Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
File:                     2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa (raw, json)
Hash identifier:          teNbn2Zd1s1pcp8BAN+eRU1DwMx9DgxT70SZ/nbdaps=
Subject key identifier:   DF:A1:C2:CD:BB:58:5E:D7:D1:23:E7:F2:5F:2A:11:C0:04:65:44:F4
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584D3DFF9E27012A1D0EB8EA0E20
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     36549
IP address blocks:        2606:b200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:9e:27:01:2a:1d:0e:b8:ea:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b149eefc-c5a7-4ebb-9ec3-46c5cc6f9213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:6d:3a:65:61:72:d6:de:1d:6d:0d:11:1a:
                    58:03:c9:8b:d2:2d:d1:48:16:8f:ab:25:ff:79:55:
                    8c:ed:8b:29:0c:07:05:e8:ac:5d:f3:d9:db:0e:75:
                    d9:28:7c:99:0a:1f:69:9b:6e:29:be:1f:49:cc:a0:
                    5c:1d:cb:4d:54:53:cd:6c:c7:4b:30:60:25:fe:89:
                    56:20:32:a2:1a:8c:d8:18:24:3a:f9:89:91:96:a7:
                    31:74:ed:07:c0:47:4f:2a:7f:b5:5b:c4:02:4f:f6:
                    c4:70:80:2c:c1:4c:57:e9:2f:61:34:44:33:d0:45:
                    f6:07:01:ca:7b:98:68:6d:b1:af:36:bf:63:ff:5f:
                    42:ae:39:6b:8f:67:0c:35:17:ef:00:f7:53:96:c8:
                    fd:b4:e0:c8:eb:00:31:6b:21:47:77:00:f0:3d:f8:
                    2d:ec:35:f8:0c:7f:35:8d:d0:07:38:d2:30:b9:10:
                    6f:26:22:fc:6c:13:63:84:dc:c3:a8:27:4f:c3:3f:
                    95:7e:32:cf:4d:69:15:ee:78:f1:f0:25:83:14:97:
                    32:f2:f0:55:cc:4d:26:90:20:28:2a:9c:d1:e2:84:
                    7e:36:b5:ae:0d:01:75:f2:db:49:8e:dd:1d:a1:78:
                    a4:c0:00:9c:ee:9d:46:47:59:8a:50:49:a1:b6:42:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:C2:CD:BB:58:5E:D7:D1:23:E7:F2:5F:2A:11:C0:04:65:44:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:03:16:40:50:0a:75:27:f8:e1:81:0e:65:30:97:45:6c:24:
         ac:4b:c5:fd:f8:dc:32:2c:90:da:fb:c7:b3:85:ea:49:00:d0:
         5d:fa:3a:ba:3c:96:c3:c4:0f:11:fa:10:8b:b4:08:c5:36:a7:
         fd:47:c4:c9:5a:c5:fa:c9:95:bf:5f:d5:33:72:30:ae:20:0f:
         1a:62:76:19:34:1d:97:9c:db:46:e2:ba:94:06:5e:85:b9:e2:
         13:99:89:a1:f4:73:05:70:ed:09:59:a3:c8:b2:96:38:93:6f:
         e6:42:81:d4:19:00:a2:39:08:3a:00:d0:a4:78:e3:8e:84:49:
         60:f6:08:e8:69:fe:8f:6e:9b:52:51:f8:88:35:c9:08:02:da:
         7f:e0:f2:2e:0d:bb:56:65:e1:e7:e4:85:6e:ee:0c:53:00:b9:
         c4:61:49:35:45:09:ad:c7:96:c2:ee:67:56:71:e5:31:eb:d7:
         03:5b:3c:2c:57:dd:c2:41:3c:87:47:e4:b4:1c:23:06:ca:1d:
         27:c3:d1:b4:e9:6f:57:df:78:ef:3c:b2:c8:c5:05:ab:53:e1:
         9b:b2:3c:76:cb:8c:4c:c3:3b:82:9e:23:2a:28:ac:a5:f9:d2:
         3d:a8:0d:a3:c6:33:67:cd:a5:2f:a0:fa:fb:b3:3a:8e:6a:f5:
         8f:66:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:20:39 2026 by rpki-client