Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa
File:                     d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa (raw, json)
Hash identifier:          HN+6sq1cd4H1qClHhf+HVz5GbaGtctbDB/1zT78o6+I=
Subject key identifier:   E9:12:43:56:4F:64:D7:9D:86:7F:4F:21:84:35:47:10:56:53:93:4F
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328584CCE720E6B6479BA7F4C2A2160
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     398032
IP address blocks:        2620:1d8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:72:0e:6b:64:79:ba:7f:4c:2a:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=38632f85-8e14-4419-bbd6-b4f8db23635c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:6e:1e:c3:86:bd:b7:a8:5e:c6:07:ca:f4:
                    3b:14:8a:7f:37:2e:5d:27:99:a2:d8:a8:24:b6:fc:
                    5c:2b:23:2e:4f:22:45:b4:61:10:f0:7d:d9:cf:ed:
                    6b:f4:7c:41:94:e9:60:3c:15:d7:f3:f1:91:a9:fd:
                    8e:47:c8:71:5c:14:ed:0d:e5:09:66:40:6f:1a:14:
                    0f:02:2e:27:35:75:06:7b:e9:7b:b6:85:d5:fe:55:
                    9d:26:aa:3b:77:89:64:44:57:00:13:ef:89:8a:fa:
                    b7:97:2d:2c:80:76:d4:96:f4:65:10:ab:d6:b9:3a:
                    a0:87:3e:55:da:de:fc:56:8d:2b:0f:78:e0:44:ad:
                    b0:50:d6:31:22:b6:24:ef:e0:40:79:e2:36:48:b1:
                    d1:ea:ed:8e:23:e2:8f:75:4f:27:81:4c:80:d2:85:
                    3d:87:d4:2d:8c:35:28:44:1c:c6:8a:1d:59:57:4f:
                    0a:53:76:03:d2:bd:9b:20:d7:f5:f7:cf:92:fb:85:
                    02:18:b9:49:d1:9d:8e:4a:2b:8b:61:f5:e7:75:35:
                    98:b8:96:25:78:17:85:fc:f9:ff:4b:7d:50:ff:fb:
                    8f:6f:b1:3d:82:16:1d:f9:56:24:e7:85:d4:d4:59:
                    6f:dd:6e:f2:4c:48:0b:c5:7c:21:ba:0e:2b:16:36:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:43:56:4F:64:D7:9D:86:7F:4F:21:84:35:47:10:56:53:93:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:36:ed:e6:1d:72:50:c7:63:59:33:20:a7:17:65:a5:1c:
         29:d9:b3:c1:5a:13:d6:c6:d3:29:64:a7:4d:81:89:e7:b0:e7:
         d0:cd:56:77:6c:ff:ca:82:04:41:25:c2:e7:9c:70:ea:e3:5a:
         4c:ac:e0:e6:6b:02:c9:9e:4b:2e:c7:60:43:b4:32:1b:a0:a9:
         24:da:a0:bd:f8:a0:07:52:d7:fa:30:80:33:bd:44:8d:7a:f6:
         e7:39:c1:2e:46:c9:17:ed:85:97:17:91:80:9a:02:e2:35:4c:
         a0:7e:f9:ed:36:25:45:8a:e4:6b:95:d5:9f:76:07:fd:07:fb:
         c1:4e:05:03:df:07:45:d3:bf:f2:9e:56:fa:b7:b1:c2:75:ee:
         c7:fc:c8:0a:ba:fc:00:f9:33:64:e8:ee:45:27:49:f5:95:66:
         89:70:a7:19:70:4e:99:21:da:d2:09:09:ab:c3:3f:62:46:82:
         6d:d2:25:cd:da:48:d1:e9:32:2d:e1:02:4d:64:b3:51:dc:b3:
         47:02:22:cd:58:33:4a:89:b4:8f:8d:7b:ec:60:e8:42:bb:0b:
         9c:23:ed:01:02:56:18:7d:18:65:f5:51:d7:c7:e9:13:85:63:
         14:da:58:cc:0b:3f:95:ed:c6:c8:ef:1d:79:15:20:86:ac:63:
         0d:36:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:01 2026 by rpki-client