Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/729feade-7337-3db6-bde3-a07ea34504a2.roa
File:                     729feade-7337-3db6-bde3-a07ea34504a2.roa (raw, json)
Hash identifier:          kQeyZNbhAgac233xBaG1T/mUqJGGqUUkzaL2mriyrSA=
Subject key identifier:   86:64:8B:FE:B6:2F:6E:D6:B6:27:97:EC:C3:25:D7:3A:A3:BD:CF:AE
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584C9537103F68DC301DC0A1F8C0
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/729feade-7337-3db6-bde3-a07ea34504a2.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     47069
IP address blocks:        2602:f9df::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:37:10:3f:68:dc:30:1d:c0:a1:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=5b2f61d7-1f6b-408c-8090-1a83784cb21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:ec:44:0f:c1:d9:da:2c:9f:9b:14:6f:2d:
                    36:30:3d:87:e8:3b:82:97:d6:16:af:d9:a4:fd:ea:
                    24:d9:be:ba:35:5c:d4:67:d9:8b:91:f0:86:02:05:
                    83:2e:9a:43:c4:a8:2a:bc:7c:03:32:41:1b:0c:2b:
                    f4:5b:c1:8d:11:2f:1d:86:f1:84:42:2d:45:d2:15:
                    c8:03:f7:15:68:de:0b:09:e7:7b:92:95:23:60:9e:
                    76:14:33:25:5a:8d:1b:0f:8f:2b:b4:74:91:0c:eb:
                    43:9e:04:56:90:47:cd:15:aa:3d:d5:34:dc:b3:47:
                    37:6d:6e:4b:92:b8:a8:5f:0e:46:6a:8d:a9:c7:f8:
                    5a:22:58:be:3d:b9:2c:e7:2c:27:f4:db:55:e6:b1:
                    b7:a9:c5:87:15:fb:b4:a0:0e:61:d1:ab:ca:2d:52:
                    b5:ee:ff:49:4a:02:b0:45:dc:f7:22:38:9c:39:9c:
                    33:89:a3:49:9b:7c:b7:69:db:e8:31:94:53:95:fe:
                    09:9a:6c:51:b6:a5:c2:37:e5:50:b3:8b:76:3e:03:
                    2a:bf:ed:ae:e8:2e:b9:6d:c7:27:b0:a8:c8:69:ec:
                    6f:43:39:d0:0c:66:6b:bb:77:32:4c:a6:c0:7f:67:
                    7a:a7:cb:b6:94:b9:f3:5c:92:04:73:07:5e:4a:12:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:8B:FE:B6:2F:6E:D6:B6:27:97:EC:C3:25:D7:3A:A3:BD:CF:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/729feade-7337-3db6-bde3-a07ea34504a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:22:81:d7:4c:b1:d4:56:29:4e:6d:19:3f:87:34:36:3e:12:
         9c:30:ec:1b:ae:ed:fd:00:f5:c6:89:7f:6f:54:23:c0:17:15:
         15:1c:ba:35:7e:49:30:2a:ab:34:30:cc:5a:dd:fc:79:5a:9e:
         03:da:56:52:9b:59:bd:9d:9c:b3:d9:20:6d:c5:b7:c6:53:b8:
         bf:5c:19:93:83:11:12:da:53:41:bf:88:7e:ec:83:11:af:ce:
         94:43:2c:07:c4:6f:b5:3b:5d:74:b9:71:e2:44:90:b3:51:75:
         01:ab:da:64:41:d1:dd:76:6f:e4:08:3f:37:4a:e1:4e:8a:d1:
         96:3f:6c:cb:86:57:70:55:4c:b8:5c:82:98:78:7e:8c:97:0a:
         17:68:ad:0f:7d:9c:6b:d6:3a:8c:6d:22:3f:f1:88:f6:7c:1d:
         e4:5d:09:d6:93:b1:41:1b:72:29:c8:83:55:2c:27:46:d8:e1:
         a7:c3:21:18:77:3e:93:d1:bf:60:a6:76:60:17:e4:3c:5b:96:
         e8:a2:c8:12:8f:c6:9b:83:8c:e6:48:6a:d4:cc:83:d3:8f:5b:
         0c:85:e1:47:c2:bf:93:92:01:fa:6f:67:2a:22:aa:69:87:dd:
         88:81:cb:2e:9a:04:64:6c:0e:0a:a6:f1:05:4e:ba:76:f9:ea:
         7c:ad:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:01 2026 by rpki-client