Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/6b1893ff-373c-3edb-9d0a-94649a56ee7a.roa
File:                     6b1893ff-373c-3edb-9d0a-94649a56ee7a.roa (raw, json)
Hash identifier:          RhkCY0UfvDAUSRd9OqiIXAJtpew8r+0nBhOmPrBMXQA=
Subject key identifier:   66:1A:AB:DA:1C:02:7F:B9:8E:59:1D:6C:D5:78:63:B9:D4:01:7D:73
Certificate issuer:       /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304
Certificate serial:       010D0C9F4328584D55BA375D2E6335947D71D158
Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/6b1893ff-373c-3edb-9d0a-94649a56ee7a.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     203062
IP address blocks:        2602:f650::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:37:5d:2e:63:35:94:7d:71:d1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=d06c3eea-9db0-457b-adfd-73a95f2447af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:f2:dc:c4:ac:56:0b:1e:a0:8c:27:fe:88:
                    a3:b6:36:bb:6c:08:b2:6b:1f:81:1e:03:79:95:08:
                    83:60:c1:e9:b6:c0:9a:f0:39:21:24:53:c6:86:7d:
                    f1:fe:71:be:b5:8f:6c:24:34:d7:43:a5:85:c6:0e:
                    0c:29:00:ca:4d:b2:2b:56:9b:8e:69:fc:14:b8:36:
                    da:4d:69:51:16:d8:a7:b8:0f:e7:dc:5e:2a:83:12:
                    35:68:a4:82:9a:29:82:68:3f:cb:22:20:ed:d9:95:
                    e2:c0:5e:67:5a:4e:96:86:ca:3b:66:1f:ba:4b:a9:
                    e3:1f:25:eb:b5:90:54:3c:de:b4:e3:47:20:24:24:
                    5b:2c:f8:c9:c9:48:5e:6e:aa:1c:a9:ac:99:0b:bc:
                    2b:b0:e8:3b:b6:de:fb:2b:de:b5:e8:fe:eb:69:34:
                    78:1e:b8:a0:b6:35:f3:ad:5e:ad:d5:ec:2d:df:b3:
                    31:40:9c:7f:72:c0:a0:af:de:41:e2:29:a4:d9:c7:
                    07:62:4f:a6:de:ba:58:34:f0:40:7a:b7:b5:22:39:
                    34:7a:17:78:bd:1c:ea:9d:28:8b:23:10:06:2e:09:
                    ca:a4:b6:4e:99:2b:d1:15:b5:47:d4:9d:90:ba:6f:
                    04:cf:84:d5:02:56:df:2e:2a:4f:25:26:fb:9a:56:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1A:AB:DA:1C:02:7F:B9:8E:59:1D:6C:D5:78:63:B9:D4:01:7D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/6b1893ff-373c-3edb-9d0a-94649a56ee7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl

            X509v3 Authority Key Identifier:
                keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f650::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:49:35:0e:1a:51:33:ed:30:98:7d:89:f6:1c:e2:84:43:
         17:cc:5f:dd:00:25:b7:8c:67:35:38:7c:3b:aa:b9:a5:8e:e5:
         ac:74:c4:16:14:42:73:27:02:47:92:5e:aa:21:69:58:f3:c5:
         9c:5a:32:4e:fd:87:b5:db:90:ea:ae:1c:a9:c9:df:2f:1b:9f:
         6a:b8:f3:80:48:df:13:c2:e9:db:d2:3b:f2:1c:69:31:a0:b2:
         45:fb:16:bd:a9:2e:26:41:53:59:20:64:06:e6:ec:39:52:e2:
         2a:c1:f5:e7:2d:50:9f:7b:64:0c:41:ca:36:12:56:37:dc:05:
         b5:05:b7:b9:39:de:c0:b4:16:a8:b3:c2:f0:22:54:c2:7f:8e:
         87:85:7d:95:43:75:f9:41:4f:e0:b3:c1:f2:36:24:f4:3a:ee:
         25:28:45:a2:ff:ff:9c:f4:31:1e:a5:18:47:e5:26:f7:61:85:
         41:2a:db:14:2a:af:cb:16:1d:2e:38:e7:bd:4f:6f:4b:7b:b9:
         58:26:34:95:bb:86:9e:1a:f2:c5:78:e2:f1:a3:f8:41:bc:c6:
         6f:a7:48:0a:09:13:13:d1:c7:57:d2:16:24:38:2b:b1:a9:a8:
         b9:af:99:04:54:4a:3b:90:53:fe:84:3b:b4:81:e8:d5:ab:a4:
         3e:35:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:27 2026 by rpki-client