Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
File:                     c057190d-ef07-3947-b98a-abc03a5cd3ac.roa (raw, json)
Hash identifier:          186mf/g9xg4eQScbjx62mB7ADjEuvdlXyFGbxou0sRY=
Subject key identifier:   F9:47:D4:B5:44:52:33:35:28:D2:EA:55:75:3B:28:74:75:41:67:F0
Certificate issuer:       /CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
Certificate serial:       010D0C9F4328584D47C4E70E356183876390B540
Authority key identifier: 41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     400647
IP address blocks:        2602:f8ce::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e7:0e:35:61:83:87:63:90:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=99489b57-f1fa-41ab-b9e6-fbe292f12e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:c3:4c:cb:9d:92:62:22:8e:ee:cb:68:f8:
                    3d:d8:3e:1e:92:e2:90:db:5d:aa:ff:8a:45:96:a6:
                    d1:cb:9d:cf:df:08:97:2f:fe:f4:e5:d1:56:ae:33:
                    61:b1:36:26:54:4c:b1:d1:2b:2c:f1:7a:e7:0e:e4:
                    10:09:99:30:81:11:9e:a0:e1:00:a6:e6:a8:df:ad:
                    8f:44:94:65:98:52:ab:ca:7e:2e:bb:b6:83:1e:b5:
                    f0:7d:ad:c8:02:46:a2:76:e4:c2:3b:2f:4f:3f:30:
                    03:9d:5e:c8:72:1f:58:4d:b4:5c:61:a4:49:7c:9c:
                    8a:3d:07:88:7f:0b:b2:98:cf:4d:37:89:d0:93:db:
                    6b:62:2e:ae:94:ca:3c:16:c9:38:d7:3c:9c:30:8b:
                    f5:b5:75:e7:a3:a4:2c:e3:15:82:62:d3:cd:ee:57:
                    9f:2b:69:e9:9a:ed:c2:98:be:21:99:64:3d:f8:b6:
                    86:15:ff:8c:eb:0c:03:8c:d8:fa:cf:fe:45:c5:f8:
                    62:00:1d:58:80:e8:b5:52:6b:04:bc:99:68:34:2d:
                    ce:17:8b:90:7c:cb:ec:11:83:b2:ce:5c:a1:e1:40:
                    81:99:5f:54:47:7b:19:bb:0f:8f:82:0f:bf:f0:82:
                    13:89:d5:56:4a:11:51:e2:08:1f:ea:0f:b4:21:be:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:D4:B5:44:52:33:35:28:D2:EA:55:75:3B:28:74:75:41:67:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl

            X509v3 Authority Key Identifier:
                keyid:41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ce::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:22:da:4b:5a:50:9c:81:51:f4:7a:4a:ec:3a:e2:42:67:
         bc:a5:4e:fb:0a:5e:bd:4f:62:cf:56:af:b7:07:ce:7e:c5:a3:
         40:f3:2f:bc:4a:a3:7c:fd:29:cc:63:36:a1:d9:c7:4a:79:ad:
         8e:c1:1b:d4:a9:df:a6:76:00:a4:da:6e:f2:b6:37:a7:45:16:
         9c:9a:6e:f7:b3:4c:ec:32:7c:8f:e3:02:2a:b3:d1:19:9d:b0:
         ad:12:7d:f4:27:ec:7a:4b:98:95:64:1e:bf:8e:b4:f7:25:57:
         53:bc:e5:02:40:f1:32:49:1a:17:f2:bd:17:e1:11:7f:fa:0b:
         a2:76:a0:b7:17:7a:81:a4:a7:7c:de:c7:d3:9b:eb:62:4d:28:
         1d:d9:e7:c4:cb:84:91:ec:ca:5b:24:e1:ec:ab:ba:42:8a:27:
         49:ea:6f:40:b7:31:e2:88:7b:6f:f5:cb:ab:68:54:0a:10:63:
         04:3e:12:7a:2e:26:6a:04:dc:56:97:46:d6:69:39:eb:55:e1:
         60:eb:f0:c1:5b:a3:df:86:af:96:bb:29:41:f6:85:9d:51:de:
         e5:84:b8:6e:40:12:f7:75:02:05:81:8d:a5:93:15:45:4c:8f:
         c6:1d:ca:95:b1:db:1a:06:54:b2:30:76:bd:22:17:5a:4b:a5:
         38:3c:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:12 2026 by rpki-client