Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
File:                     f8fe083d-baed-30a1-8518-ee28ce1ef020.roa (raw, json)
Hash identifier:          jlkWDTOuNepaP2/zpfVNngZ7Em/XqFe5KPmPDNbaXNE=
Subject key identifier:   97:5F:2E:D8:33:AF:36:B3:36:DD:D5:19:96:86:B9:AF:6B:79:06:7C
Certificate issuer:       /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
Certificate serial:       010D0C9F4328584D0EA7BB8850E5D416C7458BE0
Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     394256
IP address blocks:        2602:f95a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:bb:88:50:e5:d4:16:c7:45:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=12e256de-5fd1-4b29-804b-124b92f09c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:f2:91:12:80:27:24:2a:85:98:46:1c:9f:
                    c1:8f:f4:f8:47:54:fc:eb:ff:96:5c:f6:4a:99:36:
                    21:ee:a1:c3:99:de:a2:4a:69:11:be:bc:f3:2c:2b:
                    9a:81:ae:a8:7f:7b:f1:12:3f:19:2d:e1:b2:14:29:
                    03:c8:64:09:1a:97:53:33:45:fa:24:b0:e5:70:dc:
                    8e:d0:8f:2e:9d:4e:1a:7a:35:0e:48:ed:4d:4d:28:
                    20:73:36:6d:51:0e:f8:55:4b:7f:24:ed:aa:7a:85:
                    26:0d:6c:2e:6f:a2:9a:db:be:b2:8e:1f:83:c8:77:
                    39:2c:e0:56:18:9c:1f:2f:ec:ca:2b:5f:4f:60:69:
                    e1:87:8b:c1:6c:3e:7a:2f:a4:cf:f3:71:e1:4c:d6:
                    5c:e1:88:02:c9:af:c4:4a:ed:90:c7:a2:90:bb:2a:
                    32:2a:87:df:78:7c:42:fb:8c:a8:f8:c9:17:d8:cb:
                    17:5c:8e:27:b2:77:69:bb:11:24:a9:c0:b0:91:92:
                    38:97:2a:44:19:c3:e0:a8:fa:33:1b:93:7c:91:7d:
                    80:c7:42:b4:52:7b:f5:63:c2:18:12:bb:2a:ac:5d:
                    37:40:ba:6c:fd:3c:4b:41:ca:4b:1a:b9:a8:56:fb:
                    4b:a9:a5:d7:2d:3d:03:c7:87:c3:47:22:f6:ae:29:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:2E:D8:33:AF:36:B3:36:DD:D5:19:96:86:B9:AF:6B:79:06:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl

            X509v3 Authority Key Identifier:
                keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:54:86:4e:4a:e8:75:da:03:bb:17:6f:56:d5:eb:40:4f:
         df:69:70:3a:55:1c:8a:07:45:f0:ed:56:ba:e6:e1:97:89:44:
         16:6c:35:34:0a:bf:3e:4f:59:5d:6a:bf:8e:68:64:ce:2b:b4:
         38:e7:10:69:85:a5:aa:49:59:60:98:26:d8:24:4c:ce:54:c6:
         7a:9f:14:3d:d3:73:8d:7e:ea:e7:5f:a0:99:09:7f:01:c4:79:
         fc:6d:93:eb:94:cf:8b:9c:68:00:0d:24:23:d7:14:09:eb:66:
         d6:5a:2e:7f:02:e6:75:12:ed:eb:dc:ca:74:da:90:0e:e4:a7:
         8c:fc:42:04:27:c8:67:a7:50:84:46:50:41:8d:31:fc:0a:54:
         14:81:3c:18:55:03:6f:13:32:bd:83:52:bc:39:97:db:9b:a3:
         60:3d:93:22:3a:38:fc:03:fd:da:7a:43:19:d6:0e:81:50:0a:
         f9:1c:7e:3b:82:fd:58:8b:df:43:15:9f:c9:3d:20:f6:aa:3b:
         9e:65:e0:e1:6e:55:f8:56:75:68:35:91:34:4b:f6:68:da:d5:
         70:bc:a3:4d:2b:07:67:45:7d:32:5c:7b:33:27:a8:b3:31:b8:
         bd:5e:76:bd:35:db:2d:0b:1e:c9:b6:0d:37:6c:6d:f7:d7:d5:
         39:84:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:41 2026 by rpki-client