Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/f84550fa-09d1-3b5d-96a7-925c421561fa.roa
File:                     f84550fa-09d1-3b5d-96a7-925c421561fa.roa (raw, json)
Hash identifier:          LANNGdfVh1UogfQIBRCmqpFwsvYrm1IMP/3/lafy+Fc=
Subject key identifier:   1B:A4:2E:63:02:2B:B3:0E:21:95:7D:11:19:07:77:9C:CA:7E:6F:B7
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584D492A6B36571A94DCBD26BA80
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/f84550fa-09d1-3b5d-96a7-925c421561fa.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     203283
IP address blocks:        2602:2db:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6b:36:57:1a:94:dc:bd:26:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=2d1453f6-a062-44e9-9ff7-72e507789d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:24:90:11:86:39:2c:c4:19:f3:47:ef:46:
                    1f:2a:ab:6c:f9:9b:58:92:66:01:84:5b:b0:49:77:
                    3f:e2:bf:23:1a:67:80:67:47:9c:90:ff:de:ce:76:
                    a8:de:5e:fc:00:57:d6:7b:b8:eb:18:81:7e:bc:a9:
                    6e:53:72:03:3a:dc:68:84:57:e4:e6:b6:79:fc:bf:
                    44:54:7e:b0:61:5d:c1:7d:a8:6d:a6:d9:a9:4e:6a:
                    ca:ee:06:d1:6c:93:a1:9f:ed:3c:b5:15:a4:a1:60:
                    5c:62:dd:9e:6f:9e:5e:6a:f2:85:7f:90:57:90:9c:
                    a9:bf:5d:a7:29:af:de:85:e5:0f:9b:c6:14:c7:a5:
                    8b:34:d5:c7:c8:3c:98:54:e3:78:d6:c6:99:ac:ff:
                    2d:02:27:7c:e7:fb:91:43:c4:6a:82:46:b8:0a:c0:
                    3a:6b:76:0c:28:55:c5:f3:5c:2c:29:a7:13:ac:a0:
                    2c:d2:5e:4d:c9:c7:d2:19:d5:53:f2:31:69:bf:d5:
                    eb:b6:8d:bf:b4:dc:fa:12:8a:69:00:80:70:20:61:
                    8b:db:9a:9e:bf:f5:6f:f0:8d:a8:09:5d:47:1d:b3:
                    82:f8:aa:d2:e3:c7:c9:f7:ca:61:22:24:6c:56:c8:
                    f7:4f:22:9c:f7:69:27:92:dd:39:a2:c4:8a:f8:f6:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A4:2E:63:02:2B:B3:0E:21:95:7D:11:19:07:77:9C:CA:7E:6F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/f84550fa-09d1-3b5d-96a7-925c421561fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:f6:1d:76:4c:f0:e2:17:36:75:20:3d:97:ef:b4:df:04:
         cc:53:00:4c:9c:39:fc:95:e3:34:ec:8f:22:3c:f7:32:cd:d3:
         e0:c4:57:17:38:d2:97:36:0e:d4:64:63:95:38:a1:3f:56:d8:
         75:31:e2:53:78:82:af:a4:0b:74:85:de:56:6f:ac:0f:0c:61:
         3d:57:6f:e1:c3:9f:7e:b5:86:87:89:28:85:7d:b8:c9:f7:17:
         e3:50:bd:6a:0c:2c:96:21:35:e1:74:80:77:96:c1:2f:6a:83:
         26:d1:8e:74:b3:80:88:14:58:e1:8c:aa:cd:84:d2:db:ac:f7:
         cd:cd:cc:39:f2:89:47:67:55:7c:b6:8b:8d:db:d5:93:3e:fe:
         e1:06:78:86:55:aa:af:e3:bf:ef:0d:ae:f0:de:0c:cc:dc:02:
         15:52:f5:fd:da:2e:5c:0b:35:4d:ab:f9:37:3e:29:a9:3f:c4:
         4f:d6:d3:a5:24:40:fa:38:a7:76:c1:c1:de:ca:6f:91:00:46:
         a6:a5:72:6d:a3:8e:dd:ea:75:79:5d:68:fb:af:89:3f:ca:96:
         43:b5:4e:40:95:b0:1e:6b:4a:38:b2:eb:06:8f:e3:26:31:71:
         1f:d3:c0:36:ef:e7:0d:af:b1:fa:0b:7f:3c:92:9a:a6:be:7a:
         82:69:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:29 2026 by rpki-client