Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa
File:                     02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa (raw, json)
Hash identifier:          J4J1BvZfKTDD678+m1wScrhlVOGCdxA7HH0c4+hoZls=
Subject key identifier:   C4:C5:54:54:A8:47:09:9A:09:61:DE:87:BB:C5:D0:28:B9:39:9D:15
Certificate issuer:       /CN=e268af9f-122d-49b0-8f39-22b20b9bb857
Certificate serial:       010D0C9F4328584D300A3122C6B559383B784880
Authority key identifier: 9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     54975
IP address blocks:        2602:f847::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:31:22:c6:b5:59:38:3b:78:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e268af9f-122d-49b0-8f39-22b20b9bb857
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=e09e1ddd-246c-40f5-b8ab-369e844560cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:d6:b5:d8:33:9e:bf:f1:75:82:0f:a5:2b:
                    92:a1:4d:16:2a:a4:29:fa:44:aa:63:76:1f:1b:aa:
                    dd:20:18:13:37:13:4c:48:3b:87:de:dc:92:02:9e:
                    07:a6:99:d3:cd:5e:0e:8c:64:36:01:f3:1f:95:ee:
                    a1:3c:7d:15:00:a9:4a:a1:d6:cd:7b:41:7f:32:9d:
                    a7:76:89:de:21:55:8e:17:35:09:b5:d7:21:1e:03:
                    5d:e7:ad:53:17:9a:bf:4a:bc:a0:33:81:cb:82:05:
                    af:77:45:a8:0f:1d:00:05:f5:51:35:74:98:4d:d4:
                    31:47:1c:31:5f:8d:07:89:7c:ad:9a:1b:2c:35:4a:
                    08:eb:e7:c0:a2:e7:19:ee:38:63:de:22:d3:f1:c8:
                    9b:03:40:19:09:35:03:ef:84:c0:30:a3:8c:9f:b2:
                    c2:cc:5a:08:8c:50:77:ce:80:0a:1a:02:b7:55:c9:
                    59:39:63:e9:d7:be:a9:a7:bd:1b:ac:17:e1:ff:b9:
                    f5:ea:a4:64:7a:5a:97:8f:d5:c8:ad:f5:1a:6c:34:
                    bb:eb:78:66:8e:f3:9d:95:e5:9f:66:92:96:50:7b:
                    d0:2e:c8:81:e4:14:dd:4f:0e:62:84:46:b8:1f:e5:
                    01:59:45:f3:8b:ed:36:7c:b4:13:1a:54:80:b7:60:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C5:54:54:A8:47:09:9A:09:61:DE:87:BB:C5:D0:28:B9:39:9D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl

            X509v3 Authority Key Identifier:
                keyid:9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f847::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:63:1a:e1:94:be:b8:21:1f:71:14:39:db:f3:de:31:2b:ec:
         08:d1:31:09:eb:59:fa:0b:97:bb:df:05:51:5f:80:07:66:3c:
         1f:b9:8b:1f:19:01:a6:68:21:88:37:86:eb:b3:35:c2:c0:0e:
         02:59:d2:43:2c:e0:5d:99:7c:d2:6a:cf:ba:89:f7:70:3e:83:
         35:0e:d2:ae:af:eb:41:4f:ba:1b:47:93:61:01:d3:c0:ad:1b:
         79:96:59:28:ab:7a:cb:49:00:fc:c5:c8:e3:26:21:70:1c:eb:
         db:09:be:ab:0c:0d:e6:10:c9:0c:42:5e:2d:ec:9c:92:02:38:
         bd:83:6f:5f:d0:ce:d9:de:9c:69:d7:a5:88:2d:e9:8d:f1:92:
         ea:99:03:70:c2:7c:2a:1d:c2:ea:be:66:e3:ad:8d:c3:45:64:
         a6:de:82:d1:2c:30:1b:2e:06:73:23:6e:07:2b:15:ee:99:2f:
         31:43:78:ca:60:d5:82:e1:90:ab:d3:96:8a:66:f4:b7:bf:fb:
         6e:f7:f9:14:d9:00:2f:3c:ec:cd:39:21:f0:42:37:7d:4b:7d:
         1c:1e:15:64:92:2f:f6:6b:9b:05:fb:8e:5a:71:f6:20:21:79:
         4c:ca:c1:5f:82:38:99:17:e3:fc:6b:2a:38:2a:57:e3:4f:45:
         2d:1a:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:21 2026 by rpki-client