Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/127f78c8-92e1-3fb6-a0f6-47c9a8ba0883.roa
File:                     127f78c8-92e1-3fb6-a0f6-47c9a8ba0883.roa (raw, json)
Hash identifier:          W4GqRZmTD0UjVfBYg+HyUl6EzFpnOT3UIxwS2fXXzd8=
Subject key identifier:   AF:65:90:D6:DA:37:D9:A2:83:38:5D:FC:85:1B:F5:CE:F8:80:C5:E6
Certificate issuer:       /CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
Certificate serial:       010D0C9F4328584D186CF9601FC2F5A243BD58C0
Authority key identifier: 9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/127f78c8-92e1-3fb6-a0f6-47c9a8ba0883.roa
Signing time:             Sun 08 Mar 2026 02:00:31 +0000
ROA not before:           Sun 08 Mar 2026 02:00:31 +0000
ROA not after:            Sat 06 Jun 2026 01:00:31 +0000
asID:                     40253
IP address blocks:        2602:f494:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:6c:f9:60:1f:c2:f5:a2:43:bd:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
        Validity
            Not Before: Mar  8 02:00:31 2026 GMT
            Not After : Jun  6 01:00:31 2026 GMT
        Subject: CN=a881b4ac-d095-4393-bf00-4efd7ee2b967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:80:e1:90:9e:7b:aa:cd:ee:95:ef:ad:fd:
                    43:2b:8c:14:3f:c0:f3:36:9f:f0:e3:81:9a:b6:80:
                    12:b9:16:5d:b4:33:17:d3:75:30:fc:e6:57:67:d0:
                    a9:60:f2:29:36:f2:d2:6b:59:d9:29:5a:29:bc:f4:
                    15:87:ac:31:ac:ca:98:c4:f2:69:1d:18:6f:10:c9:
                    5a:39:47:4e:14:31:24:c5:35:7f:bb:c4:3c:50:59:
                    61:9f:ae:20:58:39:2c:d7:df:ba:ad:dd:92:82:e0:
                    d8:10:9f:07:92:e4:a1:62:fc:8a:da:69:3b:d3:3b:
                    71:b7:4f:ea:6c:38:86:83:dc:3d:17:c1:2d:2a:a7:
                    45:cd:df:89:83:bf:f6:08:8a:5c:6f:56:27:cd:ab:
                    ef:29:0a:d6:c1:7f:b9:e2:fe:82:b2:75:20:a5:83:
                    36:11:bb:d8:c5:ab:a9:dc:30:ee:a2:6e:7b:a7:03:
                    5b:9b:20:8f:1b:3b:05:11:10:07:f5:98:26:12:97:
                    75:c1:a7:7f:f4:60:52:24:48:9d:20:ef:3c:c0:4f:
                    26:d2:bc:33:aa:2e:80:3a:a2:9f:20:52:25:e1:af:
                    f9:7e:29:6d:b0:a2:3d:60:c9:1d:b6:01:5c:84:d1:
                    15:e5:0f:9c:34:b8:6e:b0:45:a1:ee:3c:6c:50:aa:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:65:90:D6:DA:37:D9:A2:83:38:5D:FC:85:1B:F5:CE:F8:80:C5:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/127f78c8-92e1-3fb6-a0f6-47c9a8ba0883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl

            X509v3 Authority Key Identifier:
                keyid:9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f494:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:fd:4a:3c:52:63:86:f8:04:9f:56:34:7c:db:3a:8b:fb:
         36:ef:86:97:f0:90:99:5a:33:6c:98:86:34:25:19:5d:fc:06:
         0d:98:0b:de:16:a1:a3:c8:04:e6:5c:d5:a5:77:b0:fe:d7:4f:
         bd:7c:b5:e9:98:b6:9f:00:a5:a1:63:82:04:86:20:d9:5a:7d:
         a8:ff:56:38:dd:00:6d:38:43:22:a5:03:47:01:cc:d9:62:6f:
         ef:56:b3:35:ae:75:a2:64:16:01:e6:df:23:a3:62:19:a6:96:
         89:6d:1d:77:58:b1:61:e1:ac:e1:da:b7:8b:db:d9:57:b5:b7:
         2b:bc:ba:a2:f0:58:52:94:76:05:88:6c:fd:82:3d:92:d9:ed:
         d4:d3:9d:12:96:47:62:9a:0e:4d:d2:df:29:6b:2a:68:8d:c4:
         16:99:cb:c6:a5:d1:60:d4:f1:4f:b6:b5:f9:fa:e9:81:1d:dc:
         b2:5b:4a:3b:5e:50:bb:8b:9c:5d:dc:06:36:3a:78:47:99:e0:
         03:54:7d:03:b6:57:a7:2c:e4:41:33:45:cb:91:f0:d8:c9:ab:
         39:62:38:ae:10:8b:b2:64:ea:b3:d5:8c:94:77:2b:51:64:50:
         a6:d6:9a:75:fd:47:c5:57:95:15:41:1d:c0:4c:a4:a7:dd:04:
         38:00:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:26 2026 by rpki-client