Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa
File:                     3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa (raw, json)
Hash identifier:          qsNaQjU+qPl8Jb0oUxahLWc4uiC3DgCoQxQEAzVV+Qc=
Subject key identifier:   45:EE:4D:CA:5C:BE:03:84:C6:3E:A4:AB:E9:42:99:94:C1:3F:8D:ED
Certificate issuer:       /CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
Certificate serial:       010D0C9F4328584FC9FBD43EFE773CC2C777DE80
Authority key identifier: EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa
Signing time:             Tue 10 Nov 2026 02:00:13 +0000
ROA not before:           Tue 10 Nov 2026 02:00:13 +0000
ROA not after:            Mon 08 Feb 2027 02:00:13 +0000
asID:                     14618
IP address blocks:        2602:f883::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c9:fb:d4:3e:fe:77:3c:c2:c7:77:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
        Validity
            Not Before: Nov 10 02:00:13 2026 GMT
            Not After : Feb  8 02:00:13 2027 GMT
        Subject: CN=f4c154db-7cb8-4718-89a4-b51babe6fe60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:2d:ba:a4:94:13:b9:27:a7:02:9e:2f:3c:
                    c1:a6:af:c6:f1:f5:27:b1:2c:c2:cc:b2:39:e5:b2:
                    cc:44:b3:01:97:b3:93:e9:b0:de:98:7e:14:c7:2c:
                    d4:c9:cf:db:1b:d3:89:bb:88:9a:81:b9:79:1f:00:
                    c1:61:d4:84:2f:5d:81:87:21:be:d4:d2:ff:2e:92:
                    23:b6:68:a7:48:e7:b3:82:3f:f1:5c:62:87:dc:c4:
                    9d:b8:ad:fa:07:eb:81:1f:db:28:e6:88:91:f3:4b:
                    0d:02:36:4c:a3:a4:ef:d9:87:2d:17:fe:65:cb:1a:
                    b0:0b:27:b0:b6:8c:6f:aa:34:cb:8f:d4:bd:ed:5d:
                    57:b0:a3:4f:1a:6b:66:f4:8f:90:a1:e7:d5:f8:1b:
                    0c:9d:c1:a6:9a:1a:c1:e1:13:d9:89:c1:bc:ae:85:
                    e9:c0:d6:ba:9e:eb:7b:7e:7f:5b:f1:e5:6c:a7:22:
                    9a:a9:e6:1a:88:13:8b:2d:69:aa:4c:f9:3a:2a:de:
                    15:d6:5e:93:a3:5e:20:b0:da:b1:58:e7:4d:a7:3c:
                    3b:e7:9d:d8:54:a5:90:30:4a:09:b1:12:4c:ea:a0:
                    92:f0:65:79:1e:b2:1f:79:b8:4c:a1:58:ac:6c:77:
                    6c:f6:35:c9:d9:fc:36:ab:13:2e:6c:cb:40:26:50:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EE:4D:CA:5C:BE:03:84:C6:3E:A4:AB:E9:42:99:94:C1:3F:8D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl

            X509v3 Authority Key Identifier:
                keyid:EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f883::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:1c:e8:7c:37:91:de:ef:87:8c:15:25:c0:b9:49:df:20:
         52:c9:3d:b5:9e:f5:df:d6:00:37:d1:32:ca:63:27:ae:ee:93:
         6a:5f:47:ac:50:3d:5b:2b:d6:0a:16:88:ee:5f:7c:eb:8c:db:
         9a:6c:3c:8c:4e:06:ed:eb:95:f9:20:bd:9b:b3:3a:05:4c:5d:
         2f:5b:3e:f1:24:b6:e3:f1:29:29:43:8d:67:b1:f8:7f:24:7a:
         0e:63:c3:e8:16:47:74:6b:b3:07:a2:42:71:15:d7:20:a7:09:
         94:c5:cd:bb:ab:35:ac:6c:d2:77:88:c1:b5:39:ff:e2:b6:14:
         42:48:90:39:1c:e2:bf:20:80:db:b0:2a:b6:c4:6d:64:d0:dd:
         5e:d4:bd:d7:29:80:65:b9:a5:ce:93:9f:d5:0b:19:a9:f7:05:
         83:82:1f:10:0f:ff:64:bc:bf:e0:10:53:41:50:e8:10:68:26:
         de:3f:3d:4c:67:82:d4:4a:c8:15:b5:8e:3e:f4:19:46:3f:be:
         28:45:e4:5b:c1:dc:7e:4e:ba:fd:ca:6b:78:8b:78:a4:6a:d8:
         dc:7f:ce:57:14:b2:4e:1b:47:ba:44:b8:bb:0e:75:da:7b:c4:
         3f:5a:25:67:90:4a:92:e6:a9:15:c7:e3:5c:16:fc:5a:dc:31:
         c3:80:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:51:58 2026 by rpki-client