Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/7e70d36b-93cf-36da-82d1-3621d63312aa.roa
File:                     7e70d36b-93cf-36da-82d1-3621d63312aa.roa (raw, json)
Hash identifier:          gr+QCoCrULBGTvUwztQ+i4Uo3BC5HC+kMxbJGxH8ue8=
Subject key identifier:   0B:F9:29:8A:63:19:AB:A7:B1:DE:BB:46:07:09:86:E8:27:11:5B:36
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F4328584D1F4A0E4B4A7C5CA8594B4200
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/7e70d36b-93cf-36da-82d1-3621d63312aa.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2602:fcd8:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:0e:4b:4a:7c:5c:a8:59:4b:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=05d22f81-30e9-42a7-a8f3-71159d0ad2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:dc:83:23:b6:fd:bf:be:98:b3:11:05:fb:
                    c2:54:d3:c0:42:14:3b:af:6f:b0:fb:1f:68:27:ae:
                    d0:17:74:81:0c:94:12:f2:62:45:57:be:83:60:7b:
                    e4:b6:42:63:e9:3a:34:62:f9:0e:fa:27:14:20:79:
                    b3:9a:1a:ac:a8:f9:2a:87:6f:ae:c7:d8:22:18:ae:
                    96:8e:51:b5:52:5c:49:51:25:c2:19:48:74:5d:be:
                    0c:e1:4f:f2:1a:14:ef:e6:bd:4a:c4:40:9a:5c:5d:
                    32:29:f7:c8:14:7c:dc:72:b0:eb:23:32:28:35:a1:
                    6e:ef:20:95:63:5a:74:18:e0:80:db:b2:fa:40:34:
                    f3:61:44:3b:22:dd:b4:01:f2:d3:b6:ee:a2:85:87:
                    fe:60:b3:1a:00:cf:70:db:67:9f:83:18:c8:af:c3:
                    80:93:59:52:46:ab:c6:73:99:ca:4b:9c:21:b7:8b:
                    7c:9a:76:34:97:ad:a9:bc:66:29:27:cd:15:13:5e:
                    0c:de:0d:b2:4e:87:e3:aa:bf:5d:6d:46:0d:3a:3c:
                    51:b8:f4:00:5e:c9:9f:a4:2a:e3:10:c3:8a:8f:ab:
                    24:67:6f:14:23:9c:d1:5c:77:aa:0d:3b:bc:c5:0e:
                    df:01:7b:54:6b:fe:63:2f:b5:72:c6:07:71:06:a3:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F9:29:8A:63:19:AB:A7:B1:DE:BB:46:07:09:86:E8:27:11:5B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/7e70d36b-93cf-36da-82d1-3621d63312aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:31:c4:22:39:96:39:7e:ca:16:d5:3a:e9:3f:88:20:9c:7b:
         56:f8:75:27:72:2c:f2:c0:ba:23:0f:8d:3a:b2:8d:f1:53:ab:
         3e:b9:54:bf:f5:53:6b:6f:a9:23:83:f0:4b:0b:36:8d:6c:81:
         fb:28:e3:49:5a:29:b3:1e:c7:ab:e8:76:27:bf:9c:56:a0:ed:
         bd:a5:05:d1:cd:ef:8b:9b:3b:44:0d:e4:a8:7b:a0:d0:17:1b:
         ee:c0:fe:dd:8f:ec:1f:94:c5:6c:89:80:ac:a5:76:96:31:af:
         a9:8b:7d:e4:ce:46:13:98:00:38:70:88:5a:f8:58:08:af:d4:
         a4:82:65:de:5a:af:e9:14:dc:a9:13:f3:a1:a9:2d:1b:88:d6:
         60:1c:c2:76:64:e3:10:36:22:2f:1e:b3:45:b2:b2:d7:3b:be:
         5c:cd:7e:ce:28:85:46:af:09:9f:79:81:25:18:f8:cf:8e:db:
         51:e2:b0:d5:e8:cc:ed:57:e0:bf:da:bd:ce:fa:d9:3e:6c:e3:
         d1:04:65:dc:5a:1c:69:14:ca:76:e5:c0:b1:5e:00:70:43:fc:
         5b:67:2f:32:17:3a:1e:c3:6c:b4:52:4b:f5:ec:2d:94:1d:08:
         eb:5e:bb:80:24:f0:51:44:3c:f0:33:f0:c9:f2:f8:9a:a8:b2:
         4a:88:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:23 2026 by rpki-client