Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa
File:                     2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa (raw, json)
Hash identifier:          KKttGDfzNg6MaxZYRspcQQiyJDcnjqKpbhgwnPxiVXk=
Subject key identifier:   C9:49:67:B5:36:7E:84:6D:59:55:78:25:EC:0F:B2:92:DB:21:DC:71
Certificate issuer:       /CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60
Certificate serial:       010D0C9F4328584D2BDA2478E8877F49280345C0
Authority key identifier: 56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     397059
IP address blocks:        2620:4a:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:24:78:e8:87:7f:49:28:03:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=5419a151-5f41-4430-9ef6-38fc4e185af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3e:e8:e5:f4:0f:19:35:f0:be:9f:c9:8e:52:
                    5a:91:1b:2a:3b:30:eb:c4:1e:fa:b7:ab:df:bd:cb:
                    e1:4c:67:0c:b1:3f:4d:9c:b0:0a:47:b2:e0:9d:e1:
                    c8:d8:b0:c4:5e:b8:b7:28:0e:1c:1c:46:1e:43:3a:
                    7e:d4:a9:3a:bf:a3:6d:cc:28:7d:d1:d1:00:ca:b8:
                    2c:4a:e3:5d:b6:d6:fd:8b:3d:b8:cb:24:6d:fa:2c:
                    2d:e2:9a:6f:8b:fc:37:97:2c:ca:5d:b3:1d:6e:ad:
                    7e:fe:55:07:3b:7a:10:c4:aa:cb:21:d2:de:fa:60:
                    fd:ea:b1:53:02:d6:51:10:9e:5e:c1:e8:23:0c:11:
                    21:02:51:04:9f:c9:59:5d:ac:38:b7:f7:bf:96:a1:
                    6f:69:6f:6c:90:c2:4a:60:b9:cb:1b:13:06:df:4b:
                    8e:a0:df:9a:e4:a6:b1:ab:47:6c:99:72:9c:da:2a:
                    a8:ed:be:aa:32:b3:f0:46:23:c9:37:a6:3e:d1:0b:
                    cd:4f:e0:12:db:3e:1a:b4:7a:cf:c4:c5:e3:88:46:
                    d3:55:33:55:2a:be:1f:15:22:43:3a:cd:ae:bd:bb:
                    dd:1a:d6:a0:1b:4e:b5:47:fb:e3:66:2d:14:8f:32:
                    fd:64:29:46:ff:99:a3:fe:ed:48:b7:89:5d:9e:69:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:49:67:B5:36:7E:84:6D:59:55:78:25:EC:0F:B2:92:DB:21:DC:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl

            X509v3 Authority Key Identifier:
                keyid:56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4a:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ac:af:7e:f3:a2:39:96:2d:5e:26:7b:8a:72:f3:ed:91:7e:
         db:dc:94:a7:2c:89:0d:d4:ea:23:56:c6:f2:d6:87:a2:be:e1:
         80:51:f8:46:b5:d6:18:a5:cc:fa:2b:df:e9:d3:2d:fa:cb:67:
         f5:bb:7f:c3:26:1b:e9:ce:6a:05:e9:a3:9e:c8:3b:60:1d:65:
         54:c4:7f:bf:b1:b3:43:1c:f5:2d:2c:10:f6:05:15:9a:64:63:
         45:55:67:4a:bc:20:69:bf:27:de:8e:f5:03:ef:52:1c:11:f3:
         5d:39:f5:3d:73:e7:2f:23:98:d9:65:6f:c0:3e:a4:1b:8d:ea:
         0b:fb:d9:34:02:fa:0b:45:1a:2f:9c:c0:fa:21:a5:9b:49:e4:
         8d:85:4e:4c:15:3b:c9:fc:f0:cc:c8:a2:b7:59:60:94:40:3a:
         e1:5f:ea:a7:15:32:c6:69:41:be:45:d8:8b:20:e8:8a:c6:2c:
         4a:c0:eb:46:77:d0:9e:56:ba:79:f3:89:e3:0a:9d:89:83:c6:
         77:14:3e:03:4f:19:c5:a9:dd:4c:67:d7:af:71:d1:ae:ca:d7:
         0c:92:07:99:04:63:80:a5:d8:88:5d:e0:80:1e:1d:0d:2b:37:
         0c:25:e0:31:28:16:27:29:eb:35:76:54:51:6a:69:df:21:87:
         61:cc:f2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:10 2026 by rpki-client