Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa
File:                     7a9a9079-ed6e-36bc-9987-7579134bf17f.roa (raw, json)
Hash identifier:          MhQVpex/EsXhKspH5o1RnU6NwAvAVXwNCiwxgwJEuHk=
Subject key identifier:   55:57:E4:B2:95:96:F5:D0:61:B3:AA:DF:00:0C:1C:6B:E4:57:66:1C
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F4328584CBBACFBAF960B7FE6755101D4
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa
Signing time:             Sun 28 Dec 2025 02:00:30 +0000
ROA not before:           Sun 28 Dec 2025 02:00:30 +0000
ROA not after:            Sat 28 Mar 2026 01:00:30 +0000
asID:                     399646
IP address blocks:        2602:f9f3::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bb:ac:fb:af:96:0b:7f:e6:75:51:01:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Dec 28 02:00:30 2025 GMT
            Not After : Mar 28 01:00:30 2026 GMT
        Subject: CN=994e7f2a-0ef1-4ce6-8298-d3f5f440d0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:d1:86:ea:1b:af:5b:2c:bb:62:7c:d2:4c:
                    16:37:f3:ca:69:47:70:a9:08:d2:fc:b1:d4:29:4e:
                    7a:fe:ca:2b:21:7b:c9:f8:97:8b:85:a8:bb:fa:b7:
                    93:cd:22:e9:c2:44:9e:16:67:01:43:6c:e6:aa:12:
                    57:9d:33:b3:34:23:dc:f0:17:b5:14:48:a7:60:2e:
                    ff:49:f3:7d:6e:ea:35:00:63:40:67:41:c9:4b:46:
                    61:57:a0:8a:d1:f4:7e:2d:d6:69:d7:f8:61:b3:fb:
                    06:86:90:c9:98:3c:84:69:fd:1c:e7:c7:7a:f7:5d:
                    e0:45:10:f9:16:51:85:bd:75:54:41:d2:c5:69:8c:
                    0b:02:8e:f6:f4:25:75:7e:1a:5b:e7:fb:d8:98:31:
                    32:00:95:81:12:ea:b4:20:97:de:c6:9b:bc:0f:ed:
                    da:60:07:04:d2:85:93:5f:50:9c:f2:dd:7e:f2:10:
                    56:1b:0e:bc:4e:75:3e:be:e2:3e:d6:23:41:54:38:
                    fb:c9:47:52:e9:ff:83:c9:00:e8:e2:a5:eb:51:9c:
                    45:a1:25:06:11:54:ed:88:78:73:bd:af:32:d7:1f:
                    ce:05:90:a6:5c:b5:9a:81:f3:0e:71:50:f8:f4:77:
                    e5:c5:31:d4:9a:8a:77:67:1c:5a:8f:ee:cb:e6:34:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:57:E4:B2:95:96:F5:D0:61:B3:AA:DF:00:0C:1C:6B:E4:57:66:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f3::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:1c:8e:97:5e:ec:c3:fb:2b:70:08:70:5d:ce:0f:b2:27:
         ca:7a:68:ca:f0:e7:e2:c7:5a:ef:0d:08:67:09:3c:db:02:64:
         00:79:ae:d2:ff:32:77:aa:8e:a4:4c:58:26:ed:21:51:f2:cb:
         01:a1:cc:d2:44:fb:e3:d7:f1:1c:d1:9d:f1:88:e5:20:4f:08:
         7b:67:3e:7b:48:51:ea:7c:cd:59:1c:4b:73:30:aa:33:9d:5f:
         f2:67:bd:00:1d:7a:02:4f:11:e7:6f:48:74:4b:db:47:e8:67:
         8f:2d:9b:9f:ec:8e:9f:69:3f:49:0f:77:9c:47:2b:81:eb:47:
         b4:9f:51:a0:87:40:b4:bf:63:ab:ad:1e:17:bd:be:85:39:a1:
         83:e1:96:0d:11:9c:63:07:2f:b4:fc:b3:88:2b:5a:8e:2a:8d:
         6f:db:4e:7b:65:03:a8:1e:6e:d2:23:2e:6a:9b:ae:4f:22:8e:
         bf:19:43:c5:d0:f3:10:60:b0:39:8e:e1:a9:4e:44:6a:ec:99:
         fe:70:aa:e3:2e:bc:9d:ed:b3:a4:b5:76:76:58:02:a9:9f:0b:
         17:7e:61:30:6a:63:dc:a0:e2:4e:e2:4b:3d:69:5e:98:c1:26:
         bc:56:2a:81:c6:a8:28:83:c8:47:1d:6d:b0:a4:5b:3b:62:1d:
         83:aa:5c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:20 2026 by rpki-client