Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa
File:                     6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa (raw, json)
Hash identifier:          otooADWoNVzQxZjyTSeTJ+1Ud1MHIsfcHxZ40EO6YGU=
Subject key identifier:   EE:30:D4:ED:DE:A6:BE:23:88:EE:90:FB:87:5B:3C:2E:6F:43:B2:02
Certificate issuer:       /CN=2b52814e-343c-46a0-bf89-2e9064856503
Certificate serial:       010D0C9F4328584CB81C88CC4DB3C5A34EA5CE30
Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     393410
IP address blocks:        2602:f871::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:88:cc:4d:b3:c5:a3:4e:a5:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=f4158c22-1e7e-4354-92f8-b121b8e70475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:ce:35:2a:b6:35:17:6c:15:73:c7:d6:40:
                    71:c7:ae:85:c3:83:70:82:40:20:6d:45:f3:01:de:
                    b1:30:11:e2:d6:bf:36:dd:2e:a5:f2:c5:98:ae:56:
                    49:e1:18:c3:e6:24:e3:13:27:f6:9c:63:ba:f4:a7:
                    53:b5:6b:65:3f:34:89:a4:67:79:40:31:bf:2b:8f:
                    58:9d:4b:67:ca:a4:e3:2a:88:85:2c:d2:ae:81:48:
                    eb:bc:68:56:56:3c:ac:0f:ce:fc:7a:2a:f4:f7:37:
                    96:00:80:44:01:60:82:ba:ab:8f:e2:c4:27:56:be:
                    dc:06:f4:7e:95:47:69:f6:c0:0a:26:b8:14:a7:e4:
                    ae:f2:3c:db:40:cb:e3:a7:87:cc:97:46:0c:90:2e:
                    d6:19:a1:6f:20:bc:7b:ba:f7:99:53:0b:e6:56:ff:
                    02:74:ff:5b:b5:c8:f6:5e:38:3c:47:8b:53:ef:ad:
                    36:5b:09:5d:05:ce:3a:5a:6c:be:47:12:23:25:c4:
                    27:8d:c0:06:36:06:fc:b2:43:9e:d8:38:9a:19:a9:
                    4e:e2:bf:d6:f5:db:23:29:db:e9:e9:da:b8:19:db:
                    e3:bc:3b:c7:ed:3b:8e:9a:35:db:9a:4b:c7:e8:ea:
                    1c:c3:2a:60:09:e7:ee:42:e6:eb:2f:6c:2d:ee:53:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:30:D4:ED:DE:A6:BE:23:88:EE:90:FB:87:5B:3C:2E:6F:43:B2:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl

            X509v3 Authority Key Identifier:
                keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f871::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:be:64:9f:83:46:a9:c3:dd:eb:d6:c2:6d:8d:67:f1:4b:
         36:54:be:3e:c4:8e:17:84:11:6e:f7:30:b2:69:08:5d:5f:0b:
         c2:57:5e:66:dd:38:b1:d4:70:d0:46:12:8b:2f:86:8d:0d:0c:
         ff:74:3d:b6:6a:77:8d:b8:01:b2:9b:2f:bb:e2:a2:aa:da:dd:
         75:c8:bd:07:27:98:13:16:c8:b2:f1:9e:10:7b:f8:6a:1c:e3:
         b1:b4:8d:6e:ce:65:54:15:22:b6:c4:b4:59:50:73:6a:b7:e2:
         a0:6b:65:64:3d:1c:ec:bc:0a:36:2f:78:37:bb:60:7d:16:7f:
         82:20:7a:32:41:ac:fa:58:44:91:ca:a8:14:13:3e:af:22:c9:
         14:79:0e:70:e4:b5:67:91:40:80:36:8e:5a:d2:a2:5d:4a:37:
         b4:63:77:bc:8d:45:ee:73:d9:10:77:e0:b1:60:ae:7a:6a:19:
         d6:4a:d4:f2:13:41:13:42:d0:a8:4f:33:3d:32:bc:8c:a2:45:
         f4:25:57:4c:d3:e3:c2:e3:2c:13:b0:39:34:32:ac:23:8b:c4:
         e6:7a:6a:0b:42:91:1b:6f:05:a8:55:f1:17:e2:27:15:92:af:
         70:c2:17:9c:ed:f2:33:44:49:de:7f:ef:36:7f:d4:11:d7:cc:
         d2:34:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:50 2026 by rpki-client