Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/488c93ee-ea7f-3519-9b32-c4715338ce70.roa
File:                     488c93ee-ea7f-3519-9b32-c4715338ce70.roa (raw, json)
Hash identifier:          d5jWfdhL3XcqVVXAHJ6jVm+xmRc9oLwnj1XfhiETX8E=
Subject key identifier:   E9:82:45:74:23:DA:13:FE:31:0D:C3:7D:D0:EE:FA:2C:C8:F2:89:CA
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584D300A4C887355FD8F7DA13920
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/488c93ee-ea7f-3519-9b32-c4715338ce70.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2602:80a:2001::/48 maxlen: 48
                          2602:80a:2002::/48 maxlen: 48
                          2602:80a:2005::/48 maxlen: 48
                          2602:80a:2006::/48 maxlen: 48
                          2602:80a:2007::/48 maxlen: 48
                          2602:80a:2008::/48 maxlen: 48
                          2602:80a:2009::/48 maxlen: 48
                          2602:80a:200b::/48 maxlen: 48
                          2602:80a:200c::/48 maxlen: 48
                          2602:80a:200d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4c:88:73:55:fd:8f:7d:a1:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=c98e073d-76e8-4791-99d0-c5435fa10ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:cc:8c:c2:51:ae:c9:d0:c6:d4:20:97:26:
                    62:78:d2:d2:0a:5e:4d:66:f1:a0:f4:bd:bd:b5:94:
                    e2:62:a6:b4:77:d4:b5:82:9b:ea:d2:a6:72:ce:67:
                    7c:c0:00:cb:c5:e2:6b:4c:0e:6b:97:bc:bd:f9:4e:
                    22:e6:bd:33:50:92:3e:2c:fd:cf:ff:09:59:4a:df:
                    2f:62:8e:ca:1f:5b:80:59:bc:19:24:17:76:95:82:
                    fc:e6:8e:b7:63:08:b5:8e:01:9f:b9:a6:ef:56:39:
                    fc:31:77:b4:8c:73:28:82:b9:4c:54:39:b2:2a:b6:
                    77:e6:71:02:6e:47:c5:f5:e9:d7:13:28:22:03:12:
                    4f:fe:b2:ae:2b:23:37:6b:3b:b2:14:81:aa:61:0c:
                    c9:6e:cf:75:ea:69:eb:ee:b8:dd:77:08:2b:4a:8c:
                    6e:5b:27:4d:d9:3b:45:91:bc:d9:50:63:bf:e3:1b:
                    f5:c8:8e:e2:98:3d:df:2b:c7:a1:8b:e1:84:86:42:
                    e6:f1:44:20:43:26:71:45:ed:b7:7c:25:ca:41:48:
                    06:43:85:3d:80:a7:aa:32:21:9d:eb:30:0e:62:74:
                    00:02:8a:3c:fb:13:bc:04:5f:bf:7f:24:67:66:27:
                    d5:1f:37:4f:ab:1b:be:e5:e6:fb:91:1e:67:cb:b5:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:82:45:74:23:DA:13:FE:31:0D:C3:7D:D0:EE:FA:2C:C8:F2:89:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/488c93ee-ea7f-3519-9b32-c4715338ce70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2001::-2602:80a:2002:ffff:ffff:ffff:ffff:ffff
                  2602:80a:2005::-2602:80a:2009:ffff:ffff:ffff:ffff:ffff
                  2602:80a:200b::-2602:80a:200d:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:73:ef:3f:96:83:29:b3:f5:ed:f7:d8:23:d4:eb:39:83:f1:
         51:12:bb:9d:61:1b:29:4b:83:05:68:5a:78:94:ae:14:fc:a1:
         93:f9:8a:20:df:45:0c:6a:94:d9:1b:54:ec:b4:ac:dd:ad:ed:
         d8:4d:14:04:6f:6a:2f:c8:17:b6:91:02:db:0d:34:a0:ce:91:
         83:f4:f1:6e:93:32:e8:5d:a3:9a:c7:97:0b:c1:41:98:17:58:
         9e:e6:6b:e0:7b:0a:07:f1:52:bb:8b:04:c7:d9:f6:ea:97:d0:
         96:f2:72:ca:61:cd:84:65:7d:81:59:59:cc:19:50:74:3c:b3:
         3f:81:d4:a4:da:e0:48:9b:3c:a9:9f:7f:6c:64:2f:3f:2f:88:
         b4:be:33:e3:a0:50:88:25:d1:2b:92:4b:9d:6f:07:12:b4:b4:
         f3:be:aa:99:82:d7:bc:35:09:3a:35:c9:50:52:e7:e7:b1:49:
         8a:3c:bd:7e:cc:ce:86:0c:9b:bb:a6:f9:4c:0c:fb:45:9e:f4:
         b8:da:fb:4a:d6:fb:cc:21:f9:98:3d:f8:ef:2d:a3:3d:d0:a3:
         6c:39:45:90:63:7a:96:b1:a2:bb:51:fe:b8:0c:01:3e:90:d7:
         36:22:de:66:0b:c8:a8:10:2d:74:6b:a6:cd:d3:05:ce:f7:dc:
         8c:ae:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:48 2026 by rpki-client