Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/ce053d09-f21c-3334-839d-0508d243d566.roa
File:                     ce053d09-f21c-3334-839d-0508d243d566.roa (raw, json)
Hash identifier:          tBB0YRzrKXmf7yO9UTbfTrVK1Mx1EFxyU0uXMT2Qe2o=
Subject key identifier:   EE:2B:12:D2:35:6A:2F:F6:3A:D9:AA:AA:8D:39:44:3D:87:BC:6F:4F
Certificate issuer:       /CN=cb37a4d1-f648-421f-ac14-b83d37a0c615
Certificate serial:       010D0C9F4328584D2BDA10220A3145A64DC9CE80
Authority key identifier: 72:08:4E:86:A9:1B:7D:76:23:E1:97:80:06:A1:8B:05:D9:7A:4C:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/ce053d09-f21c-3334-839d-0508d243d566.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     398399
IP address blocks:        2602:810:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:10:22:0a:31:45:a6:4d:c9:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb37a4d1-f648-421f-ac14-b83d37a0c615
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=7a96760e-1a34-4d84-a8c3-ab0430f8a658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:7c:5f:0e:60:98:3c:4d:68:20:a4:da:93:
                    c5:f4:38:dd:1e:8c:89:22:85:ee:d1:16:8a:a7:1d:
                    20:00:9a:ab:6a:8f:c2:ef:74:a9:1d:83:00:e8:18:
                    1e:22:0b:ae:2f:42:bf:a9:ab:30:c3:97:de:bc:32:
                    55:7c:ee:2f:3c:de:08:ca:68:09:95:11:b2:54:54:
                    53:3e:36:14:17:ba:8d:86:ed:49:a5:4c:55:01:9d:
                    d9:f7:67:00:32:67:c8:4b:85:9e:55:1c:63:7f:54:
                    92:de:67:b3:04:9e:46:d6:e6:d7:95:c9:cd:80:d5:
                    d0:c1:6e:a9:03:8c:d4:93:3d:0f:9e:37:3f:24:fc:
                    b3:bc:bd:c1:11:d6:28:b9:d1:1e:2d:f2:bb:ee:df:
                    cb:6c:fd:25:63:de:22:34:04:ce:4c:36:6b:b0:15:
                    7c:03:59:d8:33:13:4e:9f:e7:ed:87:bc:17:79:8c:
                    11:88:70:d9:80:6b:c6:e2:c9:5b:fe:8b:d8:d9:66:
                    2f:e5:44:44:af:c9:a1:1a:0f:67:2d:c8:5a:68:55:
                    fe:12:01:ac:39:1f:e1:38:90:d7:52:19:85:fd:b2:
                    d0:e7:19:83:0f:e2:57:3e:29:e6:09:49:79:a1:56:
                    0b:31:15:ce:1e:86:81:21:f7:47:e1:1d:09:8c:57:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:12:D2:35:6A:2F:F6:3A:D9:AA:AA:8D:39:44:3D:87:BC:6F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/ce053d09-f21c-3334-839d-0508d243d566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.crl

            X509v3 Authority Key Identifier:
                keyid:72:08:4E:86:A9:1B:7D:76:23:E1:97:80:06:A1:8B:05:D9:7A:4C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:29:c4:28:d1:b7:ef:6f:d7:cd:6b:3f:65:06:06:01:39:
         1f:3c:a7:96:99:7b:85:c1:d8:9b:3f:4a:2f:20:e4:a8:01:03:
         68:91:46:df:ab:01:38:a4:2e:4c:8d:32:b7:41:df:6e:6c:c6:
         3d:36:0a:79:84:a3:df:58:72:48:17:71:d8:0c:5e:e7:5a:ce:
         5f:5d:8a:20:81:93:29:e9:26:62:2d:de:f6:7d:1d:f5:e4:a2:
         c1:bc:73:2b:8c:67:05:55:9b:09:74:de:62:c8:93:93:2a:23:
         21:f0:30:d7:4e:8a:5b:a2:0b:16:e3:04:0e:b6:a0:03:97:6b:
         80:5b:5b:65:7e:db:29:9c:cb:95:df:cc:29:62:59:bc:f0:dc:
         05:00:3a:8e:03:ea:74:9b:70:b9:f5:c1:39:5f:be:29:37:e9:
         23:be:eb:10:7a:7d:63:b0:99:10:f8:e1:41:8e:72:48:f9:fb:
         d0:86:3e:83:fc:6b:17:9f:33:34:44:1f:71:1c:1a:81:f3:0b:
         f5:dc:c5:a8:81:bf:b4:80:42:2a:68:d6:80:44:78:51:53:66:
         80:06:aa:e7:14:fc:78:c1:29:5b:13:96:c2:6a:0e:3f:7d:bd:
         43:73:3c:00:b3:23:c7:95:9b:89:5d:c3:e2:3a:76:65:28:8e:
         ce:1a:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:09:01 2026 by rpki-client