Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/016f1626-329e-31f3-b4c1-e93d91061cd5.roa
File:                     016f1626-329e-31f3-b4c1-e93d91061cd5.roa (raw, json)
Hash identifier:          dgYSUgXBO0OEJonDEAoRnCXyfOCMTS4bXoajF3jGBsE=
Subject key identifier:   7E:B5:8C:92:73:62:EC:62:E5:92:30:3F:1C:E6:61:10:D8:51:03:3C
Certificate issuer:       /CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605
Certificate serial:       010D0C9F4328584D86953BD4BC2F1C89A5227800
Authority key identifier: 9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/016f1626-329e-31f3-b4c1-e93d91061cd5.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     27172
IP address blocks:        2602:f635::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:3b:d4:bc:2f:1c:89:a5:22:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=84f5ed30-98f6-43b9-bf09-05bd5e6e1bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:36:be:e5:9f:84:b1:1a:8e:07:51:3e:b1:d7:
                    64:25:8c:36:1d:54:7f:25:61:40:b7:f9:2f:73:bf:
                    3e:a9:5c:d0:f5:72:fa:b6:09:68:25:dd:0b:f0:10:
                    98:04:12:28:82:26:46:2f:fe:07:72:30:db:a1:b8:
                    17:83:57:79:ee:1b:51:1e:b5:b2:9c:d9:b8:38:f2:
                    3d:5e:cf:89:6d:8c:d9:86:a1:d1:c6:e1:25:61:20:
                    91:e1:bb:57:3e:ba:66:18:54:55:f3:93:be:00:f5:
                    ce:5e:58:85:75:0d:6b:65:31:8f:60:88:37:26:a0:
                    fb:82:5a:80:31:da:00:4c:a0:a6:e9:32:f7:19:46:
                    82:a3:55:f4:8c:6e:41:37:43:0e:ea:b2:41:86:5f:
                    64:3c:df:a0:49:26:7e:d0:5c:16:cf:8b:04:f3:5e:
                    12:c2:10:d2:bc:fc:0c:c4:ca:1e:17:2f:87:c4:f0:
                    8e:5f:8c:03:38:f5:46:f3:bc:0d:22:5f:f5:8a:db:
                    74:1e:75:45:04:26:df:ef:9d:07:af:7a:01:f5:1e:
                    cd:ca:03:b1:68:6b:b0:47:8a:ea:93:87:de:60:2f:
                    a1:9e:f2:40:ec:cc:e2:02:96:29:c0:11:b4:7c:81:
                    ff:6a:95:41:16:59:cb:45:f8:5f:7a:a2:b2:1c:cc:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B5:8C:92:73:62:EC:62:E5:92:30:3F:1C:E6:61:10:D8:51:03:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/016f1626-329e-31f3-b4c1-e93d91061cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl

            X509v3 Authority Key Identifier:
                keyid:9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f635::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:da:14:c1:2e:cb:e6:fc:1d:df:b1:59:94:6f:ba:47:46:
         e7:c0:ac:a3:b3:1b:b9:76:eb:a7:9b:fc:29:fd:5c:4a:f1:e8:
         fb:ee:e3:0b:f2:e8:52:23:b5:23:4e:d1:f7:b9:4d:29:d9:be:
         f7:6d:22:c1:fd:99:18:43:e7:fb:e4:a6:4c:3d:e4:a6:b0:2f:
         42:0b:68:88:08:7e:07:f3:eb:59:59:47:f3:e4:7a:b9:e3:fa:
         4b:26:eb:e2:55:0c:36:19:8b:6f:c6:b6:d2:ee:13:ec:25:0d:
         c5:24:fa:d6:da:46:3c:db:60:db:18:46:67:f5:d1:8b:24:9f:
         fa:a8:5c:51:95:19:44:1a:e1:7f:9d:58:b7:4d:7c:91:a5:f7:
         c5:16:65:87:46:74:72:fc:73:57:9a:8f:db:46:47:f5:75:98:
         a8:aa:49:99:a0:03:09:bc:58:48:9f:4b:d5:38:51:c6:58:aa:
         d5:8c:a1:6e:2b:9c:6f:8d:8b:6a:c7:ac:f6:6f:8b:3e:ec:42:
         86:60:d4:54:8f:f4:81:4d:9e:19:56:8a:e4:b2:49:a4:3e:71:
         06:5b:7b:30:15:7b:92:8a:8f:cd:28:37:fd:7d:e9:e1:49:87:
         0e:94:e4:f6:73:ad:57:6e:5f:6b:7a:fe:a8:ba:7f:b5:12:e8:
         f5:e1:65:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:10 2026 by rpki-client