Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa
File:                     2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa (raw, json)
Hash identifier:          3+sQ5Ljdn4JnNo3ei2UyqVn37Hf9XR97ANbVcgSLr44=
Subject key identifier:   5F:CC:B4:2D:9F:CE:2A:93:A7:74:28:CD:10:A1:93:58:F3:F0:91:4D
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584D4394DDB3B01EDA92DF5BAA00
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa
Signing time:             Mon 23 Mar 2026 13:00:39 +0000
ROA not before:           Mon 23 Mar 2026 13:00:39 +0000
ROA not after:            Sun 21 Jun 2026 13:00:39 +0000
asID:                     401100
IP address blocks:        2602:f972:fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:94:dd:b3:b0:1e:da:92:df:5b:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Mar 23 13:00:39 2026 GMT
            Not After : Jun 21 13:00:39 2026 GMT
        Subject: CN=b87ddd11-fcb8-4ba4-a107-5fd06c31f3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:47:64:e1:24:31:05:4b:31:58:02:5b:1c:
                    82:21:3e:c5:b3:75:9c:41:35:1c:3f:95:22:f8:66:
                    73:73:91:4d:2f:f1:ec:a9:71:44:ac:28:16:49:9b:
                    1d:6d:09:9a:cd:b7:a2:e1:80:53:db:19:3f:89:9c:
                    00:d6:a7:5c:bd:c6:67:a9:64:28:89:ec:76:70:e9:
                    4f:22:1a:e3:ec:a0:a2:f5:14:2b:d9:7f:6b:24:8e:
                    b3:ab:be:5b:50:8e:61:e4:14:67:47:fd:0f:fa:a8:
                    7e:d2:e2:bc:78:57:b5:92:1d:15:34:2d:3f:4b:44:
                    1b:bf:78:0c:7a:60:27:d2:75:db:d9:7a:41:94:e0:
                    24:31:90:89:d6:d0:93:15:86:35:76:bd:1a:1a:e7:
                    80:c3:67:34:9c:07:b8:ed:aa:14:97:2a:64:56:98:
                    c5:57:39:10:73:26:01:c1:21:b7:06:f6:c1:78:f9:
                    65:e2:bc:7e:c1:fd:2f:b8:5d:6f:79:bd:3a:57:84:
                    52:2b:1c:d8:90:f7:fc:5d:dc:03:fd:e2:9f:73:6f:
                    e9:87:71:f7:5e:ed:08:f5:02:72:4b:6c:2a:f6:c9:
                    b7:ce:4e:a7:0e:99:e4:bf:ca:04:a4:60:a5:da:cd:
                    1d:52:aa:ba:f0:fa:52:96:9b:d0:00:dc:60:85:a5:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CC:B4:2D:9F:CE:2A:93:A7:74:28:CD:10:A1:93:58:F3:F0:91:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6d:dc:19:53:34:0c:c4:84:15:bc:20:f6:15:57:76:1a:8e:
         4b:9c:ff:3b:40:df:63:e2:0b:d1:ca:54:2d:c6:e9:bb:5d:f0:
         bb:b9:2e:c6:87:0f:55:32:54:10:05:f8:4e:e9:69:a3:9f:5d:
         cd:ae:e3:ef:ad:7b:0b:7e:f8:66:bc:b5:77:35:71:df:d8:50:
         86:b7:26:5f:78:c2:36:18:9f:f7:02:83:89:8e:a1:dc:72:d0:
         84:ef:8f:78:2d:17:bc:84:b1:90:83:8f:2a:71:9b:b3:bb:96:
         41:07:35:88:65:bc:6e:19:b0:30:9c:de:16:d6:ff:0b:fe:8e:
         e9:00:aa:86:68:d5:00:8b:b0:bc:18:16:c8:59:95:f7:67:59:
         8a:58:93:1d:51:d4:2f:a4:bd:8d:03:9d:81:c9:85:9f:9d:cb:
         19:86:9e:80:9b:45:6c:c6:a6:33:41:b5:57:65:43:4a:c7:a3:
         40:92:e1:1d:e1:6c:c0:77:25:a9:2d:6f:0f:5b:52:79:f4:d6:
         cb:b8:e0:4a:99:5a:f4:12:20:5c:d2:94:f0:3c:4f:5a:6d:9a:
         7e:87:5c:82:05:fc:8f:15:1e:95:f1:27:f1:0a:a6:c1:2e:cc:
         02:c9:88:97:9b:06:e9:12:82:f6:d1:47:5f:04:01:3b:17:79:
         52:6d:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:36 2026 by rpki-client