Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
File:                     9785b2c1-44bc-393c-9287-c1b9c65de83f.roa (raw, json)
Hash identifier:          EOiI3jBpLk8a8/k4DbylcX1PiqTMZUX2bShO6MI0XY4=
Subject key identifier:   C0:0F:3A:EC:E3:E8:78:BF:60:35:56:A2:E1:86:2F:FC:D2:80:97:18
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584D4D5A68DE4DC89AEB703D1080
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     150369
IP address blocks:        2602:fd6f:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:68:de:4d:c8:9a:eb:70:3d:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=7afa64e0-e150-4a4a-9364-4ffae81e2889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:53:69:a2:55:ba:e2:32:22:7a:6f:fa:ac:
                    06:49:e2:d7:c0:4e:e1:bb:5a:8a:dc:ac:d3:1c:e2:
                    5a:5d:52:d1:d8:81:aa:83:21:a2:a1:24:40:1c:73:
                    a1:d4:05:68:f3:c8:e8:4a:48:fd:6c:7b:56:d2:5d:
                    36:4f:51:e5:85:ff:4b:7a:ab:e0:d6:bd:8b:ee:d1:
                    83:44:8a:cc:6a:7c:0a:02:a4:6d:2b:d2:08:8e:7a:
                    5d:c3:bf:bd:f4:0b:f9:53:b0:e6:aa:02:fd:1d:f6:
                    08:07:c6:a6:1a:a7:d9:e2:cf:d7:2c:1b:38:3d:9d:
                    6b:2b:92:88:a3:c8:6a:32:ee:97:1b:11:bb:e9:7e:
                    19:54:4d:18:de:44:f6:32:5f:4b:11:07:23:63:b6:
                    82:17:a9:1f:74:23:ed:0e:30:47:61:25:97:b8:41:
                    ba:66:f0:ed:68:d1:4b:3d:50:45:26:da:46:2c:c1:
                    91:21:61:f8:70:35:63:10:ee:ae:1d:ff:90:5e:62:
                    07:57:03:a1:49:09:64:bb:00:ae:26:44:c8:4d:cc:
                    f8:6f:ed:5f:d7:ce:74:45:6d:c9:94:68:4a:7e:5c:
                    92:98:a9:90:96:2e:a1:02:44:12:81:71:e7:b3:51:
                    5a:a5:60:31:f5:52:a9:48:f6:d9:56:bd:57:df:5b:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:3A:EC:E3:E8:78:BF:60:35:56:A2:E1:86:2F:FC:D2:80:97:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:cf:ae:28:17:07:15:aa:03:9b:31:c4:66:42:23:0d:6a:
         9c:66:e1:9a:ba:00:46:f8:a7:1d:f5:3e:7f:c4:54:e4:1e:cd:
         41:5d:8e:6b:4b:0f:f8:79:90:4b:b0:5f:79:bc:e3:f0:48:40:
         ca:9e:56:aa:44:68:80:9a:c5:0f:16:f2:02:c7:97:d2:09:cb:
         31:31:7d:c9:a8:59:1e:a0:91:bd:9d:eb:49:44:70:f3:07:04:
         23:a5:67:53:ab:d3:d2:e6:a6:61:b8:ce:26:77:cd:bd:78:b3:
         47:26:32:6d:5d:f9:6a:5b:54:0e:c7:e9:e4:a1:b7:34:78:41:
         21:a6:43:a4:05:74:29:1d:d0:3e:2f:54:3e:00:1c:83:20:e4:
         7d:ff:1f:cb:d5:be:90:f7:e5:db:23:87:87:2c:82:89:34:6e:
         e1:3c:a4:26:56:24:4f:2a:97:f5:59:09:34:07:9d:cc:99:ef:
         50:3f:06:20:ad:d6:b1:77:f0:b3:5b:52:e2:e1:93:b1:12:19:
         ec:3e:7e:f2:a8:11:2a:48:0c:9c:96:54:4c:82:70:d4:89:35:
         ea:6f:79:29:43:02:a4:65:23:8b:ba:48:2e:f8:e9:87:8b:e2:
         a9:ad:2b:8d:f1:01:b4:95:7c:c1:5b:8e:7f:28:36:8c:a5:ca:
         5a:82:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:26 2026 by rpki-client