Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/92331598-d584-3cd7-8e73-547519a64d4f.roa
File:                     92331598-d584-3cd7-8e73-547519a64d4f.roa (raw, json)
Hash identifier:          eN0Qa43CzXGagRRv8xwFQUgyDhbX17hM0xCCnD/FSbg=
Subject key identifier:   E9:43:EB:16:9F:C2:C2:A3:45:35:5E:BA:5A:D3:E4:9B:02:90:67:DD
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584D5F7FAE1AB13DFB835C879BD8
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/92331598-d584-3cd7-8e73-547519a64d4f.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     152117
IP address blocks:        2602:f69a:1::/48 maxlen: 48
                          2602:f69a:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:ae:1a:b1:3d:fb:83:5c:87:9b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=2b0076a1-5c11-48e5-91ac-afbc4cde4ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:58:3a:72:52:e0:ad:42:1d:a8:c4:bb:a0:
                    29:4e:c7:eb:1f:9a:0a:d5:86:84:14:5d:f9:8c:b5:
                    63:27:57:6f:1b:9a:9f:fd:73:b9:a8:e4:0c:4e:32:
                    4a:20:b2:04:be:3c:8a:e7:de:2c:45:93:09:e0:06:
                    82:17:d8:76:59:c2:19:74:78:90:c7:f1:de:67:2e:
                    68:12:6d:e5:4d:d9:32:2a:d7:71:0d:fe:24:55:0b:
                    1e:5b:26:12:5f:b8:c1:27:a8:f9:fa:74:4c:d6:a6:
                    87:af:34:88:a4:9d:2e:6d:62:06:ba:77:d2:f6:e0:
                    50:69:6d:77:b7:16:10:44:b0:1d:92:fa:d4:65:c2:
                    a6:51:cf:e6:24:ef:bf:76:3f:3d:49:87:dc:c1:d0:
                    a0:b1:d7:53:0c:de:3d:fc:40:ac:7d:ea:c5:89:4d:
                    0e:91:6b:1b:b3:56:a9:e9:5a:3d:fa:75:42:93:f0:
                    ce:ab:4f:13:a3:f6:10:99:b2:2a:d2:09:a4:79:d2:
                    e1:d7:ab:82:b5:32:6a:69:2e:94:db:66:f0:67:3c:
                    53:da:b5:58:04:57:3e:44:79:34:f0:b4:b7:cb:f5:
                    cb:ec:ec:ba:fd:4d:a8:59:94:b2:9d:e1:d6:1c:35:
                    c9:39:46:1b:8e:81:96:dd:de:38:f8:fb:07:b7:84:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:43:EB:16:9F:C2:C2:A3:45:35:5E:BA:5A:D3:E4:9B:02:90:67:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/92331598-d584-3cd7-8e73-547519a64d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:1::-2602:f69a:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:b3:ec:c3:43:54:dd:95:17:b8:0e:84:e3:d5:71:59:c2:
         c0:87:e9:de:25:02:9e:3b:d1:3f:35:d9:9c:3c:37:7e:c6:db:
         a0:d0:74:9b:90:20:32:3c:5a:c3:7d:c1:97:6f:5b:85:ef:31:
         23:0b:c4:37:1e:71:74:b7:00:59:e4:88:73:e3:36:f0:f6:18:
         9c:f8:d8:e3:9d:e8:49:a4:05:ae:ec:19:b9:e9:47:1c:f5:a6:
         8c:34:28:3e:3e:eb:81:05:26:d3:d1:cc:bb:1f:64:09:db:9b:
         e6:5c:1a:10:9f:c7:f9:0a:5a:fd:f0:6a:15:47:97:f7:39:e2:
         21:85:3c:d2:25:22:8a:5c:98:97:c4:f9:d8:36:ff:5a:58:f6:
         3e:43:5f:8c:b6:d1:e4:a8:a4:cd:75:74:19:a8:30:f4:a2:92:
         61:e3:37:ec:c3:7a:50:89:86:2f:7f:5c:30:44:ff:fc:c8:39:
         94:3d:d7:52:51:79:55:16:b1:df:f8:ab:f2:e1:fe:ff:b8:9b:
         ea:d0:94:61:5e:f6:8e:a4:e5:87:73:58:c8:93:17:c0:9b:5e:
         ab:1b:77:50:0c:0d:32:55:03:de:20:6c:e1:37:71:15:aa:b0:
         c9:28:21:df:da:02:3f:4b:b4:36:fd:7d:e5:4b:9a:73:5f:9a:
         1a:48:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:56 2026 by rpki-client