Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa
File:                     e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa (raw, json)
Hash identifier:          H9HTztNKWHaWoXzP5A8L/MWzk7w8ejXyVkDup7FtLLM=
Subject key identifier:   A7:F4:75:E7:FD:58:16:8A:BD:4D:0F:9C:43:9E:C4:CE:C4:A4:F9:B0
Certificate issuer:       /CN=843d051d-a734-4f3d-9544-a5ed8b60c976
Certificate serial:       010D0C9F4328584D895FEC6CF5370643B3008D80
Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa
Signing time:             Fri 17 Apr 2026 13:00:31 +0000
ROA not before:           Fri 17 Apr 2026 13:00:31 +0000
ROA not after:            Thu 16 Jul 2026 13:00:31 +0000
asID:                     35930
IP address blocks:        2602:faa2::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:5f:ec:6c:f5:37:06:43:b3:00:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976
        Validity
            Not Before: Apr 17 13:00:31 2026 GMT
            Not After : Jul 16 13:00:31 2026 GMT
        Subject: CN=dc99bca5-f393-4d7a-b8ca-3380b4e80ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:87:6a:42:b4:f2:e8:7d:1a:8d:38:3b:5d:
                    c0:90:24:a3:73:f7:6e:8a:7b:c1:32:4a:b1:ba:7e:
                    b7:3a:b3:9c:77:de:b9:75:be:ff:51:ff:5a:a6:8c:
                    55:89:df:34:1e:5c:26:52:33:7e:b7:23:ac:2e:72:
                    af:36:75:e9:20:a2:33:cf:00:c2:de:75:bf:8e:61:
                    de:08:c2:d6:ef:0d:69:22:cd:d3:21:e7:81:1f:31:
                    34:92:34:4c:b4:c1:75:c7:1a:e5:9d:af:80:1c:5d:
                    84:b7:31:c6:86:0a:36:82:82:5c:97:e0:18:8e:fd:
                    3a:55:37:60:f2:d4:a3:e0:59:ef:30:97:21:d3:43:
                    d4:cf:2f:dc:4e:69:e6:4e:78:68:e6:88:6e:fc:04:
                    6b:72:17:f0:df:0d:f1:db:29:1c:76:63:f4:d8:e1:
                    9b:94:2b:74:8f:8a:7e:fd:72:8b:06:b8:7a:2f:87:
                    9c:9d:66:df:b7:4f:d0:46:ce:05:3b:af:26:d4:91:
                    ff:9a:63:81:d6:a4:50:54:c9:2c:d8:b3:3e:2c:7e:
                    c1:1c:fe:a0:ec:2a:2f:cd:70:59:5e:52:57:27:ce:
                    dc:61:85:90:4c:7d:e0:b0:97:9d:50:e3:1f:bc:ac:
                    b0:e7:cc:60:46:00:48:c6:66:2c:59:20:26:24:8b:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F4:75:E7:FD:58:16:8A:BD:4D:0F:9C:43:9E:C4:CE:C4:A4:F9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl

            X509v3 Authority Key Identifier:
                keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:64:1a:a5:a1:67:db:56:72:c4:c6:02:bb:88:9f:dd:6e:2b:
         82:97:f6:a7:5b:fd:dc:98:84:08:e0:d4:2b:be:97:dc:83:da:
         d1:45:e5:23:d7:d5:5c:99:be:96:6a:cc:12:b0:d0:06:c2:ee:
         1f:c0:69:8c:e6:c5:2b:19:38:88:b8:c1:5b:38:27:ab:48:46:
         cd:6a:25:a8:78:0d:e5:72:59:a0:ee:c2:d7:6c:05:65:7f:dd:
         c2:41:f1:38:50:b8:41:67:df:ff:55:ab:bc:03:fd:62:f0:60:
         1e:fe:c4:d3:a1:c8:8f:b5:04:6b:4e:34:2f:f0:19:1f:86:9f:
         59:84:52:32:2c:c9:62:cb:4a:b6:83:9e:9a:9e:40:05:87:15:
         60:b7:cc:58:91:ce:42:37:b1:4a:94:ef:91:7e:1c:8a:8c:18:
         2d:9c:e3:c8:65:ba:97:9d:29:9a:32:0f:38:51:d8:e3:ff:dd:
         2b:e0:d2:5c:61:b1:a3:e1:79:60:06:5b:85:6e:2f:9f:eb:56:
         89:bb:f1:c2:2e:18:d8:e8:6d:41:bd:e9:b6:05:61:eb:b9:e2:
         11:90:f5:39:bf:41:cb:e3:91:af:9f:33:c3:d7:05:16:d9:63:
         64:e8:1d:ce:86:80:2f:44:72:2c:6f:36:ea:1e:19:0c:5a:4e:
         0d:8f:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:30 2026 by rpki-client