Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa
File:                     69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa (raw, json)
Hash identifier:          HrfajG7+7Wi6Gmgm2MrRbWEsArCDpNv9CgvbhnEUTpo=
Subject key identifier:   75:08:57:16:06:95:52:31:49:A7:E3:D4:F4:59:F2:2B:A5:17:C0:5F
Certificate issuer:       /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial:       010D0C9F4328584D343A20B39278E7007F934120
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     63101
IP address blocks:        2602:f824::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:20:b3:92:78:e7:00:7f:93:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=c1c5b0b5-7352-4f34-bf94-1661d5e44163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:8e:ed:2a:f5:7e:03:77:cd:70:7e:58:62:
                    8d:7c:a6:2b:82:93:57:ea:95:6d:85:9b:18:9f:91:
                    f1:a1:cf:8d:65:73:dd:72:c2:91:e2:37:2c:0a:1c:
                    1c:67:5e:25:e4:5f:9e:30:be:96:60:ce:de:24:f0:
                    da:ec:48:d9:52:03:ed:93:31:7b:d4:aa:31:73:e0:
                    92:29:bf:10:80:70:72:ed:4a:9b:ec:44:8a:49:4c:
                    19:e8:85:03:22:0a:98:70:ee:aa:d3:f5:c3:a3:a7:
                    59:b4:b4:12:fe:30:2e:0d:5d:07:1c:b1:df:6f:c4:
                    d4:f2:99:44:b9:2b:44:df:dd:33:ea:bc:2f:87:8d:
                    7d:6a:a3:88:94:3a:7e:71:e1:32:77:62:27:0b:38:
                    66:f4:0c:b2:de:99:2b:ba:a5:94:d4:45:0f:5a:58:
                    f2:86:9c:4d:d1:63:bf:32:94:ce:e7:e1:15:01:2c:
                    77:df:2d:c3:7f:9a:0e:ef:9d:a3:44:35:71:b5:aa:
                    63:8e:fb:12:bc:64:95:44:ef:e7:4e:8f:48:28:be:
                    a8:76:f9:75:5e:be:84:1c:84:25:0a:67:2a:a7:15:
                    dd:f2:32:29:e8:fd:a5:08:cd:73:8c:6b:50:fd:6e:
                    42:90:c0:c7:21:2e:11:5a:ba:96:b2:5d:c2:6f:3e:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:57:16:06:95:52:31:49:A7:E3:D4:F4:59:F2:2B:A5:17:C0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl

            X509v3 Authority Key Identifier:
                keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f824::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f0:25:d6:8a:f7:9c:4b:a6:9d:67:89:76:b1:79:d7:ba:bc:
         aa:3e:a1:fb:aa:75:d0:e0:1f:7b:7b:66:15:ff:a4:b5:21:cc:
         40:38:61:0e:15:9b:88:79:29:c1:65:83:ba:29:cc:5d:ad:a8:
         05:50:7e:ff:69:7f:23:89:a8:ba:f9:6a:c1:8c:57:f5:b9:fc:
         ce:a2:8c:75:33:55:07:fd:b8:cf:c5:83:a0:89:f5:16:1f:e1:
         b3:b5:30:ff:7c:0b:e4:54:79:ef:d8:fb:0c:10:2e:81:6d:f6:
         82:93:d8:c0:3c:a2:00:da:34:d8:70:4f:cf:6b:97:98:c4:0e:
         34:25:77:f1:22:29:d9:8b:d5:5e:3a:4f:8b:50:2d:a0:1b:d3:
         cb:2a:67:5e:db:40:11:db:98:92:c7:24:3d:4f:07:6e:cd:c4:
         11:ab:58:e0:a7:8b:07:f8:95:f7:13:48:99:d3:2a:5a:ec:4f:
         d8:1a:84:86:00:00:ce:b4:3c:00:94:de:c6:8c:4d:a9:68:c1:
         6e:a2:3b:f2:f5:af:56:c2:48:ba:48:54:f9:f3:5e:86:5f:fc:
         aa:53:00:53:82:08:57:95:a0:36:1c:65:0f:98:52:ab:ba:26:
         b1:69:e1:e6:f9:f9:37:d0:59:3f:97:f9:fc:49:1c:dd:ba:4b:
         c7:5f:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:13 2026 by rpki-client