Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa
File:                     cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa (raw, json)
Hash identifier:          +c6H8TrSDbaoLfD1xiA0dj6/MxKwEbK5aAt2Q1UIA5k=
Subject key identifier:   65:2F:A2:B6:57:8B:31:EF:98:CD:F7:9B:FA:88:44:CE:C3:52:1B:CC
Certificate issuer:       /CN=de32cd27-0bbb-460a-8587-7a885bed28db
Certificate serial:       010D0C9F4328584D3E001F82E095D701DCEE1080
Authority key identifier: BC:01:45:58:74:D3:73:01:E1:F7:E9:2A:C5:0D:44:A0:1B:02:FB:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     14440
IP address blocks:        2602:ffbd::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/de32cd27-0bbb-460a-8587-7a885bed28db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/de32cd27-0bbb-460a-8587-7a885bed28db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1f:82:e0:95:d7:01:dc:ee:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de32cd27-0bbb-460a-8587-7a885bed28db
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=528d5624-60df-4964-83c8-5a9587e241b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:df:8c:0b:0b:49:a1:54:e2:08:0f:d2:05:
                    46:10:96:be:ae:e6:84:b2:26:13:dc:36:8b:1e:9c:
                    a6:ee:9f:54:bc:6b:10:63:65:7d:0b:7a:06:1a:10:
                    21:43:da:6e:98:e6:81:6d:15:f3:45:03:91:62:a4:
                    41:ef:ba:9e:a1:bf:65:34:ed:ae:be:cf:dd:b9:bf:
                    27:2b:9f:d5:67:3c:64:f3:7a:d8:c8:5c:93:be:41:
                    17:a4:f3:71:da:1c:18:91:82:e3:78:c8:02:77:b1:
                    3f:a1:ff:1b:c9:40:d4:61:e0:5c:05:0c:80:75:3d:
                    1d:c6:93:ec:c2:eb:69:93:a6:9c:50:09:8f:e3:68:
                    96:e1:31:eb:ef:9c:d1:af:5f:99:f5:5b:25:62:cd:
                    83:9b:25:60:2c:02:18:88:fe:d4:d5:5d:b2:bb:31:
                    d7:1e:49:60:ff:24:05:e6:db:f9:91:99:47:2d:21:
                    30:9e:cc:fd:d0:95:39:43:86:7c:63:4b:54:0d:75:
                    59:24:37:39:9b:dc:f2:b4:41:af:4f:f3:44:a7:59:
                    04:17:10:91:ab:ec:62:b0:78:7f:56:f9:34:19:22:
                    03:fc:d0:1f:a7:30:68:75:6d:c3:a5:0d:d2:d6:36:
                    b3:7f:84:0d:42:12:dd:94:15:d5:6f:bb:86:37:c4:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:A2:B6:57:8B:31:EF:98:CD:F7:9B:FA:88:44:CE:C3:52:1B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/de32cd27-0bbb-460a-8587-7a885bed28db.crl

            X509v3 Authority Key Identifier:
                keyid:BC:01:45:58:74:D3:73:01:E1:F7:E9:2A:C5:0D:44:A0:1B:02:FB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffbd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:77:4f:05:7a:12:17:af:91:b6:a7:8f:cb:99:71:77:f4:ea:
         22:e4:48:00:7c:b6:1d:41:52:1c:7d:8d:11:0e:53:0d:26:0e:
         79:3e:15:79:71:cf:52:c7:f4:54:4f:b3:87:02:b8:7c:36:21:
         5e:aa:75:d5:19:a6:fe:ce:37:7c:b4:54:18:ff:b3:a3:0c:17:
         62:0e:b8:1a:10:34:9f:21:86:07:c7:7c:37:55:d8:eb:ff:b9:
         c9:28:2c:76:5d:25:0c:87:9f:52:2d:a4:07:7b:ce:46:56:d0:
         3a:d9:9b:89:5c:52:40:dd:ba:6e:52:87:1d:5b:5d:14:6c:63:
         3e:fc:dd:0b:6f:c8:ab:d2:47:d8:e1:11:27:86:97:91:ae:f8:
         1d:54:f4:01:7e:9f:7c:1f:59:e8:6e:ac:98:4b:ae:a3:98:77:
         c2:90:ec:9f:f1:4f:1a:6d:dc:58:07:bc:9a:a7:05:63:5a:b1:
         0d:30:e4:76:bf:f6:3a:ce:1e:d3:e9:b5:e8:50:b9:1f:bf:e5:
         c3:34:b7:be:33:f3:17:33:9f:a1:7d:d1:67:bb:9b:a4:9d:78:
         c6:27:e1:ec:91:ed:29:8e:07:45:b5:e0:5a:d9:6e:14:cc:38:
         7b:74:53:d2:3a:5f:d5:3d:60:b0:b6:e7:32:dc:21:6f:8e:41:
         6b:a9:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:24:43 2026 by rpki-client