Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
File:                     689b6d84-5481-319d-a444-836935fcee29.roa (raw, json)
Hash identifier:          t/qaisa+W0mapWRTHE8QSKSJz8HPuLkA1ylmZX4hgkM=
Subject key identifier:   51:25:98:56:25:38:15:50:FB:84:7D:E6:86:D8:A3:A2:BE:82:5A:D6
Certificate issuer:       /CN=17624d03-2126-49cd-8e8c-c3d5089ac686
Certificate serial:       010D0C9F4328584D492A737C5586E52768B35D00
Authority key identifier: 32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14923
IP address blocks:        2602:f92b::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:73:7c:55:86:e5:27:68:b3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17624d03-2126-49cd-8e8c-c3d5089ac686
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=752c28e4-141d-458d-aba2-40485b5068e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:f7:86:b1:fc:b6:75:a4:25:9f:28:40:0a:
                    56:2d:cb:55:23:ba:97:55:31:c8:f8:96:51:0d:7e:
                    14:32:60:69:38:f6:3e:bf:44:07:81:bc:15:0b:95:
                    b6:c5:b5:1a:68:a9:52:56:5a:68:83:fd:02:38:90:
                    a1:d0:4b:e8:4b:fb:bc:60:d8:1e:3f:c3:53:ac:32:
                    4e:f5:7b:66:4b:89:61:42:ef:29:de:8d:b7:12:78:
                    8a:c0:27:e3:43:39:5a:68:38:e1:e7:ab:27:48:25:
                    92:6b:40:1d:cb:af:2c:99:9e:d9:42:1a:4a:eb:03:
                    2a:9f:59:0b:64:50:08:ff:91:dc:31:28:a1:be:be:
                    62:17:8e:94:f2:e3:ac:06:ce:f3:14:1c:fa:ae:40:
                    c0:ce:b6:d9:7a:08:b1:66:25:6b:8c:80:17:54:fa:
                    3a:24:aa:36:de:53:24:9b:1b:23:f9:9d:1a:a7:c2:
                    37:7c:f1:cd:54:87:32:72:8a:63:a5:fd:f0:eb:e2:
                    8e:f4:06:ba:ec:2e:c0:34:65:e8:e0:6e:0f:fe:2a:
                    ba:bf:00:d6:b3:b6:26:60:39:7c:8c:c1:a5:e8:55:
                    4d:af:46:7b:0d:81:79:dc:13:1a:a7:09:3f:94:3f:
                    d9:c6:e7:f2:70:d0:eb:30:a1:c9:a5:d8:11:33:f7:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:25:98:56:25:38:15:50:FB:84:7D:E6:86:D8:A3:A2:BE:82:5A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl

            X509v3 Authority Key Identifier:
                keyid:32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:fc:68:5b:e8:3c:34:10:90:69:40:e7:d9:19:41:b3:ef:
         03:02:f1:37:cb:56:dd:d0:05:e6:85:ec:c7:20:a7:13:6d:d3:
         bb:85:8c:9e:92:71:5f:be:bb:a1:9d:ee:6d:b2:56:5f:64:30:
         37:49:29:6f:66:e4:e1:25:5d:2c:5c:fe:b2:cd:b7:c8:ba:92:
         2a:85:43:71:d7:ad:cf:d1:d1:4d:b3:98:cb:78:f3:c2:74:c2:
         4a:24:43:93:d8:73:d8:de:c1:3f:ca:bd:f2:c5:99:37:bf:29:
         63:4a:5b:4e:f2:02:61:5f:91:48:67:7c:c4:00:54:20:09:d1:
         01:82:6e:0f:cd:cb:84:ae:cf:2a:31:c3:05:4e:e7:7f:7a:94:
         e5:bc:a3:ee:96:97:a8:88:57:42:d3:bd:0d:51:c3:8f:d1:83:
         23:7a:a9:4a:da:a6:16:66:06:19:49:6d:25:d2:aa:03:ef:c7:
         dc:a0:0d:6b:74:e2:03:64:08:e1:9d:a2:7a:cd:d1:d0:32:4e:
         ed:4c:1f:23:d0:18:7a:6e:be:a6:17:cc:ff:3c:9b:1a:c3:c4:
         af:72:fa:27:8c:02:70:ae:17:f7:40:d5:78:da:23:e5:51:34:
         d5:f4:a0:90:16:2f:bc:58:1b:0c:f5:02:18:e4:56:68:4e:8c:
         96:d2:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:44 2026 by rpki-client