Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/25a05a0a-020e-370c-bff5-a8b1b1536622.roa
File:                     25a05a0a-020e-370c-bff5-a8b1b1536622.roa (raw, json)
Hash identifier:          VpuZZI+AV29GGJCHald0pQSOkGPksnEBNjphjWWQCKA=
Subject key identifier:   45:9A:BB:99:F4:B0:8C:A7:C2:C0:A5:AD:B1:70:55:3B:46:C5:4E:B7
Certificate issuer:       /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
Certificate serial:       010D0C9F4328584D2BDA018E3AD7C0874F194B80
Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/25a05a0a-020e-370c-bff5-a8b1b1536622.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     400942
IP address blocks:        2602:fcc3:4e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:01:8e:3a:d7:c0:87:4f:19:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=e2ff153e-95e5-46b1-9f0d-06addb52bd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:e4:48:f8:29:07:39:25:e0:2c:ce:f6:99:
                    c1:f3:0a:3a:08:d1:6a:90:d0:b6:a0:00:1c:26:cd:
                    22:f6:6e:09:5f:d9:da:b2:2f:78:5e:e8:9e:ac:b5:
                    74:df:fb:7d:01:6c:3f:69:e2:af:d7:6c:45:10:55:
                    1b:7a:97:1d:0a:ab:d5:f7:f3:a2:65:16:cb:49:39:
                    4a:20:18:3f:13:94:13:50:5a:83:16:73:b0:00:8a:
                    7c:b7:f9:2f:0e:ae:e5:a4:8f:a8:f0:89:5a:f7:93:
                    97:24:49:eb:64:a3:fe:f9:74:c8:59:75:8e:a7:91:
                    e9:47:a2:a7:bc:4f:c4:9f:e6:3b:ed:9c:8b:68:88:
                    eb:e0:43:d9:57:4a:fc:6a:b8:77:8c:10:14:03:12:
                    6f:ef:31:3f:bd:1e:c8:e2:c5:61:1a:8a:d0:9c:2b:
                    71:44:94:08:e1:3d:fb:ea:bf:4e:74:74:5c:0c:65:
                    b4:f9:50:eb:82:31:38:1b:6c:86:d0:cf:7a:4b:b1:
                    30:3b:88:9c:b4:9f:d8:ca:45:93:2a:a6:20:50:23:
                    48:a8:73:91:5b:bd:05:e2:45:dd:7c:2e:37:6c:05:
                    8e:d4:a1:1a:51:06:cb:99:7a:8b:cd:87:ec:80:da:
                    24:45:53:dd:91:03:9b:0f:be:32:8b:f2:7e:fa:33:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:BB:99:F4:B0:8C:A7:C2:C0:A5:AD:B1:70:55:3B:46:C5:4E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/25a05a0a-020e-370c-bff5-a8b1b1536622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl

            X509v3 Authority Key Identifier:
                keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc3:4e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:b0:15:b0:15:20:cb:3a:b5:b4:49:dc:e7:0a:e6:97:70:
         a9:97:03:41:b5:07:3b:62:f7:bf:b9:ee:6a:72:d8:a9:df:d2:
         9b:a2:84:37:1c:62:ff:71:e3:82:aa:b8:f7:1b:ad:8d:26:c2:
         49:09:a9:ad:88:80:64:f2:cc:27:62:2d:98:91:71:72:f4:f1:
         fb:41:c9:74:95:3b:0f:74:9f:04:10:f3:79:2f:6f:5a:16:7b:
         b2:72:54:3f:bd:0d:a3:cf:ec:c0:36:60:d2:45:1e:62:4a:99:
         2c:5a:1d:ff:c5:8e:aa:38:28:6c:e1:c4:27:41:82:93:cf:8a:
         c1:c3:85:a1:d2:a3:5b:0c:b4:99:8f:75:00:9b:70:53:46:47:
         18:e5:69:01:63:7e:83:8b:5a:1d:8a:2f:20:b6:b3:93:b4:4c:
         02:13:de:3e:71:94:05:08:d7:2b:f7:af:ff:8a:08:67:d8:36:
         87:5b:3c:80:39:31:c2:b7:46:54:fc:02:3b:86:c7:a4:bf:28:
         7f:22:35:e5:4a:bf:a1:4e:2a:8f:54:78:34:42:a5:20:1f:a0:
         73:21:ec:d6:ac:96:de:68:42:ea:19:6b:c7:6d:0f:c0:6e:41:
         29:0d:46:20:3d:b6:f5:a4:04:9b:77:2d:65:09:45:73:98:38:
         5e:f3:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:51 2026 by rpki-client