Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa
File:                     2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa (raw, json)
Hash identifier:          Bc5wda1laxVz4nZPCGPn4wwze1t0wISD58sS9+phvqg=
Subject key identifier:   29:29:99:65:F1:F1:35:D2:4B:48:4E:27:1B:32:CA:28:3E:91:E2:F3
Certificate issuer:       /CN=42eee53c-f373-4efe-aed3-4c501c9dde78
Certificate serial:       010D0C9F4328584D571FB8DE143F7BABA5D4E100
Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     401474
IP address blocks:        2602:f7a9::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b8:de:14:3f:7b:ab:a5:d4:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=8a475fb1-9ab7-4036-a165-2870ebdfab47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:3a:99:cc:1c:df:3d:b3:0e:6a:8b:e9:b8:
                    6c:4a:07:bd:d1:a1:f4:44:1e:86:ce:31:fe:ea:ca:
                    53:4d:b4:0e:85:7b:1d:b9:27:a2:03:83:a5:2c:b1:
                    2a:94:1e:3f:78:e1:38:27:54:cf:7e:f1:29:66:f5:
                    9b:72:ee:04:cb:8b:c7:3e:07:2e:77:24:83:81:e5:
                    dc:2d:7a:15:c1:00:5b:bf:dc:c5:03:0e:b3:57:af:
                    77:0f:05:34:45:4d:1d:6d:c3:18:7d:c2:d9:e4:46:
                    e8:bc:03:36:ce:13:48:73:6e:21:6a:4c:7b:3a:d8:
                    8c:66:ea:48:00:d9:35:82:b0:99:12:d0:c5:38:3d:
                    75:46:55:37:e2:5e:a1:22:f0:99:6d:2f:14:3f:6c:
                    3f:62:ad:00:be:51:28:d0:c6:6f:ef:0b:ad:12:7f:
                    78:7f:45:de:7a:4b:3d:d4:34:f3:8c:01:5f:f3:fa:
                    72:0f:bd:c7:11:48:08:78:b4:68:f7:c1:91:cf:dc:
                    5b:2a:f8:33:8c:2d:ea:57:5f:ff:84:d5:f8:a6:18:
                    d5:98:13:c7:18:95:d0:43:bd:f4:e0:4c:d9:88:19:
                    26:5a:59:3d:24:4b:25:05:56:61:f7:d4:fc:73:8b:
                    96:c2:9b:22:c9:4a:51:29:c9:74:13:5a:9a:09:69:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:99:65:F1:F1:35:D2:4B:48:4E:27:1B:32:CA:28:3E:91:E2:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:bb:c6:8d:d5:6d:f4:7d:c6:9f:2c:52:88:92:76:e3:c1:9b:
         95:f3:e7:8e:a3:62:9e:2e:f2:3b:03:bc:cf:75:4c:e8:07:3f:
         3d:ef:0a:ca:43:28:4c:f7:e6:b6:7b:fc:3a:13:bf:0a:06:4a:
         c2:24:07:25:08:42:6e:3f:2d:85:74:23:5f:80:9d:3b:30:9f:
         67:ea:a0:b2:5e:64:c5:c2:f0:af:07:63:67:18:5d:b9:73:33:
         97:fe:a9:52:29:59:e5:2c:83:5a:61:c0:60:25:b3:ed:49:db:
         d2:9a:22:d9:50:1c:42:78:85:ed:30:28:c2:99:77:8b:65:dc:
         a7:51:ac:bb:65:73:83:98:c3:65:25:d7:df:00:e2:f5:02:cd:
         7b:2d:80:a1:08:fb:f9:dc:25:c8:d1:f6:ab:5d:fd:80:6c:49:
         d8:98:34:f2:44:9b:ef:50:34:08:d0:5b:76:44:d7:2f:ff:76:
         67:bc:08:1f:e0:27:f7:b9:e2:7e:ac:47:34:b2:3c:a3:f1:64:
         c5:51:20:30:27:bf:8c:f1:ea:ab:ab:85:2b:77:f2:c7:fd:01:
         ad:cd:25:70:c1:a0:12:1b:92:23:eb:18:47:5a:f6:db:6d:86:
         04:be:c0:90:8d:50:47:1f:6c:84:3d:81:17:ed:7d:8c:fc:67:
         d9:c1:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:05 2026 by rpki-client