Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/25220123-7101-3a64-bce2-034598454027.roa
File:                     25220123-7101-3a64-bce2-034598454027.roa (raw, json)
Hash identifier:          +6yUJ7N4XvKdwUT03Pm3y8aetDcmUQUKvOopFlNqI8k=
Subject key identifier:   F6:6C:8F:2E:F6:E0:BF:F2:F1:D0:F5:63:F2:38:E8:CE:A6:1F:9F:5F
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F4328584D2BDA379C73F4AE3DE616EC80
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/25220123-7101-3a64-bce2-034598454027.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     213510
IP address blocks:        2602:f718:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:37:9c:73:f4:ae:3d:e6:16:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=869cb55a-77ef-4b18-8167-85325d7f8cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:c2:7c:5a:ce:11:c3:1b:54:9e:01:c5:77:
                    4d:af:a3:87:0b:03:c2:85:5f:f9:e4:80:39:bd:81:
                    ae:99:69:58:df:6f:25:81:6e:c5:36:e6:bf:49:4d:
                    f8:32:16:e4:d0:80:fc:a2:b4:28:a2:4a:fa:2e:78:
                    58:14:9e:52:38:77:81:c3:a4:5b:67:9e:09:32:9c:
                    67:ea:7b:83:a6:4c:0c:c9:9e:f4:5d:c8:26:c3:22:
                    0a:47:60:76:19:cb:1a:77:c9:50:bd:bc:21:b8:f3:
                    ae:bd:ad:40:8f:7b:78:66:ea:fe:d6:92:40:30:36:
                    33:fc:d0:2c:bb:71:c6:0c:91:07:0a:87:a7:e8:68:
                    89:d4:7d:5e:53:46:3b:af:ca:a3:87:86:41:26:34:
                    5a:28:11:62:e3:75:5e:23:39:8e:69:5b:2f:bb:14:
                    5e:38:4b:dc:83:a4:e7:31:ab:0b:64:5b:67:27:6b:
                    68:a3:9a:8d:bd:1b:71:45:a3:b6:6c:d4:76:08:6f:
                    5b:9b:36:8f:bd:61:70:d5:d4:fc:52:b8:88:5f:f2:
                    cf:92:21:cf:73:e4:34:a9:e6:e0:b3:59:5c:91:15:
                    2a:89:0e:7d:5a:ba:65:a8:cf:98:6b:b0:3d:1e:15:
                    36:7e:c4:37:86:eb:e5:8f:6b:19:68:94:88:a8:c9:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:8F:2E:F6:E0:BF:F2:F1:D0:F5:63:F2:38:E8:CE:A6:1F:9F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/25220123-7101-3a64-bce2-034598454027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f718:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:50:f9:3b:a8:49:f7:93:c1:ee:12:1a:a8:85:f5:6f:e2:
         d9:b8:52:94:2d:ef:40:af:13:8b:e4:91:ff:dd:1f:ea:3d:55:
         e2:cd:7b:96:3d:e0:62:4f:42:0b:bc:2d:54:d6:8d:93:c2:e5:
         0e:f9:a6:de:54:66:53:ab:b2:76:9f:df:ff:87:af:e7:6e:9c:
         90:76:df:0e:ea:6a:16:f5:81:f0:aa:bc:f5:be:73:1a:68:fe:
         ba:7d:16:5c:26:dc:9b:fa:e3:20:ff:e9:8b:25:82:75:11:9f:
         10:1e:61:4a:65:a3:6c:90:18:e3:87:8d:12:7b:4a:dd:d7:24:
         b5:ee:4d:3e:2a:3e:2d:8f:7a:ca:d2:21:71:49:f2:1c:26:36:
         8f:d9:9d:df:98:57:06:65:6e:6a:94:3b:de:f3:47:72:d7:60:
         d2:aa:1f:30:6a:df:fa:b8:62:62:50:21:86:ab:dd:b0:9b:94:
         da:28:f2:c2:f8:a7:ad:b3:99:29:fe:c3:f7:7b:e7:3e:10:d5:
         9b:65:98:e9:86:16:63:b5:e6:71:92:9a:17:8f:8a:d0:e3:97:
         b5:69:b0:8a:51:35:de:9f:9b:59:2f:9e:dd:12:a1:7c:14:d7:
         7b:c5:32:e1:76:a8:08:00:4e:af:f8:b6:d3:b4:29:cd:03:ab:
         5e:3f:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:52:09 2026 by rpki-client