Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/a818c84d-be15-3978-bb90-e541b1988320.roa
File:                     a818c84d-be15-3978-bb90-e541b1988320.roa (raw, json)
Hash identifier:          my/w3AcZo02XkshvGI60tDd9Y93mnv+Svap8JV0K4Bs=
Subject key identifier:   F7:3E:5B:49:A7:66:A7:DE:3E:90:DE:D3:A0:8A:1D:FA:B8:75:4D:B1
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F4328584D86954A16AED4AD43D170CD80
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/a818c84d-be15-3978-bb90-e541b1988320.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     211544
IP address blocks:        2602:fc8b::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4a:16:ae:d4:ad:43:d1:70:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=12d45809-44e4-45b1-a6b3-27a268479b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:d6:8a:06:f1:33:e3:1c:7b:7b:cd:17:4a:
                    25:cb:9e:08:d1:e5:c0:7b:f3:9e:82:6f:74:d7:12:
                    98:dd:91:9c:64:83:a1:5c:72:2a:8b:87:0e:7a:c2:
                    53:f4:da:01:5a:a5:da:7c:e7:5b:33:96:46:0d:72:
                    3e:bd:64:a8:ce:74:3b:cf:e6:2f:31:b9:b5:ab:00:
                    15:57:18:04:49:ed:0f:ef:b5:ed:d0:a8:a1:04:5d:
                    e4:e6:e5:cf:7c:ee:81:30:2d:2d:0b:ee:63:0c:f3:
                    dd:ca:ce:0f:17:ab:ff:5b:be:c6:59:52:30:f4:34:
                    fd:ca:52:b3:ad:a9:06:14:0b:24:70:dd:a3:f0:eb:
                    86:c2:df:1a:57:85:cd:16:83:76:e1:15:c1:86:d9:
                    24:7e:92:07:89:e6:54:02:7f:2f:61:0e:97:a9:68:
                    b2:bb:13:9b:5c:37:f8:0e:cc:8d:71:ed:48:2e:e8:
                    d6:6f:a4:e6:d2:1b:e1:3e:86:c1:59:b3:e5:d3:40:
                    12:6c:e6:3f:9b:76:ad:7f:75:ff:46:e2:27:53:0f:
                    fb:00:32:56:35:25:1f:0d:db:52:ce:6d:40:ae:1c:
                    55:ac:e8:93:99:12:96:c4:fb:e7:18:ac:11:e9:09:
                    e8:6f:f2:e1:23:54:4f:3a:0a:e5:05:80:36:c1:09:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3E:5B:49:A7:66:A7:DE:3E:90:DE:D3:A0:8A:1D:FA:B8:75:4D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/a818c84d-be15-3978-bb90-e541b1988320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:71:7c:36:f0:0b:f1:04:75:4c:05:80:26:38:a8:2e:7e:ec:
         36:ed:12:9c:e0:37:c7:1c:dc:87:e6:df:35:cc:64:70:45:8a:
         4a:87:1b:88:07:dc:36:ed:9c:57:e5:0b:8f:44:e3:c0:cd:cf:
         ca:07:c3:08:1c:9b:fd:c5:85:e1:fc:4f:b4:e6:c2:16:75:8b:
         c1:af:b2:fa:6a:28:f6:0f:ac:33:2f:de:ab:c9:6c:7b:d0:df:
         7c:b0:6a:11:92:0b:09:d7:1d:6f:9c:79:52:ce:e3:ff:03:1a:
         a6:17:c0:9e:95:e3:5a:b1:07:fc:d8:a0:59:10:60:ef:47:67:
         65:b6:0a:f8:54:88:32:5a:a1:60:1a:ca:1d:b0:43:dd:b8:3e:
         83:6b:cd:97:e4:4e:5f:b3:c0:04:e6:87:d1:be:bb:ab:b5:b5:
         9f:a0:9d:02:cf:07:80:c4:16:54:1a:24:a9:39:4d:88:2c:9f:
         59:63:cb:2f:b6:c6:7f:98:52:5c:57:c6:9f:09:54:55:0b:b7:
         73:28:b9:d8:91:62:48:3a:d5:aa:93:6e:6f:21:55:75:77:8c:
         90:35:d4:3b:0d:57:fe:90:f7:30:16:e5:ba:45:30:e4:15:e4:
         6f:62:5b:84:c8:42:7b:ad:f0:55:00:10:09:71:b3:2c:22:69:
         70:fd:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:12 2026 by rpki-client