Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa
File:                     3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa (raw, json)
Hash identifier:          V18cZ+jH5CPwV79h1nX/RToL3LBKDSC1lQa3uaJC8jA=
Subject key identifier:   41:6E:26:3C:42:78:73:B8:83:D0:87:5A:38:00:A9:FA:46:A9:EF:06
Certificate issuer:       /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
Certificate serial:       010D0C9F4328584D3F64E66D9D52C53BE8C31200
Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     394346
IP address blocks:        2602:ff25::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e6:6d:9d:52:c5:3b:e8:c3:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=735085c1-7242-43f0-8cf4-fe933d09e3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:1f:fe:5c:53:ab:dc:36:df:1c:38:21:16:51:
                    05:42:a9:b7:20:2c:8b:3a:08:ea:69:49:1e:5e:23:
                    18:dd:8a:d4:aa:77:e8:28:07:b5:84:39:a2:1d:e3:
                    9f:15:73:b0:c0:68:a0:4c:f8:41:36:b3:39:ad:46:
                    c4:41:bf:8c:f3:7f:42:19:f5:96:6f:c6:9a:b0:15:
                    7e:a5:d8:c3:c6:b9:79:18:14:9d:8c:dd:47:84:0a:
                    09:9a:74:e8:c3:3e:20:27:a8:9f:c2:0f:e0:3b:46:
                    7d:86:a6:a3:6e:7e:56:ab:9e:31:52:78:09:c8:09:
                    39:0d:35:c4:57:91:f4:32:f1:00:64:fd:3c:71:48:
                    ff:86:d4:a3:db:9c:64:8e:15:12:9a:eb:50:cc:eb:
                    fc:18:b3:92:95:88:fb:3f:fb:88:f6:0f:0b:3a:14:
                    28:c3:00:bf:69:cb:be:2e:12:c5:a3:35:2c:ea:30:
                    5e:3d:ee:9b:e8:da:e1:e3:bd:72:f5:6f:2b:74:5d:
                    1d:93:b3:8b:b0:cc:56:ee:94:3d:57:eb:0d:b5:1d:
                    76:94:a2:e8:6b:77:38:f9:f4:04:48:2c:65:c5:6c:
                    f2:0b:57:d2:6e:06:d0:3d:e3:18:49:dc:1c:1d:69:
                    0d:ed:dd:ed:25:e1:7c:65:fe:0f:cb:71:4f:84:c4:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:26:3C:42:78:73:B8:83:D0:87:5A:38:00:A9:FA:46:A9:EF:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl

            X509v3 Authority Key Identifier:
                keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff25::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:81:3e:ba:39:7f:33:82:cc:73:86:55:c8:13:cb:e4:ec:67:
         3d:d4:12:6e:4a:28:4a:ec:7f:f3:7b:fb:ac:ad:c3:af:17:c6:
         c6:72:90:62:0a:2b:d3:44:35:6d:53:25:f4:d6:37:ba:71:0f:
         da:eb:0c:4c:ba:35:9a:d9:08:95:d1:31:11:2e:f5:5e:64:0f:
         3f:ae:f0:09:6b:ac:b0:b3:79:db:30:87:75:17:0d:2d:ba:cb:
         5d:63:56:23:39:df:00:36:09:69:63:dc:a4:57:22:80:38:33:
         5d:cb:73:45:51:02:4d:c3:bf:46:85:d7:e9:10:d2:77:d4:da:
         ba:f3:dc:e2:45:46:6f:fd:99:22:6b:a6:84:65:a1:b2:86:22:
         db:96:4e:a8:01:3b:90:06:c4:69:08:4f:8c:12:57:26:ad:31:
         02:3a:e7:e6:93:4c:a7:6f:a9:b6:2d:1f:f3:c5:5b:db:c7:6c:
         48:da:41:67:33:fb:5a:ac:ca:e1:18:16:74:b7:0c:71:25:4d:
         eb:69:6d:45:5d:35:2c:8d:d1:da:96:50:72:17:91:22:96:55:
         a0:f0:6d:a5:3b:27:05:4d:6b:ec:5b:6e:6c:e4:f0:40:1b:ea:
         4c:f4:b5:21:4b:6f:bd:e4:4a:e3:7c:e8:57:9b:75:f9:2b:0a:
         66:06:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:22 2026 by rpki-client