Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa
File:                     7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa (raw, json)
Hash identifier:          evKCjwOMX3+/XAMXE/W+cfggAGcim+QYiQeQP3GSCT0=
Subject key identifier:   C1:B4:28:50:F7:AD:A1:64:09:B2:5C:A2:0D:35:35:7C:07:49:39:C5
Certificate issuer:       /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial:       010D0C9F4328584D1B1A65C07E5FDED74A5B3A60
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     17034
IP address blocks:        2602:f5e8::/37 maxlen: 37
                          2602:f5e8:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:65:c0:7e:5f:de:d7:4a:5b:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=aaa08029-14cd-4eb3-9b87-ead806bc1711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:11:83:08:6f:3e:8c:ba:17:6d:ed:0c:75:
                    40:c7:46:6b:79:88:33:61:df:17:f5:89:1c:66:9d:
                    43:8d:5c:eb:40:bc:6c:21:99:8e:65:dd:26:9a:b9:
                    c4:fc:8b:3d:35:de:79:b6:76:68:ac:81:d8:52:85:
                    94:46:f1:ab:d8:16:8a:7a:bb:76:9b:99:7b:d2:c0:
                    56:dd:f4:43:4b:89:d9:1c:75:a7:43:cc:ed:0c:e3:
                    b6:fa:d6:57:cb:bb:74:51:30:6d:cc:45:0a:a6:3d:
                    87:c1:69:08:bc:55:b9:68:57:20:d4:2b:18:89:24:
                    81:95:9d:0d:27:52:c1:c6:97:20:b5:d2:d1:cd:a7:
                    87:72:ca:a3:42:4a:a1:66:69:4d:39:05:3d:de:29:
                    f2:9b:4f:4b:4e:13:cf:51:65:e6:39:af:0f:47:74:
                    ce:05:78:5f:7d:f6:8b:e8:be:45:e1:3f:2a:d0:38:
                    50:10:08:36:6d:1d:2a:7c:d2:21:da:d2:45:76:e6:
                    99:ac:3d:4c:e4:a2:32:20:d3:0b:2e:1d:34:db:fb:
                    1f:d5:2e:e2:0b:4e:be:cb:2f:38:ab:43:9a:5a:24:
                    7e:7d:81:60:16:7f:8b:4c:5d:26:90:3d:2a:82:71:
                    61:d6:ce:4e:7c:6f:9d:2c:6a:f1:68:b8:9b:ac:e1:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:28:50:F7:AD:A1:64:09:B2:5C:A2:0D:35:35:7C:07:49:39:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5e8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:60:95:53:d1:ca:59:74:93:12:81:46:5a:ce:36:ca:b3:0b:
         6e:f2:3e:7f:e6:59:e3:70:ec:03:66:65:8e:a1:52:e6:8f:2d:
         11:3c:69:d8:81:03:5b:1c:09:e0:3f:a7:5b:87:4d:70:8c:6a:
         60:b4:f7:cc:a3:5e:f8:b4:0d:27:4f:a2:87:82:46:b4:79:22:
         9e:e0:e4:9a:06:fc:f4:d9:c1:0e:64:a0:08:b2:9d:44:fb:37:
         ef:03:54:c3:78:ce:07:df:89:8f:89:5f:bb:01:0e:c0:a9:27:
         93:34:a3:34:1f:d3:7e:d7:e9:38:48:b2:00:ed:37:4e:59:a9:
         f1:74:03:7a:ab:c7:7f:0b:0c:e9:3d:d7:c1:58:fa:37:c6:a3:
         98:64:6e:4e:33:28:28:0a:c3:56:b2:d5:ae:b6:eb:e3:9b:e9:
         36:76:d0:1d:5f:ee:53:94:cd:48:bc:31:4d:54:2b:25:bf:96:
         13:4e:a8:8e:72:a5:71:b1:c8:c6:c5:82:fa:4a:c7:c7:0d:cf:
         2d:31:e0:7f:10:a8:69:b7:e5:2c:dd:a5:d2:ed:70:9e:4e:02:
         2e:cb:c1:2c:dc:33:54:45:41:cb:fb:f6:14:90:24:a7:43:6f:
         d3:e1:e9:e6:85:fa:36:fa:80:db:b4:13:c9:28:4c:a7:a3:77:
         bf:d9:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:36 2026 by rpki-client