Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa
File:                     1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa (raw, json)
Hash identifier:          k3Aulq2n1xfikUTVzDe0Hph+rexXk9YlwVksFODfJls=
Subject key identifier:   2D:E3:AA:4A:49:B6:7E:14:B9:A6:17:93:D4:29:87:6D:10:75:B7:31
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F4328584D300A663681E050AB79C85640
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     398355
IP address blocks:        2602:fa42:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:66:36:81:e0:50:ab:79:c8:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=b263a0f8-554f-45cc-b78a-4983782569d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:79:bc:b7:d1:e6:0c:59:a1:b3:41:0f:ed:
                    9a:46:c4:2d:2a:74:e3:1d:e9:e2:2e:7b:d7:b1:29:
                    63:ef:29:4a:6e:12:6e:32:4d:34:b9:22:b1:e6:8d:
                    8f:cb:69:5c:8e:19:9b:05:57:c2:1e:44:08:ab:bc:
                    fa:6c:93:4d:c0:d9:56:3a:7f:16:1e:f2:fe:14:79:
                    bf:73:6a:e2:a7:a6:a2:05:36:98:8b:db:a6:94:a7:
                    c7:c2:a9:ac:8d:53:ec:fb:fa:38:ef:0a:cb:c5:c4:
                    14:25:c8:e1:6f:3e:0a:67:f9:af:b1:54:4b:ae:1e:
                    11:6c:7f:44:b5:2a:f6:7e:8b:92:af:d5:e7:ca:11:
                    a1:16:52:12:c1:58:74:b1:00:48:42:34:4f:30:1b:
                    02:82:8d:7e:c3:97:12:ee:05:a8:b4:1e:e7:24:b7:
                    6e:48:27:c0:42:ab:16:5a:03:dc:c5:42:42:92:19:
                    36:59:cd:0d:b0:55:ea:b2:bd:2b:b3:ce:5a:ee:34:
                    6e:71:0e:f3:48:2b:d5:18:56:ad:93:60:2c:70:fa:
                    a0:6e:1e:3e:b6:ea:a3:7b:65:8b:62:f7:4c:c0:d3:
                    44:fc:7c:38:ad:66:b8:fe:d5:65:97:3f:b2:f3:f9:
                    23:80:6b:d2:6c:de:4b:4d:9f:e8:ee:2e:04:43:47:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E3:AA:4A:49:B6:7E:14:B9:A6:17:93:D4:29:87:6D:10:75:B7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:df:7f:51:ba:fa:f9:0b:15:f7:16:df:a2:7f:74:d2:bf:fa:
         e9:ca:05:35:b3:24:9d:e8:ae:c3:ef:61:54:da:eb:55:58:0b:
         3b:dc:6a:5d:42:2f:d5:8c:3c:96:4d:69:44:dd:0b:9b:55:01:
         2d:ff:14:14:47:65:d1:74:c3:18:e7:9c:d3:63:86:73:08:11:
         ca:35:82:cf:ad:33:2f:97:f1:d2:8f:e9:39:23:22:fb:0a:17:
         b5:6c:08:92:82:a3:5d:73:fc:f0:b9:e0:fe:b0:56:52:fa:98:
         8e:71:31:94:91:eb:54:f1:c4:57:d4:af:f1:32:a5:15:6a:c2:
         74:3d:8b:4d:9b:48:c3:da:88:a3:1b:19:15:43:f0:82:d8:eb:
         4d:81:8a:7b:fb:c3:36:21:b6:1c:2c:81:f2:f7:6c:f2:3e:be:
         e2:2e:cf:18:02:68:a3:8f:26:d3:be:68:d4:ee:99:7f:b8:42:
         fa:ce:14:e3:8e:a7:3e:56:ab:79:3a:ab:d7:65:ae:48:8d:e6:
         87:fe:da:c5:f5:6f:be:0e:46:a1:9c:31:10:c6:03:ac:22:ef:
         ac:9d:01:d8:80:25:6d:52:31:7c:0d:7f:67:5e:3e:6e:cc:5e:
         4f:b6:c9:97:70:c6:8a:e1:e4:d0:15:ac:c4:77:9d:12:ec:0e:
         c5:25:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:41 2026 by rpki-client