Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa
File:                     0dddb317-e068-304d-a813-9a6f7126fb75.roa (raw, json)
Hash identifier:          v9hvx/hMdETXu/EpKNu3ELCvZiPLK3gk0Ewji8rIg98=
Subject key identifier:   6C:BD:89:66:5A:BE:18:F9:81:41:DD:2D:0C:F4:4D:D4:57:90:E1:53
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584D1707D9E1DF768D13DD15D680
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     401243
IP address blocks:        2602:2b5::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:d9:e1:df:76:8d:13:dd:15:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=a78f685d-25a1-485b-8eb9-a2e4c2b35d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:4d:5d:ec:b1:cc:84:ad:d3:84:c3:8e:72:
                    d0:cd:54:11:0e:63:13:28:5c:6c:c1:1e:54:16:ef:
                    69:1d:b0:85:76:87:f4:6c:ef:78:42:f2:21:95:7b:
                    0e:f4:91:58:33:10:87:4a:cf:77:8d:8f:fe:f5:24:
                    fc:df:be:4c:20:15:7f:72:a8:06:50:1c:46:cd:72:
                    14:79:b8:ef:1f:82:33:90:07:22:c6:68:93:81:6f:
                    8a:2c:a9:77:41:29:3f:4b:73:7e:9a:ec:48:4c:57:
                    69:55:9e:32:3a:78:c5:e9:8c:40:a5:38:5a:b5:6d:
                    1b:af:64:ef:6b:e9:aa:00:54:7c:73:0c:06:6d:68:
                    64:01:bb:d9:35:c3:c1:35:0d:22:2c:24:66:2b:e7:
                    64:ee:18:8d:60:e3:90:49:79:b2:49:ba:65:f2:ba:
                    33:2a:fb:43:7a:71:4a:22:82:64:04:c6:aa:5e:d6:
                    bf:09:1e:6c:ac:50:6c:79:a1:5b:3f:1d:b6:d1:03:
                    63:40:bf:fc:d3:bb:3c:29:7e:59:b8:8e:a6:ee:b2:
                    e8:11:de:4c:3e:bc:0a:e6:c8:60:87:55:3f:21:97:
                    ef:f8:82:b9:3f:48:c5:92:4a:0b:3a:cf:fd:cc:c8:
                    51:45:5d:ac:a9:d0:b2:06:d0:b8:26:dd:9c:49:ba:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BD:89:66:5A:BE:18:F9:81:41:DD:2D:0C:F4:4D:D4:57:90:E1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:af:65:fd:3b:f1:42:3b:79:5e:0e:2c:69:7d:62:8b:5f:e6:
         38:f0:c1:a9:a2:c0:14:12:62:e4:f7:11:32:65:c8:70:be:af:
         db:81:02:e2:a9:b5:6c:2c:37:a6:69:a0:c4:3f:a7:41:83:40:
         f4:32:4e:05:ec:b6:8f:d0:33:79:88:00:2d:73:e9:2a:73:be:
         7a:b8:70:27:5c:98:88:cf:9b:1f:07:79:84:a2:2f:27:3d:17:
         ca:61:e1:49:cb:1b:95:37:2d:4e:61:12:d8:0c:2e:02:24:cb:
         6f:64:a0:16:cf:ae:80:60:7f:fa:27:fe:11:e3:b4:17:8e:f1:
         01:5c:de:3a:86:67:48:10:a3:c7:d8:59:e9:9d:25:0d:f7:33:
         21:01:3e:43:88:e5:98:2a:1e:c8:3a:55:27:76:60:38:3d:ab:
         a2:7c:b2:9e:20:ca:50:14:20:f2:e5:8f:3d:e5:bd:2e:80:25:
         ee:d4:30:6d:f1:b0:a4:ef:e5:15:cc:c1:e8:27:a4:08:0f:3e:
         2f:94:a8:c3:91:a8:1b:80:da:c5:11:5e:c6:aa:b3:5d:dd:2c:
         98:7f:02:58:08:c1:cb:f8:d4:27:39:9c:1f:c7:91:3b:35:05:
         bf:26:bb:b6:a2:1d:c3:cc:c3:01:e7:fa:3f:15:21:56:5c:94:
         01:d5:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:40 2026 by rpki-client