Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
File:                     18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa (raw, json)
Hash identifier:          kXWCaQmRt1HYUMUGUSPtfl6M8pKmmWoFnUYbfXH02Zk=
Subject key identifier:   CE:A1:98:6A:09:9C:FD:EA:CB:08:CB:CC:F3:D6:09:86:80:79:D6:19
Certificate issuer:       /CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
Certificate serial:       010D0C9F4328584D1707DB1B2F042D54C6837F70
Authority key identifier: A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     32797
IP address blocks:        2602:2ef::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:db:1b:2f:04:2d:54:c6:83:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=acb69207-8d47-4e87-862f-7b0cb5c4f0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:c3:a8:a3:d9:0d:6d:61:77:49:13:ba:c4:
                    d5:28:7b:ef:35:44:98:80:25:ec:83:4b:28:ca:c7:
                    92:f0:d6:d2:c1:aa:ab:f7:08:18:49:8e:af:10:ac:
                    ac:53:a9:d0:a4:78:4d:33:6a:c1:b8:f8:7b:09:f1:
                    6c:62:ce:c8:9c:49:91:ef:a3:ef:32:8d:c6:45:1e:
                    03:ca:41:34:1e:7e:08:24:9d:1f:f8:86:9c:5e:61:
                    65:d1:36:94:c6:ef:60:20:bd:8e:7e:9a:7c:de:2e:
                    bc:3c:eb:cf:3a:37:ac:78:46:f6:d6:f9:55:ce:b5:
                    50:98:01:16:4f:09:59:e9:1e:a1:2e:86:6b:de:7d:
                    e9:c1:8a:03:a7:8d:77:d2:11:e4:10:b3:d4:a9:3e:
                    56:30:73:ad:2e:08:75:df:24:2e:91:a4:fc:47:49:
                    fe:06:91:73:30:1c:2b:8c:da:8e:c1:82:ff:e4:8b:
                    83:a9:51:e0:7b:04:4e:60:61:4e:72:79:f6:93:89:
                    37:9b:83:34:2a:6c:08:13:b3:2d:5b:45:60:18:63:
                    62:1d:7c:0e:5f:82:c9:e0:66:8c:5a:40:3f:1d:dd:
                    57:16:8f:49:fe:a0:62:d7:cf:35:fd:20:33:95:42:
                    99:41:87:79:11:d8:38:c8:0b:cb:b4:0b:f5:46:55:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A1:98:6A:09:9C:FD:EA:CB:08:CB:CC:F3:D6:09:86:80:79:D6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl

            X509v3 Authority Key Identifier:
                keyid:A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ef::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ed:37:e3:12:fd:7e:b0:ed:d5:3d:ec:f4:42:11:bc:7e:c7:
         7e:3e:cc:0e:b1:49:54:fb:f5:d0:b9:bf:04:db:4b:93:f4:86:
         4f:2d:f9:84:82:b2:aa:b9:1a:92:df:03:a6:e8:76:ec:32:a0:
         94:20:29:81:ab:37:f1:4b:02:e1:12:b5:d1:bd:7a:f1:2e:86:
         29:c4:b1:04:25:63:10:b3:2b:ad:f3:ea:48:bd:5b:83:62:42:
         0c:09:38:3a:25:47:f1:6b:aa:ba:e7:8d:30:b5:16:18:61:59:
         28:61:d8:da:06:11:52:84:3f:73:c6:16:e6:fc:5f:c3:44:63:
         ca:6b:9b:b5:ac:28:1a:a2:5b:67:cf:1e:90:0c:96:55:91:8e:
         8d:f3:64:2a:d5:49:65:9c:5f:0b:8c:6e:f3:92:4b:6e:52:ec:
         52:10:72:b0:cb:90:cf:0c:b2:25:bf:ac:de:3b:ff:4b:d7:2f:
         5d:f5:58:ee:1e:7d:63:54:28:c1:ae:50:f3:52:68:08:99:39:
         61:e9:21:b7:27:7c:ce:5d:7f:18:c4:52:04:65:53:7d:59:2e:
         f7:6b:0e:ef:98:2d:82:0c:28:23:e7:55:2c:15:23:41:1d:8a:
         78:e7:56:aa:75:82:36:16:db:d7:83:39:34:b4:99:32:aa:eb:
         df:ab:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:43:06 2026 by rpki-client