Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
File:                     8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa (raw, json)
Hash identifier:          YSytCeHYxwRN2g4V3n25lsME8RKeWiWs7aRV5Ky3oZo=
Subject key identifier:   E4:E6:48:30:17:10:A0:97:B3:57:38:6C:16:B5:E9:46:70:75:7D:FB
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584D300A501DB848D188ABE9F280
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     398351
IP address blocks:        2602:80a:2014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:50:1d:b8:48:d1:88:ab:e9:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=481a1f7b-2fcd-46d1-80ef-1681feeb7e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:59:aa:88:3e:7a:17:32:d2:3d:ab:a6:4c:
                    1b:43:1d:7c:41:da:e0:a3:6a:93:45:4d:c6:e2:df:
                    3e:dc:e7:f5:ad:c6:c6:bc:5e:f3:89:38:b2:0e:d2:
                    d2:b3:f6:0a:4d:08:2d:7a:db:69:be:eb:82:4c:74:
                    85:79:cd:a9:a8:55:83:eb:9f:e2:a2:39:d0:be:8d:
                    65:41:d6:e0:4b:e4:e7:79:e9:b5:43:ce:f0:73:c1:
                    60:3f:61:87:9e:20:ca:a7:ad:73:dd:ed:bf:4b:63:
                    b9:28:a6:b0:a1:0e:e1:e2:f2:b5:3d:93:66:0e:50:
                    84:e1:1f:eb:20:d7:a9:6c:aa:3d:8c:31:10:dd:f5:
                    10:ef:82:43:57:11:6e:6d:24:09:29:b1:13:19:72:
                    37:ff:5f:17:c4:3f:45:ec:48:d4:88:70:34:75:c6:
                    9a:5c:a8:d6:0f:d5:a1:c1:84:7e:a6:21:a7:47:10:
                    42:6c:3d:e1:38:dd:68:c9:9f:e5:86:e6:b9:20:10:
                    7d:7e:6a:49:6c:0b:df:4a:4b:6f:eb:2e:16:a1:a0:
                    39:58:2e:96:58:e3:0f:9a:6d:12:02:f6:79:b5:2b:
                    f8:7b:e5:67:30:c5:30:72:1b:9e:d1:93:0d:81:97:
                    13:0f:0e:19:29:63:ec:fd:b4:1e:66:31:ed:c7:b1:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E6:48:30:17:10:A0:97:B3:57:38:6C:16:B5:E9:46:70:75:7D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ca:56:f4:92:4c:47:49:d3:3b:55:81:6c:2d:b6:b8:7a:24:
         d1:57:fe:d7:6f:26:4b:8e:95:f7:d7:13:eb:65:25:c6:0e:cf:
         70:34:1b:0f:a1:ff:50:2f:2f:e0:15:5f:19:24:57:bc:d5:9c:
         aa:9f:8c:8a:48:ee:36:52:f1:c1:f9:74:32:dd:89:64:1a:fa:
         88:1d:bc:15:ae:ca:85:0d:1c:25:6b:19:58:9d:e4:fd:ac:9b:
         78:7a:76:0f:29:5d:b0:15:7f:c5:46:34:c3:e0:44:21:39:0d:
         db:24:29:84:3e:c3:ab:aa:8e:1b:2e:6f:ad:57:d3:76:f8:35:
         9e:ed:4a:cb:48:41:5b:f8:27:33:6a:01:66:ce:10:17:4b:48:
         e5:19:f0:d6:68:c0:0f:67:bd:2c:9f:50:25:3b:b2:a1:28:2f:
         97:88:f1:0b:c7:66:a0:62:61:dd:c7:ea:85:ac:10:a9:44:36:
         46:6d:3e:e8:ec:10:72:69:d7:6d:22:e4:85:a9:44:6e:cf:73:
         85:e1:89:d3:5f:a2:b1:35:8b:08:37:33:40:9a:38:82:9c:bd:
         0a:4b:1e:6f:09:c3:be:3a:7c:59:20:96:06:a4:7a:9d:93:fa:
         ce:f3:c0:1b:3a:a8:1d:5c:ab:3d:24:41:6b:8a:d5:e4:91:32:
         9a:d9:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:12 2026 by rpki-client