Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa
File:                     d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa (raw, json)
Hash identifier:          d5c34O48PihQjLk7AxHF9iyl/gF/it42wJHsdvbPUnI=
Subject key identifier:   9B:D6:36:C1:0B:74:68:0B:D0:FA:A3:5B:9A:C8:D4:75:1E:14:E4:89
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584D703FC3C5CE78080A3E74B600
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     401243
IP address blocks:        2602:2b5:16::/48 maxlen: 48
                          2602:2b5:17::/48 maxlen: 48
                          2602:2b5:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:c3:c5:ce:78:08:0a:3e:74:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=576965fe-0c8d-4bfa-9511-5b2d9e2a4232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ce:94:5f:60:93:db:cc:2e:2d:ac:26:d1:88:
                    6e:9c:36:e4:86:03:0d:35:89:33:c2:17:e8:27:a3:
                    6b:a2:fd:87:e2:01:ce:43:60:75:37:7d:29:1b:57:
                    a4:98:e2:dd:83:3e:bf:30:16:e2:73:a6:1f:28:fb:
                    7b:92:66:c3:55:04:53:12:d9:c6:75:f1:52:57:f7:
                    fe:b7:f9:ff:a5:35:db:ab:00:02:fe:37:ac:e4:13:
                    d0:93:fd:a6:81:8a:5c:58:b9:eb:80:f0:56:a5:a6:
                    22:44:70:45:ec:67:4f:52:14:b0:32:a2:e1:ee:a4:
                    4e:ea:41:66:d2:98:39:1a:8c:22:25:1c:00:df:84:
                    d6:3d:49:b1:64:32:73:4d:66:45:03:69:6d:cb:9c:
                    a8:a2:c4:4f:04:96:c8:28:9b:94:42:21:e8:ee:73:
                    80:c2:05:d1:2c:2b:08:24:39:8b:5d:84:26:b9:a8:
                    32:8f:8d:00:89:08:6a:18:e1:2c:74:68:08:f2:97:
                    ff:39:8e:31:ef:0d:c9:2d:04:74:85:4d:8f:fa:3b:
                    d7:ce:b9:6c:f9:c4:34:3c:07:1a:e1:a0:38:21:7f:
                    d8:47:11:8e:d7:b7:38:9c:18:01:61:3b:b4:a3:73:
                    68:cf:96:17:38:57:0a:67:9b:8a:f8:8f:93:9b:e9:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D6:36:C1:0B:74:68:0B:D0:FA:A3:5B:9A:C8:D4:75:1E:14:E4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/d8d3f44a-91f0-3adf-be97-fe9971bf453b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:16::-2602:2b5:18:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:29:62:8e:8c:8d:95:0f:f8:79:4a:14:2b:c8:ff:f6:be:60:
         1c:5d:3b:68:fc:01:ff:69:34:10:31:4c:6e:3d:73:32:d9:cc:
         81:f2:3c:ef:d7:41:f5:cb:93:0e:aa:e9:bd:4b:cc:2d:a6:20:
         02:6b:76:bb:44:0f:86:a2:3e:7b:aa:37:0c:63:47:46:27:fa:
         e5:a1:3e:51:47:86:5d:7c:1a:76:39:30:39:3d:ed:08:51:8e:
         ca:f6:c0:51:8a:22:c4:8d:41:05:6e:51:96:a2:0c:44:cd:df:
         db:2c:e9:58:6d:60:26:f1:81:16:aa:ad:56:a5:b3:86:f3:27:
         f7:13:a1:d0:de:26:64:c3:ea:3c:7b:44:30:7a:2f:f9:51:5d:
         9b:a3:76:10:44:38:4f:40:18:de:af:3e:1c:18:9a:9d:66:91:
         9e:f0:6c:83:35:79:31:fd:6d:75:d7:db:96:fb:73:a2:1a:09:
         2c:00:f3:b3:3d:47:51:9d:78:41:df:89:79:27:d9:d1:18:d3:
         d6:ce:61:27:4d:79:6b:96:92:b4:85:23:96:fa:82:9a:06:ba:
         7e:91:6e:ec:68:4c:a2:2c:39:9f:49:74:63:ab:14:f6:29:32:
         14:60:82:e7:ee:e6:e1:1a:2c:4a:94:39:15:80:56:89:f1:c7:
         0d:fc:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:04 2026 by rpki-client