Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/19d943a9-9882-3b09-9042-ffa328cee2a1.roa
File:                     19d943a9-9882-3b09-9042-ffa328cee2a1.roa (raw, json)
Hash identifier:          o4YPQb7n1jXpc+h/9e/7u3I0Dm5MROB8QLjzVcj7zYQ=
Subject key identifier:   69:64:7D:4D:01:3E:E3:08:00:B1:2A:20:8B:C6:C8:4F:AA:C8:B9:32
Certificate issuer:       /CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
Certificate serial:       010D0C9F4328584D55BA340DE21289BFB2853CC0
Authority key identifier: EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/19d943a9-9882-3b09-9042-ffa328cee2a1.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     29802
IP address blocks:        2602:f5b3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:34:0d:e2:12:89:bf:b2:85:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=79b41083-f11e-4e06-a983-f3fe43ee4eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:f1:bf:a0:d8:0b:c8:77:1c:bb:3f:b1:2c:
                    1c:27:90:7e:b0:d2:11:07:4f:08:b1:74:d2:bf:6e:
                    f0:75:9d:5e:cf:9c:e9:42:75:e1:d9:f6:17:7c:59:
                    1c:10:82:c5:ed:86:00:94:c6:48:09:41:b0:23:e5:
                    5e:2e:2c:a0:60:a9:44:e6:16:72:80:37:7f:b4:0e:
                    71:2b:1e:07:9d:f5:ae:30:f7:21:de:9f:91:85:6f:
                    dd:3a:eb:d5:72:a7:a0:5b:bf:9b:77:92:f7:fe:95:
                    0d:0b:9c:fe:90:7d:58:75:6e:87:59:99:62:67:9a:
                    00:e9:15:db:27:95:1b:44:a9:cc:62:ab:18:21:1a:
                    33:47:23:4e:96:81:9a:64:c4:1e:f1:75:9b:55:d1:
                    1d:54:cb:3d:ef:99:0d:d0:d1:5b:23:34:6e:05:1c:
                    3a:a9:b1:c9:58:40:1d:7e:0a:d6:72:12:74:fd:75:
                    d9:e2:f8:2e:2f:08:50:41:c1:99:37:d2:87:b2:77:
                    d6:37:2f:38:c8:2a:10:3b:0c:ec:a2:cd:b6:00:3c:
                    42:1c:11:fc:c4:10:2c:7f:45:cf:0f:0e:7d:7e:e9:
                    52:40:db:69:33:cb:84:02:c9:7c:33:41:ad:1f:89:
                    6a:5b:73:06:42:11:23:39:56:f4:fe:da:bb:a7:51:
                    b4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:64:7D:4D:01:3E:E3:08:00:B1:2A:20:8B:C6:C8:4F:AA:C8:B9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/19d943a9-9882-3b09-9042-ffa328cee2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:83:3c:7a:3c:6c:2b:28:99:36:02:2f:ec:2f:ad:aa:81:
         fd:eb:f4:67:eb:a1:47:da:eb:26:4b:3e:d9:14:73:f6:2f:41:
         06:f7:2b:49:7d:d4:38:f6:3d:4d:8a:e9:5c:04:2a:8d:41:a0:
         c6:0d:ff:0e:cb:86:52:90:a4:f4:27:dd:d7:2c:96:61:3b:ce:
         0a:0c:9d:e0:8b:cc:3d:01:2c:5d:62:cd:21:f8:df:14:32:c9:
         fd:32:1c:f2:4a:d9:ac:4d:83:ea:34:d5:16:97:bd:7e:e8:2b:
         39:65:b5:6c:d5:b7:aa:fe:be:7b:c1:13:4e:e7:05:05:64:2a:
         63:c2:1d:ac:12:24:51:dd:11:76:6b:44:60:e0:50:c0:77:47:
         af:cf:7b:36:06:e6:93:34:ef:c4:46:2d:61:c4:6b:a4:e2:21:
         18:50:df:e0:73:eb:de:ec:bb:92:c0:9c:8c:2c:00:68:f2:d3:
         fc:e3:0d:28:37:bb:3b:0d:22:35:59:36:c5:4e:90:0f:79:54:
         52:2c:ad:a5:22:ec:a2:0d:5f:e0:3e:55:9c:d1:7b:b5:85:0c:
         12:7c:3f:de:d6:6c:de:d5:1e:97:91:1b:31:a0:9b:3e:2e:5f:
         af:2c:5c:9b:0f:93:1c:33:b7:dc:e5:5b:3e:71:e3:5f:e5:82:
         02:3c:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:24 2026 by rpki-client