Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
File:                     17bdc031-206a-3420-b709-d3ce9d5f5850.roa (raw, json)
Hash identifier:          zXtOYhvyxAslxRNjZ/LYng8Ib/1F7FEagHWMbwDUhKI=
Subject key identifier:   B9:93:83:CB:99:7F:57:A6:98:EF:BD:C7:57:63:E6:77:95:07:07:46
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584C93D18FBCCDB8526483993B80
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     397901
IP address blocks:        2602:fc56::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:8f:bc:cd:b8:52:64:83:99:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=7a1077db-4f9b-4a4d-8f17-f8d7afc075df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:a3:02:26:c3:a0:95:cd:ae:09:c5:00:36:
                    6c:10:47:1d:b5:6f:48:29:d4:5f:64:f7:d4:ed:51:
                    e6:b7:27:b5:1d:d3:fc:98:a0:c2:8f:62:6c:49:81:
                    00:7f:fb:c9:c0:eb:bf:33:b0:d9:ee:20:48:03:ab:
                    19:15:e2:12:33:64:87:5d:fd:1c:17:7d:cc:59:6b:
                    a5:35:c5:7f:45:13:b6:69:c0:8e:c7:4b:58:6e:a9:
                    d0:88:c6:86:ff:c9:b3:64:0c:83:c3:43:80:35:de:
                    c3:f4:99:1e:7a:f5:22:44:79:09:13:3c:46:c6:2d:
                    57:22:8e:31:a8:eb:b7:01:aa:47:e3:f9:fc:6f:ed:
                    49:52:8a:80:88:8f:bd:19:39:93:e8:9d:a7:05:4c:
                    9b:bf:90:d9:05:e3:53:cf:b6:23:f5:02:72:a7:1a:
                    d1:ab:1f:7e:6a:d2:61:d2:56:14:51:aa:57:df:af:
                    35:21:c1:a2:97:aa:fb:ef:a8:c2:e6:10:17:56:07:
                    de:a1:b5:db:3a:ea:c6:b0:2d:6f:19:52:a8:02:df:
                    ba:ba:8c:59:2c:e3:ad:ed:35:66:d9:27:91:0e:85:
                    a9:a1:ba:95:96:79:4d:6b:85:96:74:a4:5f:0e:ed:
                    6f:83:7a:9e:8e:e7:26:98:8c:d6:e9:95:e4:7f:4d:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:83:CB:99:7F:57:A6:98:EF:BD:C7:57:63:E6:77:95:07:07:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc56::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:ac:8e:ed:2d:8a:a3:7e:ae:54:84:69:ea:7e:2e:4c:04:
         fa:e4:2b:07:17:7f:67:6b:24:6a:57:f0:17:69:44:59:42:94:
         9c:2b:c8:2b:87:5b:56:16:79:8a:3b:fe:c4:07:46:f2:f1:7e:
         2a:6a:12:7c:54:d2:0d:64:be:63:0a:2a:2d:05:d7:8e:e2:a3:
         75:8c:02:7b:f3:53:5f:57:22:57:ee:ce:e9:b6:56:5b:1c:7b:
         73:e0:f7:a3:09:8c:ea:07:43:80:04:c9:61:6d:d8:73:cf:3f:
         83:b3:82:ad:ee:1e:9c:19:0a:f2:70:9c:35:6d:c4:14:7e:1d:
         3f:9a:aa:91:b2:a6:80:6b:25:87:12:8f:ce:00:7c:92:b5:16:
         af:7e:65:e7:fa:bf:b1:41:fe:14:f9:43:f1:1f:ac:8e:5a:dd:
         b4:fd:b0:74:ad:a2:79:39:1a:b4:c9:30:f5:bc:48:82:86:c6:
         03:6b:04:f2:f4:6c:7d:0b:37:13:81:5f:e3:9a:82:9c:fd:3e:
         42:59:5c:79:50:5c:2a:a7:c9:14:42:3c:ba:43:5d:64:86:76:
         39:f4:91:ea:62:af:f6:2f:23:3e:ca:1d:5c:d2:3e:f7:b1:b4:
         e7:22:cc:0d:c4:34:e9:e6:6e:09:5b:08:30:45:26:52:48:74:
         ae:c0:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:14 2026 by rpki-client