Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
File:                     11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa (raw, json)
Hash identifier:          Fj40c+pkNUwX/nhD4uB5ssTphykbyeZuntb3mXxYgC0=
Subject key identifier:   C5:44:E1:C9:7C:7A:EE:CC:51:FE:C2:D8:A1:A1:84:74:ED:B0:14:E9
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584D32D4D7624E8D57DD5F80F480
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     397384
IP address blocks:        2602:fc53:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d7:62:4e:8d:57:dd:5f:80:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=8abbbba6-f9be-4c5f-80fe-68c00494bba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:d8:e2:81:a0:70:a5:44:55:35:78:77:a1:
                    57:34:e5:50:11:db:4f:fa:97:2f:14:d3:cf:8a:c5:
                    b2:96:51:f2:db:10:10:35:fb:4b:a3:ce:20:42:47:
                    d8:86:9a:07:b7:f8:eb:dd:bd:82:59:bf:d2:a3:91:
                    50:d8:94:6e:d8:71:dc:19:3c:41:fa:7e:46:98:68:
                    c6:ad:2d:b4:c8:1d:f4:08:a6:a0:d6:b0:99:99:f9:
                    95:ac:81:6e:37:b0:7a:96:a3:ff:eb:70:e6:35:87:
                    26:54:fe:4c:bc:63:48:f2:ee:c2:5c:c7:c4:21:a3:
                    25:44:09:79:58:b7:bd:ab:52:e0:8f:99:0f:e4:69:
                    72:5a:ac:51:8b:54:a9:90:93:e6:a2:77:98:43:1a:
                    ca:5e:e5:5d:19:a2:e8:20:3d:9b:3b:9e:ba:dd:27:
                    6f:67:71:22:13:44:0f:ca:ab:49:b2:e1:75:5a:a5:
                    87:07:d6:b5:d1:28:fd:4d:01:cb:6d:6d:45:4e:18:
                    ca:78:02:c3:87:5b:20:da:af:d8:10:b3:19:b7:0d:
                    3e:44:c0:c4:e9:50:7e:f9:3e:cb:d1:f7:fc:fd:86:
                    07:10:e5:52:30:d9:99:a3:18:eb:d6:1e:00:85:32:
                    52:67:02:4f:24:ad:a4:7f:28:ff:35:96:b7:81:da:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:44:E1:C9:7C:7A:EE:CC:51:FE:C2:D8:A1:A1:84:74:ED:B0:14:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc53:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:99:84:6b:bf:78:f8:47:99:46:2e:c8:de:9b:c4:f8:ba:3d:
         67:d9:91:bf:11:8e:b4:13:d3:25:af:59:bd:da:03:81:d6:58:
         3d:1a:21:a2:bf:81:6f:e1:93:1b:01:e6:5f:70:0f:4d:8c:f4:
         ba:db:a7:0d:b4:58:8c:33:ab:f0:4b:22:5e:88:05:84:63:1e:
         20:5a:fd:f5:82:16:1c:2e:68:be:7e:a1:22:1c:19:de:30:4d:
         55:d6:34:2a:37:54:2b:94:47:53:54:50:e4:46:d5:13:36:a2:
         59:86:8a:af:3c:78:eb:fb:7a:e4:0a:a7:e9:05:7e:cf:2a:fa:
         32:57:44:e3:8b:5e:8c:4b:6b:84:6a:8e:55:1f:99:fd:2f:d0:
         5b:8a:15:c1:cf:1f:d0:4c:a7:c3:25:18:b7:2f:1d:c8:01:44:
         43:0b:3e:25:27:7b:70:df:9f:f2:d4:3f:39:8a:7e:42:c2:84:
         5c:57:3b:40:98:6e:e4:e2:3e:17:d1:e6:18:a5:fb:86:88:fb:
         03:41:92:2c:58:56:d5:da:85:39:4b:52:cb:e2:9c:bb:e7:88:
         a9:f2:60:a9:7d:27:39:11:25:46:b2:37:62:7b:eb:97:c6:db:
         9a:5c:da:79:73:e1:20:f3:2c:51:32:fa:7e:dd:f2:46:71:a7:
         22:d3:af:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:07 2026 by rpki-client