Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/308356cd-b273-3d75-8f50-3ab39d90ff7e.roa
File:                     308356cd-b273-3d75-8f50-3ab39d90ff7e.roa (raw, json)
Hash identifier:          cimxXb0D/MO64PeFNa1T1D1h6YHi1HRe/HzEuQXm1jk=
Subject key identifier:   5B:A2:B4:92:22:22:9A:DA:9C:5D:B9:4C:58:5E:57:E3:66:83:47:85
Certificate issuer:       /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
Certificate serial:       010D0C9F4328584D4A8F80FAB4E4A0DA6AC5CBC0
Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/308356cd-b273-3d75-8f50-3ab39d90ff7e.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     214848
IP address blocks:        2602:f486:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:80:fa:b4:e4:a0:da:6a:c5:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=141c458e-b538-4797-b16f-05e0e35301d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:aa:07:21:4e:0b:74:39:4a:69:ca:ae:29:
                    82:3b:11:0f:a1:d5:97:21:03:c7:7c:4a:8e:13:b5:
                    73:b8:63:bb:34:fe:9b:55:8e:c3:aa:7b:d8:03:15:
                    83:38:cb:ce:8e:7b:2e:86:5d:ad:22:72:c1:b7:18:
                    1a:e2:59:ba:e9:63:87:c4:38:02:ab:b3:12:6c:40:
                    35:0c:bf:e9:f9:9b:d6:eb:7b:45:66:2a:f2:d1:f9:
                    1a:cb:94:ca:8b:52:d5:94:a1:47:52:d8:29:d1:62:
                    0c:ca:76:63:ed:4e:33:76:0e:7a:6b:96:ee:3a:2b:
                    de:84:7c:f0:9e:b8:d9:e7:78:35:84:3f:6b:b6:fd:
                    54:b2:e5:ac:27:30:45:2a:07:f4:1d:5f:89:84:4f:
                    6c:a5:46:39:79:53:fd:1a:e5:2b:3b:46:28:17:38:
                    8b:a6:c8:c7:ec:4e:6e:d3:b7:5c:bd:36:29:ba:a2:
                    57:74:83:d8:43:27:96:b5:eb:15:91:5a:1c:5d:4c:
                    09:9b:36:e6:35:19:1d:65:13:c9:55:85:df:57:6b:
                    00:e2:94:2d:39:d1:8f:de:d6:0f:5f:cf:1d:a3:16:
                    e3:a8:4a:06:d0:9e:68:97:7e:06:12:b3:c5:de:a7:
                    10:54:18:0d:09:f4:3f:ca:df:d0:24:79:35:1a:cf:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A2:B4:92:22:22:9A:DA:9C:5D:B9:4C:58:5E:57:E3:66:83:47:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/308356cd-b273-3d75-8f50-3ab39d90ff7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f486:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:78:ea:0e:b3:74:f7:25:77:08:2d:94:68:f0:9d:29:0d:
         85:d2:31:0b:f4:d3:4a:36:67:ac:4f:b7:f2:41:5b:52:27:5e:
         f3:b8:64:af:88:ce:66:1e:de:68:e4:75:48:61:c9:58:12:5d:
         88:58:72:8e:bf:14:44:5d:34:53:64:16:e7:3c:f3:8c:0b:9d:
         17:73:c3:2a:a4:4c:e6:f2:4f:7f:39:66:5a:6e:16:a4:9a:76:
         c1:53:bf:dd:bc:92:dc:74:c8:b6:32:1d:e7:77:e9:dd:10:a3:
         ca:fd:1f:d6:fa:0e:c2:71:d0:6b:1d:2b:fc:0f:b0:ca:ae:15:
         63:df:24:47:aa:38:f0:7f:44:bf:df:cf:e4:98:de:81:a7:22:
         99:ac:4a:59:26:29:65:0d:1a:47:15:92:73:de:9e:c7:c7:73:
         c2:db:65:ab:a7:7d:92:55:df:ee:4c:1a:8a:75:71:1f:04:d3:
         b0:68:57:5c:e2:c6:2f:92:bb:2a:df:4b:64:c2:3b:9d:6f:00:
         c7:0c:ab:fa:fc:d9:6b:7c:21:78:80:c2:56:19:2f:be:31:ae:
         c1:3d:9e:b9:e6:6b:96:46:69:37:89:da:27:8b:72:96:07:9b:
         b2:49:0d:46:30:7c:b7:e6:6b:59:5c:b2:2a:36:4b:4c:6e:fb:
         0d:1e:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:58 2026 by rpki-client