Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/8541f2ad-c5f6-314f-b2cc-588bd85e14cf.roa
File:                     8541f2ad-c5f6-314f-b2cc-588bd85e14cf.roa (raw, json)
Hash identifier:          ZWxNWMsvYGepmdhXA1oQWp/CBds2EzfuuNz1q8ZLDX4=
Subject key identifier:   D8:43:F1:58:4B:93:87:80:A6:01:C3:8E:A6:FC:FF:AE:EB:C9:EC:E4
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584D1707B6D69D80CA447000AE98
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/8541f2ad-c5f6-314f-b2cc-588bd85e14cf.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     209481
IP address blocks:        2602:f93b:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:b6:d6:9d:80:ca:44:70:00:ae:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=91c4aa2e-185b-49b3-b8d9-fb7636a6b480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:09:c0:99:b2:9f:c4:23:29:e7:6b:eb:d0:e0:
                    8d:53:ba:1f:72:4a:1a:19:b2:ef:4f:4a:13:1c:5a:
                    c0:80:fd:4d:28:0b:b4:eb:93:64:db:cb:b6:05:eb:
                    73:c5:ec:a4:2b:ab:81:9f:af:6a:49:f6:92:a1:2a:
                    83:3f:32:8b:41:35:2d:07:f5:e6:55:17:91:bf:99:
                    6d:f6:57:e7:f7:24:96:da:b3:55:30:0c:d8:32:b0:
                    2f:77:f1:1c:c4:d2:b9:d3:ac:60:81:17:ec:5e:ff:
                    d6:d1:20:e2:69:35:e1:9b:bc:93:27:6c:df:6f:14:
                    80:32:2d:cf:36:32:9b:26:93:1d:0c:c4:0e:4a:14:
                    60:c2:64:cf:be:21:9b:8d:5c:8a:33:21:a2:bc:86:
                    7c:0c:86:5c:6e:10:ec:91:b1:1e:6f:d0:1e:4d:d5:
                    6b:d9:36:2f:07:14:33:85:29:18:7d:fd:5a:a8:ca:
                    4a:fb:13:0c:9a:1f:10:0a:d1:7f:50:bd:6d:e0:dc:
                    90:15:2c:4b:7f:bc:69:c7:60:6c:e3:50:9b:e5:d3:
                    75:7b:1a:5c:89:6a:22:18:08:e5:99:ba:a5:da:45:
                    b0:b7:61:20:69:ba:01:aa:90:2c:24:92:21:2b:7d:
                    b7:80:a7:f5:df:39:00:ff:31:f3:3c:a4:36:80:5d:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:43:F1:58:4B:93:87:80:A6:01:C3:8E:A6:FC:FF:AE:EB:C9:EC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/8541f2ad-c5f6-314f-b2cc-588bd85e14cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93b:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:f2:c7:53:8b:2b:0c:c6:d0:32:b8:df:d3:78:8f:35:84:
         6f:67:0f:3d:d5:88:e8:0d:a8:de:2a:91:a9:9d:23:92:43:de:
         ed:34:e9:24:8d:64:77:b6:aa:fa:84:ba:73:99:80:78:e4:b5:
         2b:54:a7:9a:71:6c:57:e6:39:0d:08:29:de:3b:0d:19:fc:57:
         48:d9:60:50:90:23:7e:f2:b1:57:1d:50:c2:dc:54:60:28:a3:
         0b:0e:49:8a:7c:62:13:68:89:82:7d:2d:02:ca:1c:3d:b7:9f:
         73:df:7b:f0:7a:6b:bf:43:ca:ce:0a:9d:1f:31:fd:da:92:69:
         08:70:e0:00:ba:93:08:71:44:dc:c5:c6:84:92:e8:57:16:db:
         1e:d6:b5:ed:b7:de:57:20:90:35:44:1c:77:69:75:08:7f:9e:
         d9:33:7a:8a:24:89:0a:31:db:d8:6b:21:1d:44:27:7e:f1:59:
         f9:2a:06:d9:0c:c6:13:c5:0c:f2:5b:7e:04:df:ae:49:ad:d8:
         29:e5:53:c5:a1:d2:53:81:66:71:e6:9f:5b:4b:7a:dc:1a:2a:
         ec:4f:01:46:7c:69:d0:1c:40:a7:a3:6a:f0:3c:90:b4:1a:07:
         8e:cc:29:7a:d4:ba:58:c2:fa:c0:a7:35:86:dc:cf:32:02:97:
         cc:b6:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:32 2026 by rpki-client