Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa
File:                     354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa (raw, json)
Hash identifier:          7K3wdNhXV3GT9z3TlQH4QD8Wy68s7YNL9g8h2vYouw8=
Subject key identifier:   72:05:FB:1E:59:56:9A:59:77:A2:07:24:46:F0:F2:35:87:04:F0:DF
Certificate issuer:       /CN=467861ee-0aa8-4688-af94-7d540e2ddc56
Certificate serial:       010D0C9F4328584D44FA3D0565290DC737E4ADC0
Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     400529
IP address blocks:        2602:fabf::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3d:05:65:29:0d:c7:37:e4:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=c2f43f31-02f3-485c-a44b-c90cd54e1bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:42:aa:4f:79:80:8d:04:c2:d7:11:81:54:
                    8d:79:60:05:56:77:f3:15:64:90:58:0b:7b:5e:f1:
                    1a:c6:07:8f:ee:c6:f5:22:7e:c5:66:39:36:d9:e1:
                    0f:18:d3:a4:c1:1f:70:70:11:c4:f9:2e:1a:ea:e4:
                    af:04:43:04:59:fa:0a:a7:38:de:de:6e:77:9c:6a:
                    18:3c:8c:3d:d2:81:d3:3f:93:61:c0:83:93:7e:c7:
                    23:2a:1e:b1:7f:bb:f2:a5:4a:b6:ba:c5:e2:e4:19:
                    6a:01:a1:5e:78:3b:33:b1:b0:b5:0d:ce:fe:2d:13:
                    71:d0:59:ff:c0:0e:51:08:dc:6d:22:14:ea:36:c0:
                    35:d5:f0:d0:78:ca:c7:e5:9d:f4:f1:c7:b1:4a:f9:
                    6e:57:ec:52:25:4d:4a:f6:83:7d:89:14:16:4e:87:
                    d1:68:6d:4b:bc:03:fe:ed:de:e5:1d:c9:79:e5:b1:
                    c4:ca:d7:be:47:c9:9f:db:fa:1a:25:bf:3e:1b:d8:
                    ba:12:ed:77:f2:0c:d9:b4:1e:41:72:b1:2e:86:81:
                    71:d9:f1:3b:96:cd:b1:fd:b8:24:03:dc:6a:02:57:
                    fb:58:66:ac:3a:10:f4:2b:b5:d4:24:7a:4c:e8:4b:
                    92:5f:10:85:7b:f5:f0:78:47:85:0b:7e:34:16:75:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:05:FB:1E:59:56:9A:59:77:A2:07:24:46:F0:F2:35:87:04:F0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl

            X509v3 Authority Key Identifier:
                keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:75:76:e0:6d:89:89:68:74:cd:d4:fb:37:70:19:9c:ec:4d:
         ff:07:90:aa:8e:52:f3:27:20:1d:95:1a:a8:32:07:f2:27:79:
         65:a9:e6:a0:2f:f6:f4:22:64:91:9d:71:e6:34:29:d8:5b:65:
         a7:1d:ea:56:51:84:71:ef:86:db:c4:0d:61:ef:f4:d1:86:21:
         d6:a4:ea:b5:7d:aa:db:81:ad:13:1c:7b:d4:a4:d2:24:16:f3:
         21:7a:7b:14:a2:3a:33:e6:14:f3:9d:09:f4:71:5a:47:84:23:
         15:cb:cf:da:46:48:63:e3:03:ff:e8:7b:e5:ca:00:2c:be:f0:
         ea:38:ce:7b:de:72:11:9c:d7:f4:83:0b:d5:ad:3d:74:01:90:
         5b:2e:da:7f:01:88:1f:04:e2:4b:10:25:98:a3:71:3e:ad:3a:
         60:6f:9e:89:dc:d6:ae:65:42:fe:5e:4a:7b:36:54:30:47:65:
         cf:b5:b9:b4:52:67:8b:5e:bb:30:6c:2a:b2:df:de:ce:72:2d:
         33:7e:1d:5e:be:e7:38:80:20:de:57:3d:cc:1c:04:3a:87:a6:
         c5:3e:fc:0a:94:46:d7:f8:75:17:39:49:4d:8d:98:bf:28:65:
         1c:e5:b2:02:d9:50:08:e9:a1:fd:97:75:60:47:1b:86:05:d9:
         79:2c:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:11 2026 by rpki-client