Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
File:                     298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa (raw, json)
Hash identifier:          uxC3SNNzfEZ8S+qFpbBCAjRwBArIcAszaaULVNpp2JY=
Subject key identifier:   0D:5C:24:90:7C:BF:0E:CC:ED:F6:88:55:1F:A3:4A:0F:3D:D7:1A:B8
Certificate issuer:       /CN=29dfb106-65b1-4e83-81d9-8b97730bd706
Certificate serial:       010D0C9F4328584D300A65D4F537EB92728A2280
Authority key identifier: 34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     14333
IP address blocks:        2602:f793:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:65:d4:f5:37:eb:92:72:8a:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29dfb106-65b1-4e83-81d9-8b97730bd706
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=0c7a6a2d-7aef-485d-85b9-1ec8f901d6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:91:74:ab:5e:7d:cd:fb:8f:f3:d3:5d:52:
                    fd:e3:63:e9:70:c2:ea:fb:0e:eb:1b:ac:8e:f7:2d:
                    8d:1e:92:f6:6a:26:c6:56:a0:38:8c:ee:db:30:c4:
                    08:64:0b:da:cf:53:ef:e0:e6:c7:e8:22:22:4b:c2:
                    e1:c0:02:47:60:6e:25:5d:33:14:cc:85:4f:94:88:
                    f6:44:fb:86:e6:6a:b7:29:ff:86:df:6d:73:35:24:
                    20:1f:e7:54:10:3e:c1:8c:1c:eb:95:6a:86:7b:cf:
                    08:1c:48:31:e9:21:ae:cf:00:03:e4:80:f3:84:56:
                    ae:b4:5a:53:b9:5d:ee:59:38:2f:8d:04:f5:10:2b:
                    af:16:17:21:2d:f5:16:64:05:9e:58:91:fb:e3:02:
                    16:c0:02:d5:59:a1:47:9c:b3:14:6e:cb:4f:cb:43:
                    8c:d3:5e:39:f2:de:ff:30:be:96:8b:0e:f6:1e:de:
                    19:4d:1e:3b:ac:cf:fe:41:6c:a1:96:cb:7d:f3:e9:
                    6c:0e:d5:a4:01:f9:c4:dd:77:d6:1e:59:4d:5d:6d:
                    13:83:e5:13:67:7a:89:7d:a0:8a:02:13:ac:8f:8e:
                    e8:ae:b1:47:df:51:2d:fa:59:77:9e:b7:da:97:51:
                    0f:22:f7:8e:5a:cf:37:4a:19:c0:6f:be:b3:08:e8:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:24:90:7C:BF:0E:CC:ED:F6:88:55:1F:A3:4A:0F:3D:D7:1A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl

            X509v3 Authority Key Identifier:
                keyid:34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f793:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:41:21:0c:5d:f5:66:41:e1:24:12:b5:4c:4e:f0:93:18:bc:
         3e:86:ff:f9:ef:10:2a:d7:e2:1b:25:84:dd:9a:00:27:03:38:
         ad:ac:9b:85:c0:47:39:2e:4a:e7:7e:34:cd:89:8f:89:82:fa:
         c7:e3:73:c4:7e:4f:85:cb:3a:e1:0e:d9:e6:4a:4e:99:9c:19:
         2c:2a:01:64:f6:e5:64:98:8e:75:b7:b0:50:d0:70:f1:3a:8d:
         5a:91:bc:07:0d:26:ba:4a:ed:db:b2:c5:db:62:fc:43:d4:b4:
         c6:8a:46:29:c3:25:ee:7f:2b:9b:95:18:64:82:b8:f8:4c:18:
         e3:9b:b1:a8:70:44:03:d6:76:1d:dc:ff:35:e9:78:18:3d:f2:
         71:42:34:a3:e7:45:cc:8e:e0:90:98:23:76:7a:11:b4:44:07:
         9a:25:30:c5:4e:25:64:b0:a3:1e:8a:45:80:7e:be:a4:b2:d9:
         1c:1f:8b:0f:07:56:89:27:e1:37:c2:d8:4e:aa:b4:de:6a:f6:
         eb:ef:9d:bf:ee:6d:fd:4d:df:8e:a7:0f:8c:ab:2f:5f:19:67:
         fd:b9:a3:9b:da:fa:e9:64:78:c2:cb:1e:ee:1b:19:43:49:da:
         92:b0:d3:f2:12:25:36:2a:e1:e4:ef:e3:8c:81:05:98:6a:46:
         fc:35:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:53 2026 by rpki-client