9426780
Authority key identifier: B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     26042
IP address blocks:        2606:c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6e:90:3e:9d:c4:ca:b9:42:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de7271-9c81-455b-9780-55895b635592
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=09073bf4-6ba5-4560-871c-285c05703d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:19:ef:41:ab:5d:38:aa:b3:44:fe:73:72:
                    c8:9e:11:50:21:e5:22:95:68:72:3a:a9:34:f4:e0:
                    89:e1:8f:eb:13:27:41:2c:99:0d:fe:aa:9a:0c:39:
                    02:d4:0a:35:68:07:70:cc:b9:25:41:ac:dc:ab:3b:
                    0c:6b:ac:db:5b:95:2c:73:85:9d:d0:69:ee:64:33:
                    80:9c:eb:e9:66:24:6e:68:41:a0:9d:80:de:d6:a6:
                    80:26:f7:5f:f1:a5:e8:82:18:0c:5d:28:8a:26:2f:
                    2d:29:0d:70:db:34:2b:34:ed:ca:f9:ed:2f:6e:04:
                    43:4e:3d:aa:50:aa:10:a3:76:24:33:aa:f0:cd:18:
                    12:8c:f2:02:74:21:c9:16:63:da:a3:b4:c4:d3:12:
                    fe:b7:cf:77:39:5e:8c:53:d5:82:fb:26:27:53:b8:
                    a3:a5:29:22:86:9a:ce:1b:19:c2:44:8e:e1:1d:63:
                    d4:4c:ae:f6:81:4a:d4:53:f4:0c:0e:13:ea:15:e7:
                    97:65:23:6d:26:75:33:22:6f:6b:db:17:65:16:56:
                    c2:38:f0:95:22:0d:77:62:c7:78:e0:3d:a6:8d:91:
                    cf:5d:9c:e2:cf:c2:9c:fa:cd:f9:d8:ca:1d:78:ac:
                    e1:6b:54:ed:fe:d0:d2:bb:e6:6a:6b:e1:72:8f:df:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:AB:54:E4:B1:E2:0E:00:41:42:3C:8F:91:78:97:7B:20:DE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl

            X509v3 Authority Key Identifier:
                keyid:B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6c:f2:0a:ab:d1:de:ad:72:8a:91:42:45:f7:1f:f3:aa:8a:
         36:cf:ce:a9:43:b6:40:60:1a:48:d7:17:60:ca:38:d3:2f:a9:
         19:35:2e:76:ad:37:69:07:04:2a:9b:91:76:54:d0:aa:bc:27:
         29:a9:f2:c5:85:1a:a1:47:35:99:95:b8:76:97:c9:bb:1b:87:
         7e:90:a8:29:67:bb:49:f4:37:cc:5f:30:93:eb:11:da:e2:b5:
         d2:11:3c:11:be:64:63:82:4b:8f:bf:bb:67:3e:51:14:06:16:
         ae:a9:11:4e:65:d1:9d:c4:a2:99:29:3c:dd:ee:ef:ff:3b:c8:
         b8:0e:19:49:53:f7:ec:7e:44:33:ea:bc:15:9a:fc:09:aa:c6:
         fc:3a:b3:22:12:24:14:55:dd:a3:bf:2f:20:a1:ed:2c:01:ce:
         f3:a3:cf:bd:c7:a8:8f:0a:f4:06:4d:2a:76:2d:cf:71:e0:a5:
         91:10:0e:9f:e4:05:cd:df:b7:36:d3:b9:ed:1a:07:e1:dc:2d:
         a0:19:0d:46:d3:75:3a:83:df:4a:24:40:e7:f7:fa:bc:cf:5d:
         83:5c:2f:7e:d2:cc:04:b8:34:a1:2f:60:8c:cd:b7:2d:f4:2f:
         8c:e6:03:19:54:cd:64:8b:b6:2d:b2:93:5e:35:07:9e:61:09:
         5a:e3:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:23 2026 by rpki-client