Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/b4710c39-9c4c-3307-ab2d-e36cfc389783.roa
File:                     b4710c39-9c4c-3307-ab2d-e36cfc389783.roa (raw, json)
Hash identifier:          W/Fp5A8r/J35iHMuuikYHJ0RiGqqFXvf4Tr1o38eMCI=
Subject key identifier:   AD:1B:1B:E4:63:37:9B:4E:24:C4:60:C2:45:60:1D:9D:6F:1D:71:92
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584D6AAA88D91A5DF07E23A5EC00
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/b4710c39-9c4c-3307-ab2d-e36cfc389783.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     208223
IP address blocks:        2602:f9f6:410::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:88:d9:1a:5d:f0:7e:23:a5:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=04d2db0a-1904-49c5-ac23-925aa4f704c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:f3:63:23:cc:a6:bc:96:28:e4:17:d2:e2:
                    72:a1:be:5d:7d:59:75:94:04:ee:ee:d6:c7:7b:60:
                    44:47:ed:13:5e:98:fa:9b:75:64:ae:1e:ac:83:a5:
                    e7:4f:f3:10:23:a7:8a:b3:66:44:00:57:d5:ab:3c:
                    b0:5d:bc:44:23:60:fb:21:64:11:79:bf:bc:08:a3:
                    14:fc:5f:13:f9:fa:c1:02:a3:0a:9b:12:07:73:36:
                    da:5e:7f:53:69:36:ca:67:57:00:23:12:fd:1c:71:
                    70:18:71:4e:6b:56:0b:52:27:0e:ae:43:ae:b9:b7:
                    00:51:dc:74:43:f9:54:c5:32:e5:ca:00:85:df:4a:
                    58:53:13:39:95:69:c5:39:1d:95:ad:c0:03:e7:e7:
                    c0:13:65:7d:bc:9b:82:2c:20:30:b2:78:04:d7:4c:
                    05:87:22:78:74:a6:9d:66:8e:ad:a8:c6:b9:5f:f4:
                    6d:f3:11:11:c6:c4:d7:56:98:9c:1a:68:a2:5e:e8:
                    36:ec:9a:49:ba:0b:e3:06:fc:b5:29:82:63:57:12:
                    77:08:56:80:63:f5:5f:dc:69:1e:eb:d8:2d:6e:63:
                    3f:d1:7f:9f:70:d9:40:82:f0:c1:7f:b7:6a:f8:8b:
                    ac:03:86:b8:0a:31:8b:2c:ce:82:b3:e8:5f:5d:ba:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1B:1B:E4:63:37:9B:4E:24:C4:60:C2:45:60:1D:9D:6F:1D:71:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/b4710c39-9c4c-3307-ab2d-e36cfc389783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:410::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:71:0d:24:73:66:87:1a:fd:f8:e2:8e:38:c3:ba:4e:35:6e:
         23:50:5b:bd:c7:7e:6e:37:d8:3e:1c:b4:14:cb:83:fb:37:ed:
         d8:b7:7c:7d:67:f1:0b:c6:8d:4a:1d:3c:a2:b9:56:db:18:72:
         e9:44:1b:ba:b7:0b:ed:f6:2f:c2:ef:82:06:a4:32:22:27:3b:
         e4:43:a8:b0:f1:3f:09:0a:f4:16:74:f9:fa:ed:e1:06:e8:6e:
         4f:94:b5:8b:e2:ad:8c:f0:0e:90:16:1a:2f:fd:88:29:a4:36:
         f3:32:a8:af:ce:c9:6c:2f:8e:b9:f8:19:79:4b:aa:2a:40:dd:
         e4:57:5c:85:11:a9:a4:b5:80:65:8f:9a:44:c3:cb:70:4f:3d:
         f4:9c:d4:d5:9b:6f:c8:92:8f:2a:14:7d:4f:e4:bf:61:15:48:
         20:4c:45:e5:37:9e:50:9e:eb:13:8d:5e:4c:ab:e0:f7:ab:b4:
         c6:42:0e:e5:bc:2a:e2:fc:42:92:c8:91:69:1c:84:91:90:87:
         d2:f8:22:8e:3e:83:78:db:5c:05:e7:2d:0a:c3:43:59:10:9a:
         da:2b:98:99:b3:99:f3:57:38:84:43:13:4c:c5:8e:1a:0f:58:
         76:98:3c:13:d3:c3:21:8a:b7:75:54:1d:19:76:3d:e0:f3:28:
         72:26:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:41 2026 by rpki-client