Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
File:                     bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa (raw, json)
Hash identifier:          dBXqsShLrPra3eeFTArqc4v5y021Mp7cTBcua9cNA78=
Subject key identifier:   80:D0:63:C9:75:03:B4:A6:65:E0:F1:EB:7C:04:F8:1F:00:95:D4:5F
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F4328584D359FD91C947CB23538828840
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     53356
IP address blocks:        2602:f90c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:d9:1c:94:7c:b2:35:38:82:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=ffad6ed8-dceb-423f-ae24-f0d2a76449d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:35:02:97:63:f2:7f:5b:40:52:d0:77:e6:
                    9f:5e:a0:c1:0c:8c:f4:63:03:71:92:4a:da:b8:4f:
                    70:b3:ea:48:83:d6:c6:a3:0a:a1:98:1f:8e:be:e0:
                    38:01:b3:6e:95:92:f9:a0:e8:b2:51:a1:46:2e:90:
                    c9:69:8d:74:74:7c:82:3e:22:da:08:88:15:1d:a3:
                    18:bd:12:e3:d1:97:c4:ec:13:e4:4c:dc:f8:24:33:
                    8a:df:46:95:26:97:f3:91:09:a5:c7:ca:9e:51:28:
                    72:09:63:78:47:5d:e7:be:aa:1a:a3:aa:11:83:cf:
                    6b:2f:48:7a:e4:52:b1:fb:a0:65:3b:23:3c:23:d4:
                    ab:98:38:22:ac:d7:6d:4c:37:e7:97:4a:08:ef:31:
                    2e:80:71:aa:c3:01:02:9f:41:14:5f:1e:24:6e:7f:
                    3d:b3:b0:cc:99:9e:74:5e:8b:f2:fe:7a:44:79:67:
                    b0:eb:69:b1:60:eb:2a:60:e3:a9:67:72:74:56:9e:
                    7b:8f:21:c6:38:11:15:ca:6a:5a:31:9d:0c:cc:66:
                    26:15:2b:6d:ff:51:28:d0:5b:69:e0:84:0b:8a:a2:
                    f9:c1:fb:01:be:28:c2:64:b7:91:15:9c:ac:65:f9:
                    fe:df:71:ba:97:f2:0c:14:aa:77:58:fd:ab:78:6d:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D0:63:C9:75:03:B4:A6:65:E0:F1:EB:7C:04:F8:1F:00:95:D4:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:e3:45:a1:8f:bc:b9:8f:eb:b0:44:22:c4:19:90:06:41:
         27:8b:a6:2d:bc:ed:0c:45:94:26:01:b9:7d:3e:73:1a:94:b8:
         35:1c:30:45:31:4b:7e:27:8f:c1:e4:56:64:aa:11:f8:4d:71:
         81:cc:2b:1c:fb:11:00:33:4f:a7:e9:4a:14:23:d3:1a:1c:ad:
         3e:e2:27:2e:57:15:87:e3:99:5f:45:31:93:de:65:71:98:5f:
         6c:49:2f:84:d7:21:5c:4c:ab:9b:6c:f1:1f:3a:6d:c8:ad:54:
         ce:5b:d8:24:0d:b2:1c:85:21:f0:8e:27:ea:04:b6:3c:a5:c4:
         22:92:3d:d6:40:2b:d7:51:64:94:a3:99:d8:1d:28:37:2c:0c:
         b0:97:d7:ad:26:c3:e6:8f:94:41:fe:a2:34:d7:a8:c0:46:d6:
         ba:ff:61:ba:85:0e:33:4c:3b:53:4a:fc:ee:33:f5:bc:59:fd:
         0c:9f:c6:fe:2e:4b:70:ac:a7:ea:83:81:b7:12:47:91:89:e0:
         15:05:f1:35:62:e4:4f:bb:2b:a2:70:56:93:36:4c:0f:01:2e:
         f7:20:62:23:75:4c:3a:73:cd:b7:b6:93:bd:81:52:3d:93:c2:
         a0:66:d4:cc:f3:b6:87:b3:c7:aa:bf:c0:c0:e4:0d:52:23:a2:
         b2:b8:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:47 2026 by rpki-client