Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/7738cfbd-228b-37a1-955f-967d05afc623.roa
File:                     7738cfbd-228b-37a1-955f-967d05afc623.roa (raw, json)
Hash identifier:          x5a6u1E6VQr3NV815GvCqp8LXnWr+zHfrv3pmANujMk=
Subject key identifier:   81:35:22:23:1E:DB:2F:C7:4B:EA:E9:3D:B0:F6:DA:24:B1:B5:A6:CF
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F4328584D2A74DA55D2C1F44A99902400
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/7738cfbd-228b-37a1-955f-967d05afc623.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     400941
IP address blocks:        2602:f66b:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:da:55:d2:c1:f4:4a:99:90:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=aa8705fe-65dc-40ed-add6-b8c48f766f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:c4:26:26:5d:04:7d:7a:93:c5:ce:d5:23:
                    b1:6f:11:d8:c9:38:9e:c6:7a:51:20:20:54:7b:29:
                    59:ac:8e:28:61:5a:9d:a4:e8:f4:0f:1d:b2:0f:0b:
                    87:6a:fd:ab:80:a3:f5:1f:0b:3f:5d:33:cf:2c:e3:
                    f2:a2:dc:b7:d8:61:82:f7:62:98:00:25:20:34:52:
                    b6:19:15:5a:35:02:ca:ad:1a:1a:23:e5:27:f6:02:
                    c0:c0:e6:f2:cd:fa:55:37:fa:ed:21:35:35:f1:4d:
                    b4:ee:63:39:50:97:ea:54:48:3f:53:77:58:42:6b:
                    65:55:28:11:0e:80:c3:8f:6a:fc:59:f8:3e:83:85:
                    ef:67:63:ef:90:0c:21:ef:ed:ee:d3:4a:b5:0b:cd:
                    98:5a:cc:6c:e3:18:cb:f0:9d:09:92:33:75:05:4c:
                    91:7d:e0:d6:58:9f:df:fe:17:a1:6f:02:80:dc:b4:
                    53:a4:ce:11:64:23:79:2f:70:db:b8:93:d9:75:db:
                    2c:d8:54:f7:05:6f:9a:35:00:d4:28:02:c7:6c:0b:
                    2e:64:46:01:ce:31:c5:4c:22:f5:e9:fd:31:c4:1c:
                    64:3c:cc:95:77:0c:9e:13:74:80:0f:97:2b:d2:1e:
                    60:44:81:cf:a8:14:6d:03:f3:f7:1f:58:11:a3:5b:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:35:22:23:1E:DB:2F:C7:4B:EA:E9:3D:B0:F6:DA:24:B1:B5:A6:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/7738cfbd-228b-37a1-955f-967d05afc623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d5:a7:91:65:c2:6e:33:5d:f2:bb:52:bd:49:2a:b3:52:10:
         be:60:d1:25:4f:3f:f4:14:66:ee:5a:b2:c2:ec:29:d7:60:1a:
         64:90:ff:c9:fc:19:01:87:ef:6c:1d:b2:85:0b:fe:25:3a:ff:
         f3:4f:4c:85:37:b0:40:3c:48:5e:64:82:44:9e:0a:20:b3:58:
         a1:fd:cd:b3:c8:06:a1:9d:dd:84:b6:ed:3f:3c:ce:23:39:49:
         3a:7e:9e:cb:3f:db:36:54:37:26:8e:0c:81:1d:86:b3:ae:86:
         8f:3e:da:80:c8:17:eb:a8:cd:88:4f:85:7b:13:0c:92:0e:77:
         6d:0c:63:90:55:e4:8e:48:43:16:95:12:7d:db:0b:46:46:2e:
         d3:6a:ec:10:c1:8d:1d:2c:02:ff:c9:6f:b4:e2:ab:6a:44:9f:
         57:6c:5a:f2:97:59:9b:17:ee:2a:eb:05:be:b3:ef:b4:cc:3d:
         09:e1:5e:12:fc:fc:19:5f:8f:a3:2c:de:25:bf:8e:d6:cc:97:
         97:b2:95:cc:e1:c0:de:5d:40:5f:46:37:19:38:98:24:ca:c4:
         e5:cf:ab:04:f9:c5:8d:0f:fa:1c:81:f0:25:c9:8e:de:80:f8:
         b0:27:29:78:7f:08:b4:bc:ef:d7:79:ae:56:1b:00:cf:6a:d0:
         9f:b7:1e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:16 2026 by rpki-client