Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdbdd7b0-38cf-362a-b537-168777848d4d.roa
File:                     fdbdd7b0-38cf-362a-b537-168777848d4d.roa (raw, json)
Hash identifier:          Gl1zTGOdYzSFCbatNq1wiaA5cKdXBlmCgSpbTvfQwZs=
Subject key identifier:   C4:33:EB:79:8B:38:36:EA:67:7E:04:88:C7:12:C4:A8:BE:24:F6:39
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F4328584D40CA49E3B00F08EFFDCAA880
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdbdd7b0-38cf-362a-b537-168777848d4d.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     26968
IP address blocks:        2602:ff93:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:49:e3:b0:0f:08:ef:fd:ca:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=c21cb110-8a2d-4139-a298-cbc9bb2c7786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:bb:b6:dc:ba:f3:c3:9f:b4:3a:de:b7:29:
                    63:11:07:3a:7c:ca:87:38:32:9b:56:24:81:39:14:
                    de:b2:2c:d0:ca:3f:b4:3f:9b:c0:07:6f:d3:ad:5f:
                    8a:48:fc:5d:01:ab:01:23:f4:10:b7:4f:f7:1e:b3:
                    06:ca:3a:ce:c9:0b:60:08:4d:a3:63:3a:74:51:e0:
                    a0:1c:18:87:4b:d2:7d:56:9b:ec:a9:8f:71:c3:37:
                    9a:b9:57:e5:b7:5c:f9:bb:f8:94:12:a7:a8:64:56:
                    ab:86:da:b1:02:b1:1b:c5:7c:23:2d:6d:ca:fd:2c:
                    d0:d7:5a:bd:2e:c7:11:b2:58:99:aa:0c:06:95:e2:
                    73:c4:c1:0c:cc:0a:94:de:c4:14:c2:db:b2:18:07:
                    a4:02:a9:53:79:40:2e:e0:1c:50:37:f2:a8:85:15:
                    1e:b0:42:27:e8:13:a7:b7:53:d1:83:a2:e3:74:25:
                    91:75:8a:3b:e8:74:f3:60:08:50:54:ca:8a:ea:30:
                    ff:5d:10:e6:68:f3:68:b7:11:c4:22:43:d6:f1:8f:
                    e4:64:ef:9a:2a:fd:f9:83:85:ac:44:a5:5a:50:db:
                    1e:3f:07:63:ff:29:f1:1d:83:4c:c1:ba:9a:90:86:
                    24:5d:7f:a6:62:1a:7a:24:e9:4f:13:ac:9f:3d:83:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:EB:79:8B:38:36:EA:67:7E:04:88:C7:12:C4:A8:BE:24:F6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdbdd7b0-38cf-362a-b537-168777848d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff93:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:3e:d2:fb:80:f3:e5:3d:f9:d9:99:81:d0:ec:a7:44:03:
         ef:ec:c0:95:33:0e:dd:4a:21:d1:82:bd:ad:00:6e:ba:97:7f:
         a9:c2:d6:6c:30:b0:57:a3:9a:4c:ad:d6:c6:85:54:c7:72:05:
         64:78:7f:35:d7:a4:6e:e3:d6:fc:46:76:ed:91:d5:5b:49:f1:
         64:e9:40:76:e6:a0:b3:ec:22:5c:ba:d0:e0:5e:97:32:1a:fb:
         3b:e6:17:8d:36:b8:a4:80:77:b2:7a:db:a6:f2:82:41:ba:5c:
         29:de:3e:ba:b4:10:11:de:22:a4:86:db:05:dc:f7:7a:53:5e:
         f5:03:3b:58:24:ec:48:59:5c:9b:81:5e:54:57:5a:d4:31:4f:
         bd:3e:9c:a1:cc:71:97:1f:92:e3:4a:5c:03:e1:2f:77:e9:10:
         b7:1b:bb:76:0d:a7:69:90:ea:56:ee:7c:a8:0c:6b:25:96:34:
         29:2f:fb:46:c4:7f:c8:2a:4d:c8:fe:be:ee:50:84:45:08:ad:
         2f:8c:62:08:7c:a8:3c:0b:34:f9:96:80:70:f5:c7:03:c7:d1:
         60:32:3d:14:57:38:a6:9e:cb:5e:60:9a:a2:9f:f5:35:fe:db:
         18:25:45:5c:58:bd:f3:87:47:f0:e9:a9:48:70:ec:94:04:b7:
         b0:f3:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:27 2026 by rpki-client