Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/f114d524-68df-36c3-a139-26075d407e47.roa
File:                     f114d524-68df-36c3-a139-26075d407e47.roa (raw, json)
Hash identifier:          MrVKEzq1yQJgduaNoKYZZgEWyZsR44Ff2jP1aCl3D/I=
Subject key identifier:   FF:F3:67:7F:AC:0F:AB:73:67:13:DE:77:8F:FA:EA:CC:D3:78:17:34
Certificate issuer:       /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
Certificate serial:       010D0C9F4328584D0A77BB084B4DDC4AAB1E4F04
Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/f114d524-68df-36c3-a139-26075d407e47.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     401466
IP address blocks:        2602:f874::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:bb:08:4b:4d:dc:4a:ab:1e:4f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=c22ceab3-8b2b-4bd6-a041-95b8f073f750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ea:2e:bb:d2:14:d0:8c:72:23:05:19:cf:75:
                    dc:ea:df:ee:ae:02:e5:8d:86:6c:52:a3:98:3a:6b:
                    e5:ea:e1:2c:d1:f1:20:60:a2:80:ee:6f:13:b6:10:
                    6f:ed:9f:90:cd:2d:3d:90:51:3e:fb:1d:e8:e2:72:
                    3f:db:c3:61:87:0a:4f:1a:6b:85:70:c3:9a:79:72:
                    f1:6b:e6:8a:11:7d:8d:81:08:bf:c3:4f:94:41:23:
                    bf:62:e2:03:1b:34:75:3a:09:db:60:01:93:ea:75:
                    5b:1f:c9:44:b9:ff:13:4b:03:d2:a3:bb:8d:69:fd:
                    a7:a0:16:aa:bc:a1:0c:f6:16:e9:81:98:9d:42:8e:
                    8c:12:33:de:1d:ff:6c:62:8b:9d:24:08:df:e4:c0:
                    dd:76:f6:f7:05:0c:1c:b1:f3:a4:12:46:49:de:19:
                    57:bb:05:20:eb:48:f2:7b:3e:9d:be:e3:4b:28:5e:
                    4e:ef:94:d4:e4:a1:3f:de:6e:f9:f6:08:ec:f8:3a:
                    d8:4a:66:ae:81:e7:5f:21:ad:1f:d6:91:80:27:5f:
                    e9:f8:01:85:70:61:1a:56:81:cf:56:b1:d8:cc:2a:
                    c2:a8:87:73:25:39:76:7a:4d:29:21:b1:a3:90:05:
                    d6:09:27:83:a7:ea:f0:7a:d4:b9:77:4b:d9:23:43:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:67:7F:AC:0F:AB:73:67:13:DE:77:8F:FA:EA:CC:D3:78:17:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/f114d524-68df-36c3-a139-26075d407e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl

            X509v3 Authority Key Identifier:
                keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f874::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:59:ba:53:ba:cf:90:4b:a9:e0:09:95:68:e7:1d:a7:ed:6b:
         79:e1:f2:de:4e:79:db:8f:2c:6c:7c:e2:71:cc:af:a5:12:d9:
         d5:a4:45:e0:95:9c:5d:3c:3e:08:73:cf:8b:3b:e1:41:b3:6f:
         e3:9c:0b:c3:09:94:3f:4c:80:af:b1:30:3f:b8:35:f2:8d:5f:
         51:de:f8:b0:20:e4:7a:a2:ba:0a:a6:29:4a:e3:3a:b1:cc:93:
         fe:c8:cf:d7:0b:b5:06:fa:d9:1a:f3:2a:4b:a5:1e:04:f7:e0:
         33:3a:cf:36:5d:58:57:fc:5e:5f:35:0c:6f:c2:87:51:9d:b6:
         8e:0e:75:4f:76:66:83:54:0e:ba:f3:ad:c5:7d:b6:5a:b4:42:
         b7:9f:d1:06:53:c0:e0:7b:ec:77:6c:18:ca:b1:94:83:93:9e:
         46:86:ef:db:ec:32:22:cc:00:cc:07:a8:05:05:72:6c:5f:1a:
         17:42:7b:b5:59:95:35:29:b0:4b:2a:d6:6b:e4:53:35:61:eb:
         ec:5b:9f:b1:a5:0c:fc:02:9a:f1:49:d3:ca:81:1a:64:8d:bb:
         3d:ef:6b:f8:af:89:4d:df:2f:92:2e:63:f5:a3:5f:ab:70:2e:
         f8:b6:f0:b7:40:d5:b8:1b:3b:e3:c6:e9:3f:03:9c:4b:fa:1f:
         c3:38:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:20 2026 by rpki-client