Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa
File:                     1c903dbb-5b56-3ede-a164-06247de4e016.roa (raw, json)
Hash identifier:          +L2YAmla1JbtT720qjQbUwJ/8ZM/Sf5zG5qh5Y6Mn7k=
Subject key identifier:   A1:53:79:C4:7E:9F:83:75:6F:74:9E:86:34:E3:DE:90:3C:48:BC:05
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584D4394DD7BDC3E7257D6E5E580
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa
Signing time:             Mon 23 Mar 2026 13:00:39 +0000
ROA not before:           Mon 23 Mar 2026 13:00:39 +0000
ROA not after:            Sun 21 Jun 2026 13:00:39 +0000
asID:                     401100
IP address blocks:        2602:f972:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:94:dd:7b:dc:3e:72:57:d6:e5:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Mar 23 13:00:39 2026 GMT
            Not After : Jun 21 13:00:39 2026 GMT
        Subject: CN=19dd8d10-f18d-4252-ab6c-d835de3628bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:07:40:b8:86:55:ba:40:4a:1a:1b:5f:1d:
                    b6:29:96:86:29:e8:65:2d:90:83:3c:8d:15:71:37:
                    86:7f:22:cd:6e:e8:c1:b2:b2:3f:11:49:6b:3f:c6:
                    6b:01:92:ba:d4:cb:92:af:e0:2b:b3:66:4c:a0:54:
                    3d:f2:36:2f:e0:94:bd:90:4a:7a:10:37:fd:3b:42:
                    50:25:88:26:54:e5:71:31:4c:03:3a:c6:17:83:63:
                    6f:b3:9c:29:98:f6:f7:0a:e0:a1:17:6e:44:84:e5:
                    e2:43:84:18:32:0f:82:f1:0f:91:87:bc:25:9a:ea:
                    3c:22:42:20:62:2f:d9:0b:0a:65:d3:7f:c8:a7:59:
                    ee:c1:de:a5:f4:2f:72:6f:29:a5:1d:b0:8d:55:93:
                    63:cb:45:f5:91:bf:1c:bc:11:a0:eb:b8:54:dc:54:
                    77:99:ab:a7:44:76:24:21:52:71:52:f5:78:ab:a7:
                    20:dd:1c:54:fa:4f:64:2d:dd:b4:ee:6f:c3:51:bc:
                    bb:a5:91:ca:9d:bc:01:bc:fd:e3:c6:ec:df:d8:02:
                    9a:eb:9d:99:71:b1:3c:05:b6:46:b0:a2:c4:5c:7d:
                    69:75:f1:24:93:6e:9f:2d:7b:8d:ff:a5:93:98:aa:
                    bf:15:0b:29:6a:e3:d9:df:7b:7d:85:cf:8f:14:6a:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:53:79:C4:7E:9F:83:75:6F:74:9E:86:34:E3:DE:90:3C:48:BC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bd:30:83:a1:3e:1f:b0:e8:43:8b:f3:c9:1a:5a:ff:f3:14:
         5d:60:7f:04:dc:d9:6a:33:6e:4e:20:1b:32:25:8a:07:54:52:
         9f:72:d1:09:99:52:6a:6f:17:ce:37:1e:00:76:52:53:61:b5:
         aa:47:e3:4a:86:89:7b:bc:49:3b:24:57:dd:aa:97:52:1f:94:
         8a:5f:4a:b1:c3:ec:61:25:1c:0e:75:c7:98:4a:ae:13:e0:d7:
         5e:73:59:ad:1c:3c:0c:71:4e:95:69:55:5f:02:4e:fb:a1:89:
         0a:ba:05:b6:aa:9c:e5:98:92:8e:6b:7b:dc:86:ac:22:58:0a:
         6c:97:44:91:24:09:50:45:e4:f6:8a:36:ae:72:4d:1f:87:83:
         05:41:4a:56:cd:57:ab:6c:86:b0:67:7d:ad:ef:9d:67:a8:a0:
         ca:8e:0f:98:dc:cd:89:11:24:c9:81:d2:c5:3f:d2:43:df:99:
         4e:4c:e7:33:86:12:75:e1:d8:3b:68:1b:d9:4b:45:da:37:e8:
         e3:8c:5c:6d:84:a8:3f:3e:e4:eb:22:67:7b:cf:0e:74:3e:62:
         b8:b7:89:73:e5:20:73:de:f1:b7:30:63:2e:2c:32:65:e9:36:
         3f:13:fc:ee:57:1b:46:cb:49:db:c0:25:43:ac:09:a4:fc:8f:
         64:a3:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:59 2026 by rpki-client