Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa
File:                     03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa (raw, json)
Hash identifier:          C5FbfT66a+BH6Fpr9RqBJuWKjcszkS+oALvl42YZ0Ec=
Subject key identifier:   EF:E6:8E:56:D1:4F:90:CA:8A:AB:E8:F2:52:32:67:D0:E0:EF:32:98
Certificate issuer:       /CN=f0e38106-b42f-4661-8168-b943de3f70a6
Certificate serial:       010D0C9F4328584D730A6E5146CDBDCF5158DD80
Authority key identifier: 13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     11187
IP address blocks:        2602:f993::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:6e:51:46:cd:bd:cf:51:58:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e38106-b42f-4661-8168-b943de3f70a6
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=ed99b1b0-6e4a-4aaa-a280-c70029f8c6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:a6:87:01:a5:b3:0a:ed:dc:41:76:be:f2:
                    63:6e:bf:00:bb:a1:70:27:55:c1:2b:95:fa:1d:b7:
                    0d:74:bf:b9:f3:bf:96:ff:1c:51:1d:2b:bf:a8:5a:
                    22:2d:c8:29:ab:d5:da:ab:00:02:77:a9:92:91:48:
                    f1:b7:d0:48:46:6a:d0:e0:81:11:ea:e8:73:df:54:
                    e6:1f:25:c6:c4:70:b9:4f:38:b5:ca:4f:0a:c0:4f:
                    90:55:47:5d:38:a2:95:1c:7e:32:99:43:33:d4:3d:
                    78:7c:2f:02:02:c0:b1:f7:e4:70:79:28:62:a2:21:
                    0d:0a:5b:42:ac:cc:54:fb:dc:7a:b8:6d:e5:f2:b5:
                    6d:b2:d9:0f:45:7c:5a:cf:8c:22:ff:17:ae:37:30:
                    e4:e7:30:ca:8c:84:67:5d:1b:f1:b2:7d:37:87:06:
                    5a:5a:23:f2:a3:fa:e0:ab:63:e0:3c:cf:50:6a:28:
                    c7:cc:e9:5c:a8:33:ac:92:4c:17:d7:e6:a7:d9:13:
                    60:5b:0c:e1:f5:81:cb:29:5f:06:f1:2a:19:91:ee:
                    30:cc:5d:f8:3b:48:03:dc:1b:4a:43:b1:43:62:04:
                    27:5b:82:44:76:a3:84:fc:e8:28:c4:48:74:ea:78:
                    97:66:b4:8c:5a:2d:eb:14:c0:d3:02:39:40:cb:cb:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E6:8E:56:D1:4F:90:CA:8A:AB:E8:F2:52:32:67:D0:E0:EF:32:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/03aaf92d-24a0-3b99-ad54-8dab66f216ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6/f0e38106-b42f-4661-8168-b943de3f70a6.crl

            X509v3 Authority Key Identifier:
                keyid:13:F5:EE:02:D8:EB:68:CA:7D:26:14:A5:BB:07:11:08:97:3C:7A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e38106-b42f-4661-8168-b943de3f70a6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f993::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:2b:95:c8:5b:b3:98:fc:af:c9:c5:ab:e3:b4:28:66:d9:
         e9:d2:e5:5a:76:63:db:9f:11:b4:5b:a6:d3:38:df:4c:30:fe:
         fb:5b:95:b8:68:64:85:c1:1a:c3:b9:bd:e6:ca:d9:d4:21:ff:
         a5:3b:46:46:2d:24:c3:35:2a:03:fb:cb:6a:dc:4a:d5:77:f6:
         1f:2d:4b:c6:2e:d7:ab:ee:09:05:f9:3d:03:4d:4e:67:6f:5d:
         84:1c:f6:e5:0d:24:37:0f:7b:87:38:92:ae:38:1e:64:18:02:
         77:39:0f:51:b4:d9:9c:c8:aa:18:1d:76:8c:ea:58:b4:ab:2f:
         47:1b:ac:5b:a2:13:7a:f2:95:17:53:fc:eb:8f:46:2e:a4:32:
         92:9c:da:e4:d7:0f:50:ee:51:b0:24:aa:ec:a9:19:be:97:9a:
         cd:ca:88:9e:c3:b1:7c:e0:db:66:cd:28:25:97:87:18:fb:9a:
         03:4f:fd:dd:77:ab:70:3a:58:a2:fc:86:08:91:3a:ed:26:e3:
         9e:31:df:58:6b:7a:e9:b7:83:64:aa:6b:ce:13:62:15:02:c6:
         0b:67:e8:62:cd:ee:d5:ce:c7:09:90:96:3e:64:6d:6b:97:c1:
         a1:03:26:02:16:38:ec:44:e7:cc:da:88:86:0a:47:4f:0f:40:
         73:d1:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:56 2026 by rpki-client