Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702/5fba68f1-036b-3620-9117-bc7bd34c4b51.roa
File:                     5fba68f1-036b-3620-9117-bc7bd34c4b51.roa (raw, json)
Hash identifier:          H3ksgqXMqB63KPEX6IMYSLMgSEpl5kwHYgGuFuYXFsU=
Subject key identifier:   C4:C5:E9:01:DD:C0:F7:CF:F5:5D:64:55:28:BA:76:0E:43:C5:F4:91
Certificate issuer:       /CN=1975333d-ec26-41f1-82d2-a5ffd96bb702
Certificate serial:       010D0C9F4328584D1B19E839DD4D5D6167EE1C00
Authority key identifier: D4:2C:E0:BE:79:11:A3:B9:53:81:25:C9:E1:50:1D:34:5F:92:5C:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702/5fba68f1-036b-3620-9117-bc7bd34c4b51.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     31944
IP address blocks:        2602:f49b::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702/1975333d-ec26-41f1-82d2-a5ffd96bb702.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702/1975333d-ec26-41f1-82d2-a5ffd96bb702.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:e8:39:dd:4d:5d:61:67:ee:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1975333d-ec26-41f1-82d2-a5ffd96bb702
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=61498009-897f-44b6-a767-2419391a0606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:05:49:bc:5d:40:79:29:9c:be:f3:b1:14:
                    21:aa:cb:6c:af:9e:11:c3:f0:c7:da:86:6c:b1:81:
                    88:06:ad:e0:51:b9:bb:42:15:2f:55:9d:70:e4:bc:
                    96:d9:77:24:71:e0:ad:5b:8f:0e:f0:1e:a1:06:8a:
                    8c:68:23:b6:ed:7b:9d:77:b9:6f:2e:0a:2c:bc:4e:
                    ef:48:90:4d:e4:c1:35:d5:f9:c3:86:dc:01:07:94:
                    5d:30:de:36:42:b0:44:9e:75:15:f4:aa:83:f1:f4:
                    8b:0b:c0:44:cd:6f:8b:85:d7:c7:7c:3e:23:72:11:
                    17:52:f4:90:3b:99:d4:0c:d1:36:91:fb:d5:5a:88:
                    01:74:81:2f:eb:4d:5c:03:10:94:d6:79:fd:8e:27:
                    dc:4f:26:0e:f3:9f:b2:95:a1:6d:74:eb:ce:f4:e5:
                    a4:63:9c:f2:87:91:5d:4d:98:ef:a0:37:64:30:a8:
                    f4:1a:97:d4:9f:7e:a1:05:b0:22:51:46:4a:81:86:
                    21:f5:81:e9:56:aa:3f:fe:dc:e4:47:94:fa:6d:07:
                    0e:5a:b3:37:19:13:d4:73:b2:95:f6:72:4c:ae:01:
                    bd:5c:80:2b:47:d0:37:77:6d:74:a2:00:2e:f4:74:
                    14:dc:02:ba:3d:e6:21:60:62:35:75:c2:04:d6:a0:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C5:E9:01:DD:C0:F7:CF:F5:5D:64:55:28:BA:76:0E:43:C5:F4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702/5fba68f1-036b-3620-9117-bc7bd34c4b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702/1975333d-ec26-41f1-82d2-a5ffd96bb702.crl

            X509v3 Authority Key Identifier:
                keyid:D4:2C:E0:BE:79:11:A3:B9:53:81:25:C9:E1:50:1D:34:5F:92:5C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1975333d-ec26-41f1-82d2-a5ffd96bb702.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f49b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:68:bf:45:66:b8:e8:68:ce:63:5b:1e:77:c5:b3:5a:b8:41:
         51:b8:a2:63:32:14:1f:44:ac:96:24:3b:88:0e:7f:5e:02:7b:
         78:58:69:98:30:ab:e0:c6:3b:c7:0f:35:cb:a0:bb:8c:78:66:
         46:af:89:06:17:d5:8e:00:22:16:a8:d6:53:ba:b9:dc:7e:00:
         68:15:e5:31:32:24:20:76:8b:df:4f:94:e1:b4:ef:7d:0b:91:
         f9:59:23:50:8b:b8:d6:7c:b9:58:a1:04:92:68:f3:84:9d:17:
         53:ff:25:21:c5:1a:2f:61:36:e8:36:9a:62:76:c9:02:8f:97:
         ee:2a:2b:1a:27:95:60:66:4d:1d:e8:83:32:11:f6:e2:51:51:
         03:b7:75:50:0d:a9:7f:b8:29:e1:48:4c:1d:6f:80:61:01:49:
         cb:ed:d7:94:de:f3:4b:bd:7a:a8:b9:6a:db:aa:d1:6c:b9:de:
         c3:5a:8d:2f:2e:b9:8b:1e:f2:16:df:6a:07:38:56:93:ef:ee:
         18:c0:60:76:91:bd:f1:1a:c8:43:88:bb:11:ed:e2:b5:c8:4e:
         d9:53:0e:13:2f:b0:bc:de:51:67:80:d6:ab:2b:aa:33:2a:a0:
         93:ab:f9:55:ee:bb:07:be:3d:29:19:2e:1d:cc:be:c2:c1:15:
         1c:31:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:42 2026 by rpki-client