Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/f242bc03-c5ce-3675-803f-379b8d6db409.roa
File:                     f242bc03-c5ce-3675-803f-379b8d6db409.roa (raw, json)
Hash identifier:          QGdc9CYaajKUWU1QNGEJnITbKlFB7gPhyC27P3ugZMQ=
Subject key identifier:   D0:FF:33:E0:19:CF:26:45:B4:08:27:F3:43:6C:55:DE:25:D0:9D:0F
Certificate issuer:       /CN=12139121-8c82-4685-a6f3-76023bbcab6d
Certificate serial:       010D0C9F4328584D20AF4C507A8EAEC30A939F80
Authority key identifier: B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/f242bc03-c5ce-3675-803f-379b8d6db409.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     27520
IP address blocks:        2602:f8de::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:4c:50:7a:8e:ae:c3:0a:93:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12139121-8c82-4685-a6f3-76023bbcab6d
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=771c1693-9bd2-4a6b-89ab-92f7167a84a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:bf:da:a8:89:e4:ee:61:95:66:ff:59:2b:
                    40:22:9b:c1:ee:ad:9e:8e:11:b8:93:5b:85:b4:21:
                    04:bb:44:af:9a:a6:dd:6f:0f:fa:7f:a5:ae:1e:7c:
                    f8:87:30:f7:a8:6b:47:69:18:c7:b8:70:fa:ee:98:
                    23:c4:b7:33:c6:96:90:45:f6:cf:7d:9f:5c:15:81:
                    9d:ea:4e:db:d7:49:d5:52:a4:e7:99:0d:d9:4b:be:
                    4c:23:fa:6c:a6:20:cd:69:c4:bb:a8:6d:ac:b4:69:
                    09:0a:63:ad:3b:ea:3c:13:63:23:59:2a:51:f6:98:
                    2a:30:60:a9:35:47:5d:2f:59:2b:44:49:0d:3c:ca:
                    44:f3:d9:86:74:c1:7d:f6:26:ba:56:50:fd:6a:28:
                    c7:fd:80:49:9c:40:59:e5:e5:b6:01:b9:57:0c:80:
                    52:b6:82:59:8f:5f:f0:41:54:f2:b0:16:a1:d7:4f:
                    47:3c:5f:3b:dd:c9:68:9f:98:e8:6a:35:1a:76:30:
                    6a:25:2b:c5:6e:e1:1b:a5:d7:b0:67:22:03:60:94:
                    e0:95:04:ff:a6:d7:19:50:aa:3f:dc:b1:85:0d:90:
                    67:68:db:f5:da:b0:84:7d:8a:d1:db:40:ad:07:a5:
                    a1:c2:64:0a:a4:24:2c:56:f0:5c:c6:df:88:41:9e:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:33:E0:19:CF:26:45:B4:08:27:F3:43:6C:55:DE:25:D0:9D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/f242bc03-c5ce-3675-803f-379b8d6db409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl

            X509v3 Authority Key Identifier:
                keyid:B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8de::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:2d:76:12:89:7b:35:9b:5e:bd:75:d1:32:a7:2c:47:9b:
         29:d2:15:03:3a:2d:e3:f5:70:24:49:a3:39:94:f2:24:f3:40:
         77:7b:61:de:d7:d7:09:93:89:0a:35:a7:52:6c:b9:80:b4:8b:
         cb:0e:f0:93:7e:6f:68:b0:e7:75:13:f6:68:f1:3c:47:59:f5:
         2f:a8:43:b3:d9:cd:63:08:ec:aa:1a:40:5c:10:b8:84:b8:ee:
         ec:9e:79:0a:d0:51:a1:eb:ec:06:b4:6c:48:5b:89:a7:2b:0d:
         9e:1c:a4:9a:03:3b:9e:7d:8d:a7:fe:ba:18:27:ed:15:37:de:
         dd:b8:ba:2a:5f:72:57:a6:69:aa:08:14:62:ee:86:05:94:28:
         07:b5:12:ca:09:5f:39:8c:86:b5:44:32:b0:59:dd:8a:3e:0b:
         71:c1:4e:f4:78:f9:ee:e7:3e:ae:10:af:c2:0c:4b:3c:e8:0f:
         3d:ef:9c:73:43:07:ba:be:dd:16:72:72:69:13:89:09:fe:2e:
         f1:55:ff:e9:ec:b2:52:5b:60:2a:c3:17:dc:30:14:25:6f:4f:
         16:46:07:9d:de:db:d0:32:1e:53:c3:ab:ff:a3:17:2e:c9:3c:
         1e:24:3b:d6:db:3b:f7:03:51:c9:ad:c5:43:04:87:31:9a:fc:
         be:fe:1e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:45:12 2026 by rpki-client