Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/9b5da4eb-1ce5-36d1-b12f-82d977a5e450.roa
File:                     9b5da4eb-1ce5-36d1-b12f-82d977a5e450.roa (raw, json)
Hash identifier:          mccNDmBwr0p3SiH0Gt7dVn8XfDsl8qqZS3ceLYME1k8=
Subject key identifier:   AC:B7:BA:71:21:02:40:6C:32:2F:AB:53:44:2B:BB:74:D0:43:EB:06
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584D40CA3E415D420103AB4297C0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/9b5da4eb-1ce5-36d1-b12f-82d977a5e450.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     200182
IP address blocks:        2602:fd50:1060::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:3e:41:5d:42:01:03:ab:42:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=735b9c6f-84aa-4403-abe0-74f61a722387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:57:86:2c:30:a6:59:b0:ca:8a:76:1d:ac:
                    b2:fc:bf:97:55:33:74:db:91:f8:a7:2f:d3:eb:08:
                    fd:76:6b:e1:0a:be:b5:89:34:46:45:71:65:c7:bd:
                    98:28:bc:8f:78:95:8b:07:9e:85:90:f6:5a:ba:2b:
                    71:b4:98:91:34:fb:ec:16:84:75:0c:e9:51:93:8e:
                    9f:09:78:1f:bd:d3:10:f5:11:41:67:68:b1:00:57:
                    65:bb:62:72:a2:20:77:62:93:64:cd:48:03:a3:e6:
                    0d:9f:95:09:7f:a4:8d:f8:58:07:84:ac:1e:17:5b:
                    b4:16:48:d7:ea:3e:4e:c1:e7:e9:03:d3:6f:8c:6c:
                    8c:4b:6f:da:04:cd:75:4f:15:08:d4:51:79:d7:5c:
                    dc:23:f7:ef:90:96:24:1a:29:b2:7e:da:cf:41:df:
                    9b:c0:20:55:f6:ed:af:89:98:38:77:af:e9:ec:39:
                    de:e6:b3:9f:3d:a4:87:5d:11:78:3c:1a:e4:eb:ed:
                    8d:0f:9b:e5:4a:88:f6:38:64:1b:32:37:ee:88:85:
                    bc:df:9a:eb:62:b9:32:48:61:92:31:d1:52:fc:d0:
                    9f:ba:33:7b:e3:90:8f:00:df:42:b7:ec:37:bb:6f:
                    9b:c3:77:c4:cc:b2:eb:04:1f:bb:13:7b:64:ff:e7:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B7:BA:71:21:02:40:6C:32:2F:AB:53:44:2B:BB:74:D0:43:EB:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/9b5da4eb-1ce5-36d1-b12f-82d977a5e450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:1060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:35:b5:0c:8c:f7:7e:bb:34:a3:c4:e0:84:e4:8a:61:60:4b:
         2f:49:c4:be:45:b6:6c:06:c3:ad:30:b6:bf:7a:21:ab:ba:e0:
         a5:42:3e:b1:be:bc:4a:f0:2b:f4:43:dd:29:d0:f0:48:4e:0b:
         59:25:e8:40:6a:1e:b7:39:4b:50:10:1f:36:5e:b0:ca:2c:7c:
         45:52:51:16:71:a5:95:d2:c9:1e:f1:2c:50:e8:e4:31:0f:1d:
         93:fa:63:f1:d0:57:16:70:77:c0:45:80:b9:9a:ca:32:b7:3f:
         7b:c5:8e:b4:3a:37:d5:79:d0:88:e2:9a:87:1b:a1:29:a6:d1:
         66:45:c5:af:bc:21:ea:e0:c8:e5:22:4b:0b:5a:c6:e4:30:38:
         22:db:46:28:7b:83:1a:e8:ed:a7:7a:de:3d:82:a6:52:b9:4e:
         e9:43:af:84:e4:a9:e1:53:06:84:1f:48:f5:b2:ce:93:8b:10:
         d8:89:ee:0f:88:e9:d4:b7:24:51:9e:a1:fe:5d:bd:0e:b8:59:
         9a:34:41:5b:a7:c9:bb:c0:d6:56:98:f4:cf:18:4b:47:41:6d:
         8a:8b:f5:ec:75:31:89:7b:79:5b:9f:94:09:3d:74:bd:c9:b8:
         ae:e5:75:7c:19:40:91:cb:ca:32:e3:05:e4:1d:37:97:1c:13:
         a0:cc:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:07 2026 by rpki-client