Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/590e1a00-70cd-3b97-9411-2d2ded29202e.roa
File:                     590e1a00-70cd-3b97-9411-2d2ded29202e.roa (raw, json)
Hash identifier:          y9Ycm2aKZYljkdCkSwbvlTaxMsO/nvl/RKj5J26Nln4=
Subject key identifier:   14:D6:65:26:35:FA:94:24:BD:3A:BC:A5:4F:40:A0:B3:6E:15:93:D0
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584D59EA6E69B96B6D06435015A0
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/590e1a00-70cd-3b97-9411-2d2ded29202e.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     54613
IP address blocks:        2602:fd9a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6e:69:b9:6b:6d:06:43:50:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=c6552eb8-81cb-4e31-9813-cf0c8541e288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5e:3a:8c:4d:bb:ec:5d:60:3b:44:7e:b2:d1:
                    e2:8b:57:f8:42:1f:8a:a0:87:fd:d9:6a:cc:4e:7b:
                    a9:85:ad:58:89:ca:fb:6c:c0:ab:cb:27:e0:62:74:
                    50:63:85:55:96:4f:d6:d5:7a:3e:7d:07:11:eb:84:
                    02:a6:32:79:9f:e7:c0:e6:d1:33:e4:89:49:d7:c4:
                    e4:06:53:92:ff:90:bc:ed:64:f9:a1:63:c1:c2:5d:
                    7a:d3:0e:30:03:a5:7b:4c:0c:a6:17:60:63:36:cc:
                    21:a5:67:48:90:64:8d:d5:30:85:3b:04:85:56:b3:
                    03:b2:de:6e:32:23:a9:3f:78:87:0e:68:52:54:98:
                    09:e6:c2:df:66:70:73:7a:6f:81:e6:47:be:c2:1d:
                    3c:81:25:ad:e5:73:46:46:75:e2:34:d7:de:dd:9a:
                    a9:a3:13:e1:37:56:48:8e:36:97:e3:b0:e7:e3:e3:
                    b8:f7:c5:b1:a1:a7:28:ef:81:81:3e:87:e7:5c:83:
                    ad:ed:19:d7:35:db:69:34:7d:a2:03:d9:50:c0:21:
                    e2:a2:ac:78:4c:4c:b6:1a:1a:4e:0f:6f:f2:3b:d6:
                    ad:4c:e2:b8:80:15:c5:7d:c5:37:76:b4:c7:09:01:
                    99:a5:9e:3d:47:c3:28:f0:ea:a3:00:f0:87:e8:4e:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D6:65:26:35:FA:94:24:BD:3A:BC:A5:4F:40:A0:B3:6E:15:93:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/590e1a00-70cd-3b97-9411-2d2ded29202e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:85:42:2d:5e:80:d0:a8:90:4a:8d:9c:30:8a:6c:fa:7f:8e:
         ae:98:48:39:a8:8a:f5:5b:98:f5:b0:a1:b0:d2:f0:c5:88:ba:
         02:1f:27:81:6f:e7:60:02:8d:41:41:ef:5e:81:00:2f:2d:9a:
         46:b6:9d:5a:ba:24:cf:a2:29:5e:6b:99:06:da:57:6f:07:5c:
         c2:27:b7:0d:81:8f:d0:94:eb:26:34:4c:53:6b:7a:f4:72:0e:
         0a:d3:ad:53:c9:88:43:24:92:f4:ec:ea:77:22:30:80:ed:ee:
         fc:cb:c6:9d:f2:94:78:28:4f:53:ab:0d:9e:11:17:1a:b5:ac:
         04:53:1f:30:a8:3f:12:57:b1:7b:28:4d:d2:dd:55:16:a7:72:
         5a:1a:8f:b8:fc:da:4d:6a:c6:6e:b5:4d:09:a7:f0:1e:fb:68:
         4b:cb:68:2e:13:e9:f7:47:a9:c1:e7:19:62:a4:b0:74:d2:61:
         ff:1c:d7:ce:3b:84:37:50:ac:f5:b5:5f:13:e6:fd:2e:a7:7e:
         49:1d:50:15:40:f0:8e:6f:d2:b3:8f:7d:62:2e:50:4d:78:73:
         d0:ca:af:aa:15:57:34:12:1c:c4:8d:53:61:32:3f:72:b3:6f:
         a2:16:9f:0b:57:ef:3c:04:36:35:68:9b:f9:3d:61:b9:89:cc:
         b2:01:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:52 2026 by rpki-client