Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2507cd62-6c07-337f-94d2-c254c2006eb9.roa
File:                     2507cd62-6c07-337f-94d2-c254c2006eb9.roa (raw, json)
Hash identifier:          wUW5foIb6cpCuoXpoutTy/MOwCATOgNE+c9kNN9HFkQ=
Subject key identifier:   88:C0:F3:E8:7A:B0:A7:8D:1A:39:AF:97:AC:E7:A4:FA:C0:F1:01:8B
Certificate issuer:       /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
Certificate serial:       010D0C9F4328584D39CF8573E12692EEA28E69C0
Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2507cd62-6c07-337f-94d2-c254c2006eb9.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     40448
IP address blocks:        2602:fa83:b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:85:73:e1:26:92:ee:a2:8e:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=7c20e50d-8afe-4d82-aeff-fd8d8713912e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:9e:7e:45:6f:db:98:21:2c:dc:25:6f:88:
                    1e:32:97:34:b6:38:6c:2c:83:14:ed:90:6e:75:55:
                    40:d2:7f:65:7b:51:c8:0b:46:9e:85:90:88:cd:26:
                    a3:c0:66:bf:a0:a0:24:88:e5:d7:18:26:05:7e:df:
                    be:e5:59:40:f6:36:83:84:b8:87:18:b5:1f:ba:fd:
                    99:75:41:42:7f:a2:cf:87:41:75:d2:b0:7d:c4:f8:
                    f8:59:6d:9f:44:9f:2b:aa:3b:77:c0:46:3d:59:13:
                    51:27:df:26:10:90:9b:ae:8f:ec:cf:1a:b1:30:c2:
                    b9:90:a4:74:86:65:30:a5:f6:65:02:63:11:c0:ac:
                    19:85:ee:a7:c7:c4:d8:e7:32:37:4c:98:36:62:f9:
                    f5:97:44:95:91:7b:81:1b:d6:77:c7:4e:43:39:b8:
                    aa:87:01:c2:f6:36:51:74:d4:43:af:b8:54:93:0d:
                    75:f2:55:f8:f6:98:cc:3c:d8:45:6a:06:77:a2:18:
                    71:cf:3c:53:8e:d7:6e:d1:62:8f:3a:9b:d7:84:9f:
                    e1:b3:ea:c5:dc:b7:00:e7:12:d7:54:45:4e:72:38:
                    33:97:2c:03:71:61:4b:4d:22:b5:a6:86:b9:e9:20:
                    bf:d3:72:74:a6:a7:79:4d:10:99:6c:de:59:98:f2:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:F3:E8:7A:B0:A7:8D:1A:39:AF:97:AC:E7:A4:FA:C0:F1:01:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2507cd62-6c07-337f-94d2-c254c2006eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl

            X509v3 Authority Key Identifier:
                keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa83:b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:36:01:92:bb:7b:9b:66:83:d9:f4:9b:f9:a9:e6:51:06:68:
         0a:c7:5b:42:c7:45:e8:b1:cf:10:77:74:40:7d:9d:8d:6d:14:
         96:a9:64:f7:27:a9:34:d2:2b:ec:0a:d8:09:46:5c:a6:cd:93:
         04:1d:2e:7e:e6:3d:25:59:d3:6a:3e:27:06:c0:d6:d4:63:c6:
         77:c2:22:98:73:3b:5e:8b:7c:37:91:75:6e:6a:f5:6c:c9:9f:
         b0:dd:ce:47:76:b8:80:f8:5f:e9:40:dd:26:ec:94:8d:29:1c:
         d9:0c:ac:f9:1f:50:4a:d1:08:8f:d6:03:7b:5c:24:31:1a:d1:
         78:6c:cb:f4:38:b5:0f:da:32:f4:85:a1:e4:74:66:f4:a7:5d:
         11:26:1d:1a:33:65:73:54:31:03:85:cd:b6:f7:8e:c7:07:14:
         55:10:9b:9b:ae:61:2c:42:3a:e2:56:66:c0:a4:1e:b9:7b:05:
         47:f4:cf:dd:f2:dd:ce:1f:e8:ba:92:86:cf:f9:55:9b:00:7b:
         1a:e0:6f:e3:a0:51:c7:f7:64:44:35:8f:2f:00:7d:55:24:87:
         e9:23:38:15:6f:b9:2d:b2:be:6d:f4:2b:12:54:a4:36:76:08:
         1f:6f:14:9b:e3:c8:5b:86:49:43:5d:12:ef:ca:d9:8d:c6:c3:
         c1:9e:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:56 2026 by rpki-client