Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/c0c33abe-6284-3c14-9fd9-0e182778fc05.roa
File:                     c0c33abe-6284-3c14-9fd9-0e182778fc05.roa (raw, json)
Hash identifier:          npPFEEfFX7NGvZdvzrERqNE+ejDPQ0A6rAv1KHtIHhc=
Subject key identifier:   27:6B:58:56:94:22:79:46:93:FC:7C:E0:C8:04:BD:97:57:1C:F5:BC
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584D492A53C65E9E58819DE25C80
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/c0c33abe-6284-3c14-9fd9-0e182778fc05.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     138915
IP address blocks:        2602:fa80:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:53:c6:5e:9e:58:81:9d:e2:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=467a0cfe-eb7f-4b60-a1a6-9e49c137902a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:53:a9:da:c1:20:11:b5:f3:48:d6:40:2d:
                    e3:6f:f1:ad:4c:f9:ec:14:16:6f:ee:34:92:50:ff:
                    d6:6c:a1:11:ce:52:19:aa:d9:6f:00:95:b9:9e:5f:
                    d3:5b:82:08:32:44:f2:99:b6:36:8f:bf:ac:ff:82:
                    b0:28:22:06:a1:ff:58:4b:ee:57:da:33:c5:2d:2f:
                    4c:73:84:1c:0c:c3:b4:90:d5:7a:1c:9a:0b:49:64:
                    dc:15:00:1f:5e:0a:83:a1:88:57:e1:9a:83:87:35:
                    55:0b:b5:aa:a6:90:a6:f6:b9:55:58:e4:a5:5a:f1:
                    de:73:62:02:dd:79:d5:19:50:f5:21:77:d2:b7:25:
                    31:ad:ea:78:15:4f:fb:bf:fe:e0:8d:1d:20:fc:4c:
                    54:1f:f4:88:42:ca:f6:a8:d0:11:86:f5:8f:99:2c:
                    b8:62:59:7c:15:0a:f1:80:b3:f7:12:80:e2:78:c6:
                    3f:89:c7:22:19:b1:74:83:40:b0:38:59:5e:d2:53:
                    c8:55:ff:ed:01:b5:2b:33:84:e5:e0:9b:79:32:34:
                    7c:c2:63:56:49:49:60:a3:2d:17:7b:38:7e:10:74:
                    af:69:07:35:15:7e:e7:60:ef:2d:d5:0d:5b:c3:8d:
                    ed:fc:76:16:22:02:ca:42:50:9d:e8:95:03:a1:2d:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6B:58:56:94:22:79:46:93:FC:7C:E0:C8:04:BD:97:57:1C:F5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/c0c33abe-6284-3c14-9fd9-0e182778fc05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:66:ec:e0:6f:0c:5e:37:b4:a6:5c:75:98:e7:38:84:13:
         5f:f2:0f:b7:58:71:2f:5f:70:db:d1:52:30:f9:df:4c:0d:65:
         5d:d9:ec:64:d7:6b:10:6c:5a:8a:3e:7b:20:9b:06:41:ad:b5:
         af:e2:9c:c0:94:58:c7:55:25:30:df:d6:63:28:09:1e:5b:c7:
         2b:0e:9b:41:9c:4b:d4:5b:fd:06:2d:57:99:6b:88:3e:cf:9d:
         61:bb:e9:9f:a0:e9:e2:4d:d1:96:e5:0a:fb:8b:01:b0:85:e1:
         cb:ae:c2:37:81:c3:c2:c3:22:7c:49:14:0d:a6:34:a1:1d:34:
         2f:79:7e:9e:5d:3f:79:77:f3:0b:0d:f7:07:35:dd:1c:0a:27:
         ef:b5:91:fc:f6:ec:26:ad:45:4b:ae:3b:d5:7b:32:8a:b0:b1:
         ca:30:51:85:d0:a4:a8:b1:8c:e7:93:c4:70:f6:a9:ca:99:07:
         20:5a:4a:3b:34:cd:11:bd:56:ac:24:75:44:95:c7:27:80:a6:
         ea:15:cf:78:71:ee:3a:63:fc:9a:e5:b5:bb:60:be:b5:45:ef:
         04:60:94:36:2d:21:80:af:67:16:0e:23:10:88:ba:18:00:ad:
         f4:a7:a1:72:75:e5:c3:b6:25:1e:bc:a0:e5:35:01:a9:fc:fc:
         c8:2e:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:09 2026 by rpki-client