Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa
File:                     8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa (raw, json)
Hash identifier:          HBNyQzfLAn5LRjEy3s5BvxaYCPKB25UEAMCDwK1r6aQ=
Subject key identifier:   73:04:A8:73:14:E5:62:6B:80:58:BE:E5:A3:3C:73:02:46:98:CE:EC
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584D0EA7B943C4081195F03EA300
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        2602:fa36::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:b9:43:c4:08:11:95:f0:3e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=cbe08aea-67ac-4cba-9b63-d144ffef5a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:e4:3b:aa:57:e2:20:44:6b:4b:36:32:2b:
                    90:eb:92:b5:e0:9d:f5:37:2d:70:99:db:29:f7:1e:
                    61:31:9f:19:51:ea:03:9f:f6:8d:f4:32:97:3a:6c:
                    68:07:63:6d:f7:67:18:d5:cb:86:16:b1:f5:f0:38:
                    b8:e9:71:e1:69:86:8a:d1:17:60:59:7b:54:aa:e5:
                    3d:6e:67:58:4c:a1:9f:47:46:1d:9e:64:78:4d:0a:
                    61:b1:9b:bd:fd:39:8a:63:19:99:ee:02:24:0a:64:
                    9b:c2:d7:77:0d:1f:a6:eb:88:d7:a3:61:b8:4b:f3:
                    e6:d5:5b:12:bc:39:30:f0:e8:1c:e7:80:84:09:b3:
                    1d:d3:9e:c2:0b:57:d7:75:29:ec:db:29:5a:62:81:
                    28:dd:41:0a:11:f0:1f:7a:9d:44:07:9c:af:b2:36:
                    63:c4:42:74:61:4d:d7:74:4c:4a:f2:10:ea:6d:69:
                    b9:e9:db:2c:05:3e:28:a1:c9:d9:53:f5:a1:4f:45:
                    1b:b1:9e:0b:f6:0e:5d:c8:90:49:36:cf:06:c1:6d:
                    75:e0:23:87:17:4a:34:e0:06:2e:1c:7a:ad:f4:86:
                    c8:2e:0d:6b:63:76:7c:94:12:7d:c7:38:6f:5b:a7:
                    15:71:43:21:f2:73:9e:4a:29:dc:6f:ab:14:53:17:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:04:A8:73:14:E5:62:6B:80:58:BE:E5:A3:3C:73:02:46:98:CE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa36::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:0a:b1:da:0d:4b:64:67:f5:2d:89:c9:a9:2e:82:7f:d1:
         8d:0f:fe:d2:e3:02:58:64:27:f1:dd:6c:7a:2c:1b:5c:3f:f3:
         94:03:d4:47:d1:fe:8c:a0:2d:f9:a0:04:94:f0:c6:02:ab:9b:
         3e:49:fa:22:9a:0f:21:d8:b6:ab:81:a0:a9:c7:ec:ba:df:88:
         af:00:2b:b7:d8:86:96:0d:f4:bf:fd:0a:12:fd:de:81:4b:21:
         28:c8:71:c3:4c:40:6c:ce:a9:c3:a8:9e:66:29:29:e2:a4:85:
         38:98:9b:4c:48:24:84:3f:b3:60:4c:56:71:ae:68:fd:b5:f6:
         3b:0b:8a:a3:b2:84:49:ea:9a:9a:ae:5f:74:d4:96:a3:2a:77:
         36:bd:b7:44:7d:e6:b7:f2:eb:5b:f8:4f:bb:ab:12:c9:c7:18:
         b8:3d:a7:6e:61:a5:a1:cf:9a:ee:62:f7:50:13:22:da:f5:42:
         fb:d0:14:79:e0:f8:64:d8:bb:7b:fe:0c:02:84:00:80:ba:8c:
         48:4a:0f:e9:a8:4f:f6:ba:d4:4d:15:b7:9e:a5:87:c5:32:87:
         09:ce:57:45:d4:85:1c:dd:21:e1:c8:bc:fc:a3:06:de:f3:9f:
         cb:16:62:8b:9f:b0:d9:82:6f:d8:99:7b:c9:b5:38:bc:bb:89:
         80:94:3e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:54 2026 by rpki-client