Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/3bbf3014-4b7c-3c53-9d70-d0c1d207d50a.roa
File:                     3bbf3014-4b7c-3c53-9d70-d0c1d207d50a.roa (raw, json)
Hash identifier:          BeE89KwBTwHnMhBNb1JWDV8ZAGSv6VZaf9DmcnRJXH0=
Subject key identifier:   39:79:BA:8A:7B:E0:A1:5A:9F:DA:95:68:10:C6:E7:AC:64:28:58:9A
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584CAE5E9A279D5E268FAFEEF180
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/3bbf3014-4b7c-3c53-9d70-d0c1d207d50a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     398493
IP address blocks:        2602:fd37:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:9a:27:9d:5e:26:8f:af:ee:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=78ff0cc9-f088-46f2-ac3a-b595690bf915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dd:ec:37:81:93:82:20:9a:f5:ab:8f:82:1d:
                    b6:b8:22:96:11:54:34:01:cd:fe:52:5a:bd:72:4e:
                    1a:2d:12:f1:b3:b9:02:8b:cc:6b:0f:c0:7a:4a:47:
                    f8:57:d0:0d:f3:cc:3f:22:5e:d8:a3:c4:ed:9d:14:
                    75:69:95:ae:9c:71:60:83:0a:fe:04:60:e5:25:0d:
                    64:7a:1e:ab:0a:13:e0:55:d8:cc:3e:63:96:b2:df:
                    64:28:f8:f5:65:85:2e:49:30:68:9e:1f:7b:fc:fd:
                    98:28:0f:04:a8:c2:22:7c:a2:55:b5:d0:13:f3:1a:
                    9f:61:ea:9d:bb:8d:1d:a6:b7:8b:27:08:a7:3c:24:
                    74:50:70:d2:90:3c:e9:89:4d:61:ea:db:c5:05:95:
                    6f:09:51:f8:cd:3f:30:46:c2:63:67:1f:19:7e:76:
                    bd:e4:03:71:b5:f5:65:1b:6b:13:fe:f1:e1:3b:05:
                    0f:f0:4c:ca:ca:79:1d:46:ef:12:f8:3a:f7:8f:14:
                    6a:f5:5e:68:01:e2:36:95:69:0d:bf:6b:1d:6f:f7:
                    43:7a:76:99:fd:20:ee:85:a7:37:c9:d2:6d:f2:d2:
                    92:1e:c2:34:1a:33:7d:d1:f3:72:f2:22:8c:4c:c7:
                    1e:67:6c:b5:fc:38:71:bf:1b:64:18:ed:e1:5a:d0:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:79:BA:8A:7B:E0:A1:5A:9F:DA:95:68:10:C6:E7:AC:64:28:58:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/3bbf3014-4b7c-3c53-9d70-d0c1d207d50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:e0:27:be:c8:dd:91:00:67:04:ae:9f:c1:59:4b:ce:f8:
         98:01:24:60:c5:85:9f:a5:41:e1:dc:eb:a2:67:4a:fd:28:c7:
         3b:b1:14:a7:0e:7b:25:99:c4:a2:d8:86:2e:22:7f:89:85:1f:
         f9:b6:aa:cc:6a:53:1b:74:47:c3:c8:af:08:63:c1:79:1c:c3:
         08:32:90:54:6e:04:39:ec:d8:a5:0d:5b:fc:8e:63:14:c9:af:
         91:3f:10:3f:4a:09:9f:00:fa:13:e1:d1:c6:65:96:47:21:f7:
         ee:ad:24:c2:17:95:08:76:ea:a2:31:f7:e5:53:ee:bb:a2:e2:
         07:62:1d:9a:ca:e3:22:58:d0:ec:ca:68:8f:f4:7a:55:91:f8:
         17:bd:c9:56:c7:24:96:32:ce:97:fe:c6:d6:f5:63:26:ac:98:
         73:64:49:f2:d1:1e:8d:d6:00:aa:3c:ce:9c:b8:50:60:a3:27:
         3d:9a:dd:85:f1:65:07:9f:0f:73:47:b0:16:6b:3c:6d:2b:d6:
         1d:00:95:2b:b2:e2:c8:53:aa:30:14:07:7a:8b:eb:4a:96:4f:
         8d:aa:52:25:1a:3f:be:48:ff:c1:0f:f3:5d:ce:e4:73:f3:ee:
         de:61:65:11:f1:b0:0e:c8:18:c8:dd:7f:43:de:c7:9f:55:09:
         dd:e6:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:15 2026 by rpki-client