Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa
File:                     97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa (raw, json)
Hash identifier:          oi/E/JklWGBlbD+bT24GC+DlJe53eo+QTzFwVyOK4zo=
Subject key identifier:   1E:67:41:4B:A0:F7:5D:FB:F6:54:D1:39:39:86:73:86:19:58:88:B2
Certificate issuer:       /CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
Certificate serial:       010D0C9F4328584D3F64D59277E3F39632B98700
Authority key identifier: D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     400799
IP address blocks:        2602:fb07::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d5:92:77:e3:f3:96:32:b9:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=e9215c7b-8223-424f-afe9-948ef557a67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:14:12:26:ad:1b:3f:a2:e7:c7:dc:87:75:
                    ea:7f:fc:c0:71:be:aa:37:d1:f7:da:a6:28:d8:7f:
                    76:3b:1f:bf:64:b0:af:58:24:ae:0c:c0:70:4e:39:
                    20:dd:9d:a3:ef:1e:1d:8b:8b:6f:03:46:f8:bc:ed:
                    68:d3:ce:42:fd:68:5b:6a:93:96:d1:e0:89:78:d5:
                    cb:3f:2b:db:d4:f6:39:be:26:26:ce:49:42:56:79:
                    3c:29:9f:37:c9:13:f4:a9:fb:70:c9:fa:da:b1:1d:
                    02:cd:ee:8e:51:27:27:62:2b:dc:46:82:87:36:f5:
                    4b:30:10:53:e9:05:be:a7:17:8a:c1:e3:06:e9:bd:
                    b4:e9:0c:6b:d7:5a:7b:df:ba:8f:6f:c6:cb:9a:42:
                    d9:91:ea:25:cf:0e:b5:8d:bb:22:84:9a:e7:75:1f:
                    12:7d:54:5c:0a:58:c1:85:64:97:84:5d:a1:f7:b4:
                    98:93:90:13:87:ca:e4:bb:fb:26:f3:60:cd:66:1d:
                    8b:95:b0:17:21:98:a4:e6:ae:48:0d:93:9e:a2:4f:
                    34:9a:b6:69:37:37:d2:e8:d2:24:71:40:df:fa:8b:
                    05:dd:49:55:9a:28:6d:77:35:81:21:ab:fc:03:5c:
                    e1:23:b4:f1:86:ef:73:17:26:aa:85:42:42:27:45:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:67:41:4B:A0:F7:5D:FB:F6:54:D1:39:39:86:73:86:19:58:88:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl

            X509v3 Authority Key Identifier:
                keyid:D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb07::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:b4:ad:d3:0c:a2:61:8c:dc:bd:32:69:0b:25:f9:bc:38:
         f1:8c:16:00:47:a4:fd:bf:6a:a4:ec:d1:bd:bd:36:ae:58:28:
         ef:0c:1c:34:8b:5d:79:b7:06:6d:41:b2:ac:d6:74:b6:69:eb:
         b5:27:fa:6a:d1:09:97:d8:d8:69:3d:5d:27:72:df:06:3b:7c:
         6f:7b:1c:0d:84:c1:88:af:18:56:d6:23:31:ce:90:60:a1:ed:
         30:c8:5f:8b:88:e3:d8:f2:e9:bf:ef:4b:14:1b:13:a2:7f:2d:
         eb:6e:8c:7f:a2:75:3e:86:8c:f4:fc:c7:48:2b:5c:77:3f:7e:
         5a:38:3f:2d:9a:bd:87:06:0e:6b:fa:e1:eb:81:74:95:a9:0e:
         92:9c:87:90:a1:a1:54:37:a8:98:f7:aa:55:9f:87:ec:d6:04:
         33:2d:52:ca:54:6a:8a:47:be:a3:ea:54:66:6c:7d:09:06:5a:
         09:fd:cb:17:46:7f:fb:55:bd:5c:68:28:00:47:b0:82:4b:95:
         04:78:c1:5a:4c:4d:3e:b5:5e:15:4e:d2:e1:54:20:be:98:fa:
         ff:bb:a4:4f:06:c7:07:b3:a1:c1:a3:55:70:97:1a:46:f2:ba:
         cc:7d:68:c7:96:64:35:92:c9:8c:b8:ad:c7:0a:a8:2e:98:89:
         5f:eb:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:07 2026 by rpki-client